This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/9W2T6F7tOO8ptjkQDnIa84dNgjk.roa
File:                     9W2T6F7tOO8ptjkQDnIa84dNgjk.roa (raw, json)
Hash identifier:          7Q6b4TDkOCH4vZLEsdxeW12wMepLCVRM3purDPVlkFo=
Subject key identifier:   F5:6D:93:E8:5E:ED:38:EF:29:B6:39:10:0E:72:1A:F3:87:4D:82:39
Certificate issuer:       /CN=4410647d952e9121220f414e88a5ddd62bc8237b
Certificate serial:       019B7E37B6D54EB46C95DB087AA4736CECB5
Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/9W2T6F7tOO8ptjkQDnIa84dNgjk.roa
Signing time:             Fri 02 Jan 2026 10:18:59 +0000
ROA not before:           Fri 02 Jan 2026 10:18:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208450
IP address blocks:        193.39.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:b6:d5:4e:b4:6c:95:db:08:7a:a4:73:6c:ec:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b
        Validity
            Not Before: Jan  2 10:18:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f56d93e85eed38ef29b639100e721af3874d8239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:89:8d:4c:43:b0:68:3c:29:65:e0:5b:ce:02:
                    cb:cf:69:f2:70:2d:cb:0d:10:9c:a5:f1:7a:b7:a2:
                    3a:ee:2a:de:97:f8:9d:10:49:39:79:cb:38:99:c6:
                    fb:aa:13:19:89:39:6b:47:b7:63:1b:40:09:b6:73:
                    da:00:57:b4:87:38:00:38:e3:fc:b2:82:3b:89:f3:
                    89:14:5e:81:72:5d:6f:ff:7b:7b:06:2b:ae:5a:85:
                    69:ae:4e:4c:3a:4b:1d:1d:a6:2f:33:70:95:fe:20:
                    bb:18:5b:f5:d0:16:e2:f6:7c:bc:31:21:1a:34:9a:
                    c9:27:47:65:a6:c1:0e:29:85:e8:69:f1:94:c9:f3:
                    c5:9a:1d:bb:06:b2:eb:01:d5:0b:8d:ee:b5:2e:fe:
                    d3:1f:ee:73:c3:35:50:1b:db:fe:71:67:0f:9b:90:
                    91:93:0c:29:4d:ed:33:2e:d4:1c:f0:1d:69:04:c1:
                    07:11:09:24:e6:ad:4b:50:43:7f:65:e0:6f:b8:2b:
                    2d:b3:ff:57:22:9e:86:4e:44:40:8b:64:5f:4b:84:
                    03:cc:75:41:5f:75:66:8a:95:77:58:4f:5e:e5:88:
                    e5:c2:c3:49:c3:93:f7:db:2b:01:bf:98:6b:09:57:
                    91:5c:49:5a:f5:17:66:c4:7a:40:1e:9a:6a:7e:13:
                    cf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6D:93:E8:5E:ED:38:EF:29:B6:39:10:0E:72:1A:F3:87:4D:82:39
            X509v3 Authority Key Identifier:
                keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/9W2T6F7tOO8ptjkQDnIa84dNgjk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.39.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:47:ef:f1:5c:69:53:65:56:3b:2d:fa:44:ee:82:d2:09:1d:
         14:a1:05:2f:6f:aa:d7:c4:f7:a1:1d:e6:6b:d9:9a:a0:57:ae:
         4d:cd:d6:d8:a3:52:9e:19:d3:b9:fe:af:28:a5:67:e8:13:0f:
         00:e2:c6:da:61:d8:02:1d:94:48:fc:47:c4:a1:bd:79:db:13:
         60:c7:b5:3b:31:aa:da:48:dc:0c:40:7b:c2:bd:74:30:7e:58:
         c1:db:b5:93:ca:2c:dc:f8:e7:3c:b7:29:ac:b2:9e:82:44:5a:
         1e:09:36:bb:d8:90:d4:f5:64:0a:f3:fe:8c:46:88:f3:48:9b:
         7f:2c:9c:98:3e:c4:b8:e8:d3:15:63:48:bf:a6:da:41:19:0b:
         34:26:e5:59:82:4d:e7:e3:11:e9:9f:42:b1:15:63:2b:9c:e6:
         be:21:3a:88:51:7b:a4:22:8e:1c:97:e8:a1:3a:59:a5:2d:81:
         9b:ac:60:9c:47:67:18:55:72:14:27:ff:d5:83:0a:5c:b0:bb:
         97:4b:63:28:c7:02:8f:48:26:2d:1e:f1:29:ed:2f:75:0d:29:
         80:29:e6:78:0d:9c:64:a9:3f:b5:1c:0c:a5:04:5d:ce:e6:7f:
         12:19:c7:98:ad:56:3d:0c:bd:5f:d5:41:34:0f:6f:40:42:d6:
         ef:d5:12:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:42:25 2026 by rpki-client