This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/C5-n76GjDGgTo3St4TOPzsa8ErE.roa
File:                     C5-n76GjDGgTo3St4TOPzsa8ErE.roa (raw, json)
Hash identifier:          wL0KAphUIwIQECc1NQQKJ/DAF+DOTBb5tCVgPHb/KS0=
Subject key identifier:   0B:9F:A7:EF:A1:A3:0C:68:13:A3:74:AD:E1:33:8F:CE:C6:BC:12:B1
Certificate issuer:       /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial:       019B7E379190D14700C490D8EC28AA170CE2
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/C5-n76GjDGgTo3St4TOPzsa8ErE.roa
Signing time:             Fri 02 Jan 2026 10:18:49 +0000
ROA not before:           Fri 02 Jan 2026 10:18:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207092
IP address blocks:        185.193.12.0/23 maxlen: 23
                          185.193.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:91:90:d1:47:00:c4:90:d8:ec:28:aa:17:0c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
        Validity
            Not Before: Jan  2 10:18:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0b9fa7efa1a30c6813a374ade1338fcec6bc12b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:b0:0d:15:70:8d:95:54:10:f6:c8:66:45:
                    82:a7:6e:5e:33:35:e3:89:0d:71:0d:88:11:3c:d1:
                    9d:64:9e:e8:98:61:78:99:44:b4:bf:fa:19:9d:03:
                    4e:01:3a:ad:46:70:5f:e6:29:62:af:b4:b7:26:5e:
                    82:6a:7b:db:b7:0e:57:46:75:d9:65:80:58:e2:a1:
                    68:66:49:68:09:5c:66:d3:d3:18:4f:b4:17:05:08:
                    21:1a:3b:25:6b:11:4c:7c:89:4b:1a:f4:88:f8:b4:
                    0c:37:cb:a2:a0:fe:27:76:64:e5:31:ab:82:10:18:
                    8c:1e:8a:f6:24:1d:d7:14:c3:59:2c:d5:0e:93:24:
                    1e:9a:e2:5d:b7:42:8d:7f:e2:83:cc:15:5f:50:ab:
                    57:0d:a2:39:df:0d:02:b5:eb:a4:c8:3c:1b:c2:de:
                    80:db:16:eb:ef:71:3a:0c:7c:cd:00:1a:44:a0:c5:
                    25:56:b6:59:35:36:98:d6:ce:db:7a:55:44:03:fe:
                    7e:22:ff:e8:08:3a:1a:ba:59:9e:70:64:c8:85:7c:
                    3f:94:69:39:7e:7a:a8:e3:04:ee:40:cc:c5:d0:67:
                    ba:f0:f2:a2:ea:e3:af:b9:48:5c:4a:d7:ea:ea:5e:
                    d0:41:ae:d3:1e:c9:d8:a6:c9:fe:77:79:c5:0f:d7:
                    63:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9F:A7:EF:A1:A3:0C:68:13:A3:74:AD:E1:33:8F:CE:C6:BC:12:B1
            X509v3 Authority Key Identifier:
                keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/C5-n76GjDGgTo3St4TOPzsa8ErE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.193.12.0/23
                  185.193.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:21:f1:a0:86:6f:1a:64:87:e2:e8:ec:c5:c1:da:67:d7:e3:
         e9:0a:8d:e0:ea:1a:79:ef:9e:5e:4a:9a:05:64:81:c3:a7:ec:
         97:24:bd:a1:81:98:05:d6:bd:30:07:6d:11:39:1a:42:2f:63:
         71:4f:5c:d4:fd:2e:38:95:dd:ed:fb:76:d3:27:61:68:5f:c6:
         39:2d:e3:5b:ea:6c:e6:f9:75:fc:2b:c7:1a:37:27:34:0e:04:
         6d:83:c1:cf:2d:7f:ec:db:15:e6:fe:a1:40:38:c5:60:bf:af:
         1c:09:0e:da:ec:89:b6:40:c8:6e:2c:e4:ab:8c:8a:0f:de:8b:
         6c:6b:32:a5:32:7a:de:ab:40:15:6e:aa:73:a3:ac:a7:22:e4:
         56:01:fc:ec:00:0c:6f:1f:8c:6d:99:03:83:38:59:ec:7d:2b:
         d8:8e:29:ce:b7:01:bd:ed:49:5e:0f:26:3e:20:1f:d9:c9:fb:
         ea:fe:20:f7:8d:62:19:f9:63:d4:96:fe:d0:55:b8:a7:93:5d:
         cb:34:ad:53:90:6b:42:5e:73:59:a8:f5:92:ab:eb:97:1c:c9:
         0a:c5:f4:58:0e:96:df:54:e8:22:a2:75:a7:99:17:26:f8:89:
         28:e9:44:ac:48:d6:79:45:91:30:cb:ad:94:87:21:ab:c7:c3:
         28:89:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:14:01 2026 by rpki-client