This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/edX9nFPaRBypEhTRy4XBDhniddw.roa
File:                     edX9nFPaRBypEhTRy4XBDhniddw.roa (raw, json)
Hash identifier:          5MhUOWbCadwewjcrQ5b6tmz4prZMcahfCM2cAS/s/R4=
Subject key identifier:   79:D5:FD:9C:53:DA:44:1C:A9:12:14:D1:CB:85:C1:0E:19:E2:75:DC
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       019B7EA444A182AD1C8F1DF77CDF0C1645A7
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/edX9nFPaRBypEhTRy4XBDhniddw.roa
Signing time:             Fri 02 Jan 2026 12:17:33 +0000
ROA not before:           Fri 02 Jan 2026 12:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134450
IP address blocks:        2a13:c44::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a4:44:a1:82:ad:1c:8f:1d:f7:7c:df:0c:16:45:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Jan  2 12:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=79d5fd9c53da441ca91214d1cb85c10e19e275dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:af:57:d4:08:11:b4:6f:84:76:25:e7:8d:63:
                    6f:9d:6d:dd:07:d7:1f:ff:e3:14:5d:31:6a:88:04:
                    57:2e:76:6f:d3:4b:ac:1b:6a:0a:ac:87:b4:d3:55:
                    14:fd:c1:b4:79:c7:70:c6:d7:2e:b9:9f:0a:d1:17:
                    68:b8:5f:db:ed:21:be:3f:dd:29:85:08:e0:b7:5f:
                    b6:72:ab:17:71:ad:78:2f:7d:ba:b8:80:43:8b:a9:
                    57:69:00:80:d5:c8:bc:e2:86:12:30:e1:7a:fa:e9:
                    65:36:ba:50:88:f4:f0:8b:76:21:2f:dc:13:8e:bd:
                    4a:70:52:ee:1a:57:cc:b0:0b:d9:dd:b9:5f:ae:05:
                    57:f4:2f:ca:7e:20:3b:53:88:d2:b1:05:1d:aa:63:
                    a2:84:32:c0:84:1b:1b:a7:88:9f:31:62:40:aa:81:
                    cb:fa:f4:93:3e:c5:f3:48:e2:6a:00:cb:1d:72:ac:
                    1b:da:0e:21:10:12:72:18:d9:72:a7:c8:d8:71:e0:
                    15:e6:da:ab:18:ea:c7:39:86:69:65:07:45:f3:19:
                    1e:ee:50:83:d5:b2:7b:8c:f0:87:d9:1e:b5:4b:ef:
                    7f:58:78:9f:f5:c0:60:05:58:bf:29:82:f5:24:da:
                    bc:c1:ce:2e:65:e6:10:46:7e:86:6f:6c:66:b5:58:
                    49:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D5:FD:9C:53:DA:44:1C:A9:12:14:D1:CB:85:C1:0E:19:E2:75:DC
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/edX9nFPaRBypEhTRy4XBDhniddw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c44::/30

    Signature Algorithm: sha256WithRSAEncryption
         18:b0:f0:3c:22:92:70:12:52:23:7b:03:f0:83:6a:91:f4:64:
         d4:81:1b:6f:8a:21:ab:f1:30:6a:94:50:48:ba:94:29:4e:ec:
         58:d5:87:dd:bf:d3:cf:e4:ad:a4:54:07:15:62:7b:be:8f:f9:
         6d:c5:2f:10:a3:76:6f:e2:3d:67:a5:9b:e8:07:21:d3:e6:07:
         50:ca:17:06:d8:61:79:7d:fa:3c:ee:24:98:11:df:3b:bb:6a:
         5b:56:a0:aa:2c:9b:d5:b7:c0:b5:10:58:c5:36:ba:3a:86:31:
         08:b7:fb:02:f4:58:e5:bd:e3:94:be:96:88:22:c7:cf:ce:77:
         3f:91:4c:53:c2:10:c7:39:bf:3b:80:f3:43:ee:47:3b:be:ac:
         bc:e2:cf:bc:23:60:b5:70:a3:12:f6:95:60:a6:ad:a9:4f:e1:
         1c:06:25:7c:ac:8e:d3:ae:69:69:5d:a6:bc:95:c8:37:a0:3c:
         00:38:4e:59:7c:a1:fc:07:a9:66:50:ef:cf:d0:7b:5f:4c:da:
         f5:97:46:c6:97:0e:47:b1:07:cb:12:8e:b2:33:6d:37:02:f2:
         9b:3c:7e:5b:04:2b:51:7f:f2:58:d4:3b:16:77:e7:48:75:5d:
         33:90:41:21:c9:91:b6:f8:7e:47:6d:28:39:2a:20:37:4e:97:
         6a:35:03:31
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZt+pEShgq0cjx33fN8MFkWnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjdkMjEzZmExMzcwOGUzMjAwMTg0ZmYxYmMzOTE1Nzdj
YzI1MmYwHhcNMjYwMTAyMTIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWQ1ZmQ5YzUzZGE0NDFjYTkxMjE0ZDFjYjg1YzEwZTE5ZTI3NWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma9X1AgRtG+EdiXnjWNvnW3dB9cf
/+MUXTFqiARXLnZv00usG2oKrIe001UU/cG0ecdwxtcuuZ8K0RdouF/b7SG+P90p
hQjgt1+2cqsXca14L326uIBDi6lXaQCA1ci84oYSMOF6+ullNrpQiPTwi3YhL9wT
jr1KcFLuGlfMsAvZ3blfrgVX9C/KfiA7U4jSsQUdqmOihDLAhBsbp4ifMWJAqoHL
+vSTPsXzSOJqAMsdcqwb2g4hEBJyGNlyp8jYceAV5tqrGOrHOYZpZQdF8xke7lCD
1bJ7jPCH2R61S+9/WHif9cBgBVi/KYL1JNq8wc4uZeYQRn6Gb2xmtVhJ6QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFHnV/ZxT2kQcqRIU0cuFwQ4Z4nXcMB8GA1UdIwQY
MBaAFJL30hP6E3COMgAYT/G8ORV3zCUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZmU0Vfb1RjSTR5QUJoUDhidzVGWGZNSlM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80ODIxMDEtYWM5NC00ZjBiLTkzMDkt
M2UxOGVlNmI0YTVhLzEvZWRYOW5GUGFSQnlwRWhUUnk0WEJEaG5pZGR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi80ODIxMDEtYWM5NC00ZjBiLTkzMDktM2UxOGVlNmI0YTVh
LzEva3ZmU0Vfb1RjSTR5QUJoUDhidzVGWGZNSlM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCKhMMRDAN
BgkqhkiG9w0BAQsFAAOCAQEAGLDwPCKScBJSI3sD8INqkfRk1IEbb4ohq/EwapRQ
SLqUKU7sWNWH3b/Tz+StpFQHFWJ7vo/5bcUvEKN2b+I9Z6Wb6Ach0+YHUMoXBthh
eX36PO4kmBHfO7tqW1agqiyb1bfAtRBYxTa6OoYxCLf7AvRY5b3jlL6WiCLHz853
P5FMU8IQxzm/O4DzQ+5HO76svOLPvCNgtXCjEvaVYKatqU/hHAYlfKyO065paV2m
vJXIN6A8ADhOWXyh/AepZlDvz9B7X0za9ZdGxpcOR7EHyxKOsjNtNwLymzx+WwQr
UX/yWNQ7FnfnSHVdM5BBIcmRtvh+R20oOSogN06XajUDMQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:38:41 2026 by rpki-client