This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/w011lYt62c3hWszahC6AWv6giHI.roa
File:                     w011lYt62c3hWszahC6AWv6giHI.roa (raw, json)
Hash identifier:          xoQYARNhUnVWQjLbtBlHZU61msSzpQAeDZVvNEmV+D0=
Subject key identifier:   C3:4D:75:95:8B:7A:D9:CD:E1:5A:CC:DA:84:2E:80:5A:FE:A0:88:72
Certificate issuer:       /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial:       019B77C712CF5E90F4C8BC8B4F338BE5FA8B
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/w011lYt62c3hWszahC6AWv6giHI.roa
Signing time:             Thu 01 Jan 2026 04:18:13 +0000
ROA not before:           Thu 01 Jan 2026 04:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     21263
IP address blocks:        193.102.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:12:cf:5e:90:f4:c8:bc:8b:4f:33:8b:e5:fa:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
        Validity
            Not Before: Jan  1 04:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c34d75958b7ad9cde15accda842e805afea08872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:4c:a9:b0:f1:ff:b7:10:1a:26:ec:bf:30:
                    01:7b:42:96:cb:35:e1:db:ab:5d:4b:67:df:91:55:
                    8c:0a:69:1f:97:14:e9:6e:c2:9b:00:87:6c:27:9a:
                    6f:47:a6:1f:8b:ef:d1:1f:5b:7f:20:fc:82:eb:85:
                    e2:38:eb:f4:ec:40:18:91:d5:44:2b:a8:ba:0e:b7:
                    2d:23:f7:af:ac:d1:21:af:aa:40:3a:a4:29:69:4f:
                    5b:cd:c3:2c:53:4f:e9:a7:8d:76:4b:11:f9:e4:c1:
                    27:84:f2:e7:b4:db:35:68:c3:13:81:f7:c4:b0:09:
                    e9:03:16:c5:71:5d:70:b7:6f:0e:01:3d:f4:1d:59:
                    58:34:83:50:b8:87:aa:d0:b2:e4:10:d3:5b:97:16:
                    b9:17:a1:6a:39:52:81:ce:cb:ed:64:a0:9c:69:ef:
                    c6:7a:da:18:e9:6b:dd:84:ed:af:9b:0f:9e:c1:52:
                    28:13:81:66:97:49:c0:3e:59:7b:5f:2f:60:34:bd:
                    45:37:9a:c0:9b:95:f3:07:63:8e:5a:13:24:ca:24:
                    31:b8:36:33:db:db:ed:94:1b:80:c6:04:17:bb:95:
                    f7:8e:b5:d4:86:15:7a:8c:85:ce:91:71:2c:b1:6f:
                    ab:ea:61:60:e0:fa:3f:07:aa:f3:95:00:c6:b4:8e:
                    8f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4D:75:95:8B:7A:D9:CD:E1:5A:CC:DA:84:2E:80:5A:FE:A0:88:72
            X509v3 Authority Key Identifier:
                keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/w011lYt62c3hWszahC6AWv6giHI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.102.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:19:81:29:8c:bd:47:d4:37:43:7a:f6:23:3a:79:da:85:49:
         e8:72:ac:10:37:4e:c3:82:74:e3:f9:fc:1d:d5:89:e7:4a:ec:
         4e:b7:b0:66:62:65:b0:ef:2a:ee:d2:66:71:63:1e:24:df:f0:
         a4:40:9f:a3:4a:74:89:42:28:da:25:38:12:ec:bd:6a:84:9a:
         96:41:7a:e6:b5:b3:8a:6a:e7:7d:4c:1e:72:9d:0b:3f:db:52:
         d9:82:2e:8b:d5:3d:b1:74:3d:0f:c5:29:53:14:5a:53:d9:7a:
         c6:05:69:c9:ee:88:d2:4a:fd:f3:8f:0c:7a:6b:02:f7:bc:61:
         f0:be:df:a7:87:9c:a6:ca:f6:54:0f:4a:6d:7f:20:6a:29:9e:
         6a:6a:d0:94:03:05:56:3b:4e:7d:31:cc:06:c7:f1:54:91:87:
         e0:95:de:ff:fe:8c:97:2f:90:b0:1c:9d:30:97:61:c8:36:21:
         df:21:dd:6e:0e:2b:af:b2:29:d8:55:0c:1d:36:7b:79:cd:8c:
         f3:f8:31:ae:9a:d8:b7:b8:bd:4f:7f:77:48:f0:39:c4:7b:5c:
         9d:a1:81:1c:3c:4f:96:5e:17:75:08:79:1b:39:54:94:36:7c:
         81:2c:21:44:14:5a:4a:1f:34:f1:a2:55:eb:1a:e2:0b:ba:11:
         0d:26:3f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:31:51 2026 by rpki-client