This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/9V0OURiDiNau3vtgop_pWs2qLIY.roa
File:                     9V0OURiDiNau3vtgop_pWs2qLIY.roa (raw, json)
Hash identifier:          QXeJumFHpJY2MFDHKEGfzpT/RlrjsPQ3Q8A0olOdujI=
Subject key identifier:   F5:5D:0E:51:18:83:88:D6:AE:DE:FB:60:A2:9F:E9:5A:CD:AA:2C:86
Certificate issuer:       /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial:       019B77C6A25DD86830FAD15729D513E6641C
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/9V0OURiDiNau3vtgop_pWs2qLIY.roa
Signing time:             Thu 01 Jan 2026 04:17:45 +0000
ROA not before:           Thu 01 Jan 2026 04:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3303
IP address blocks:        193.58.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:a2:5d:d8:68:30:fa:d1:57:29:d5:13:e6:64:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
        Validity
            Not Before: Jan  1 04:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f55d0e51188388d6aedefb60a29fe95acdaa2c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:e2:1d:a1:b7:ca:92:64:06:33:02:e0:31:
                    2e:d2:1c:cd:8d:92:fe:b6:9e:18:37:e8:42:e6:47:
                    aa:cd:19:eb:4c:09:e8:d6:3b:11:4c:54:15:39:1e:
                    e5:03:12:40:ee:a1:d9:91:99:a5:f1:0b:c4:fb:7c:
                    35:df:e6:36:96:d5:70:fe:c9:3d:69:f8:2c:2e:1a:
                    07:de:af:e8:a1:41:26:b9:65:b9:b8:f5:b8:bf:63:
                    17:31:af:70:4e:d6:05:27:fd:3a:eb:7f:bc:5b:49:
                    04:59:27:58:4b:24:bc:95:99:55:33:e9:e1:fb:c0:
                    32:3e:4a:aa:03:03:a7:f2:78:e0:2b:63:96:4e:c3:
                    7f:93:e2:97:b1:55:f9:5e:6d:55:2b:b0:a8:51:6d:
                    3e:dc:45:e8:ab:1d:36:05:8e:a2:de:ae:37:a7:bb:
                    43:98:71:d3:c7:77:04:50:01:f7:8a:af:80:05:79:
                    d2:55:76:53:63:2b:57:60:cd:a0:e7:af:29:09:99:
                    1e:a6:30:b4:da:3f:99:ef:3b:a1:84:59:d5:95:b2:
                    57:f3:d3:c8:c7:6e:8a:71:27:23:31:3b:2b:ca:1f:
                    d9:ed:b5:04:af:04:8f:8c:fa:4b:45:8e:a0:2a:0e:
                    9b:9c:64:09:3f:e0:44:d9:4b:40:52:0c:50:f4:4b:
                    e9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5D:0E:51:18:83:88:D6:AE:DE:FB:60:A2:9F:E9:5A:CD:AA:2C:86
            X509v3 Authority Key Identifier:
                keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/9V0OURiDiNau3vtgop_pWs2qLIY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:c9:e2:38:55:29:21:88:27:bc:17:8b:fa:5a:74:48:c5:7e:
         d0:dc:81:7c:72:be:14:88:ba:4b:10:56:84:e1:40:36:ce:f0:
         11:29:bc:1e:f5:4b:2b:f6:db:b0:b8:28:49:31:1e:9f:16:49:
         3c:73:9c:e5:a1:7e:93:87:62:15:4f:34:0d:b7:03:14:0a:f1:
         dd:38:01:b0:de:4e:2b:3b:d9:92:be:51:aa:8b:ea:f4:76:50:
         39:9d:73:18:11:31:b7:db:a3:90:86:fc:15:35:a3:cd:78:2c:
         4b:23:29:01:ab:18:82:59:47:c8:a7:f1:0f:0f:2b:63:b8:ef:
         16:af:1e:df:26:cf:04:17:e9:31:3d:a5:34:90:eb:c8:cd:e7:
         c6:90:09:fa:db:3b:be:f5:e8:cd:8e:a7:ab:85:49:1a:f7:6b:
         22:5d:8e:e1:f2:75:1c:60:11:37:ee:f3:1e:7b:ec:ac:6e:49:
         b7:a1:41:cd:13:bc:2e:23:5c:cf:42:fc:a3:64:6c:be:79:87:
         10:83:6e:b8:ba:40:01:65:9c:b4:dc:75:f2:7d:04:e8:be:16:
         dc:85:eb:08:66:17:18:cb:ff:2d:2f:93:5c:a6:f1:1a:9b:8d:
         98:e0:84:b9:07:59:9a:db:b4:3b:28:d8:9e:dd:d0:2c:e1:0e:
         7b:65:15:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:22:25 2026 by rpki-client