This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/5lccFV7z00Cs1oDdNniBnwJlbmg.roa
File:                     5lccFV7z00Cs1oDdNniBnwJlbmg.roa (raw, json)
Hash identifier:          EKtkvQVGangOVXfHSHz8QSCp4ca+LhVxZlvPGnv/+3A=
Subject key identifier:   E6:57:1C:15:5E:F3:D3:40:AC:D6:80:DD:36:78:81:9F:02:65:6E:68
Certificate issuer:       /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial:       019B7D5C4BAFEEF3BDC43515EFB233B098AB
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/5lccFV7z00Cs1oDdNniBnwJlbmg.roa
Signing time:             Fri 02 Jan 2026 06:19:19 +0000
ROA not before:           Fri 02 Jan 2026 06:19:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34397
IP address blocks:        193.194.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:4b:af:ee:f3:bd:c4:35:15:ef:b2:33:b0:98:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
        Validity
            Not Before: Jan  2 06:19:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e6571c155ef3d340acd680dd3678819f02656e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:1d:ac:17:8d:d6:55:02:04:db:44:88:53:
                    04:91:38:5a:38:80:c5:84:5b:f6:5d:e8:bc:59:64:
                    24:ea:19:e7:de:77:54:7c:4e:99:55:d5:a8:04:bd:
                    cb:f1:01:c0:1e:fc:ff:a9:b4:2e:f6:d5:82:05:87:
                    c1:7f:b2:14:c6:05:5e:23:6a:35:15:06:32:6d:25:
                    e0:75:c6:69:45:cd:66:52:62:fb:be:73:14:d6:9d:
                    c5:20:fe:56:35:2a:e3:1d:9b:6d:55:98:ed:fb:e3:
                    fa:bd:2b:07:d8:7f:1f:42:52:74:31:25:d4:09:ec:
                    27:7f:7b:fc:b5:e4:f5:07:f1:6c:b8:e8:c9:3b:9f:
                    55:07:c1:27:cd:5b:14:4f:ab:99:71:f0:ea:eb:1f:
                    26:ba:1c:c6:36:48:76:9a:71:80:fc:0d:aa:4c:6a:
                    6f:9e:7c:ee:eb:61:9d:d7:b0:b1:e2:11:d4:d9:c8:
                    ca:64:be:80:8a:42:9b:a3:9c:11:ab:03:99:45:f0:
                    fa:ae:94:af:12:44:42:2a:76:34:47:2f:b7:88:88:
                    b5:71:35:02:66:30:eb:ba:56:fb:49:0c:97:a1:95:
                    be:a0:72:23:98:6a:0b:ab:99:6d:30:73:71:27:1b:
                    16:1b:c7:6e:e7:d1:1f:e0:a5:99:b3:e4:7d:35:72:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:57:1C:15:5E:F3:D3:40:AC:D6:80:DD:36:78:81:9F:02:65:6E:68
            X509v3 Authority Key Identifier:
                keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/5lccFV7z00Cs1oDdNniBnwJlbmg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.194.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:70:7e:3e:bc:1f:54:fa:13:12:9d:99:92:b4:ea:ef:d8:9a:
         1c:ef:ea:31:22:72:b5:eb:64:5d:48:e0:e3:a5:a4:7d:13:f2:
         34:fd:86:dc:7c:bb:97:64:16:4a:2d:4c:5a:ed:05:b9:60:11:
         8d:e0:9f:83:ff:a7:0c:91:a0:9d:90:80:36:5b:1a:c1:32:6d:
         87:27:a2:22:4f:0f:96:13:eb:e8:03:b8:78:6a:c3:8f:0f:4a:
         c8:89:d8:d0:3d:65:5c:04:40:42:5c:52:4b:6e:30:69:78:45:
         19:ed:11:84:57:fb:3b:9f:84:65:0b:67:97:77:a4:aa:b5:53:
         0b:6c:b9:2a:d2:b1:f9:c8:0e:61:7a:be:4f:ff:29:64:0c:91:
         50:44:10:e0:50:2e:53:ba:ad:92:c4:22:1b:44:9c:af:92:dc:
         2e:97:f4:d5:28:0e:5e:01:4c:86:e6:60:30:a6:ba:cd:b0:0b:
         c0:46:80:dc:b1:f5:e9:a8:7b:6f:6e:8b:60:88:d1:60:3a:2d:
         d5:fc:11:d3:a3:38:ef:2d:05:d9:12:47:13:a5:ff:14:3d:78:
         72:15:4d:f2:60:fb:02:e0:62:de:73:d9:e9:bb:c0:56:be:d5:
         76:d5:be:82:d2:16:1a:37:82:bc:d0:7b:4f:4d:55:f6:52:41:
         cb:8b:d6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:40:33 2026 by rpki-client