This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/9uaqn-0k0V9eihEbl_1qKZiHOsI.roa
File:                     9uaqn-0k0V9eihEbl_1qKZiHOsI.roa (raw, json)
Hash identifier:          lX7dZ9C+1SMN2ATw1cyM18wsI8aOAPBbMUKXBKlIvtI=
Subject key identifier:   F6:E6:AA:9F:ED:24:D1:5F:5E:8A:11:1B:97:FD:6A:29:98:87:3A:C2
Certificate issuer:       /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial:       019B7E3855A96B602F18A56CAF3DF07CDF80
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/9uaqn-0k0V9eihEbl_1qKZiHOsI.roa
Signing time:             Fri 02 Jan 2026 10:19:39 +0000
ROA not before:           Fri 02 Jan 2026 10:19:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201494
IP address blocks:        31.177.60.64/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:55:a9:6b:60:2f:18:a5:6c:af:3d:f0:7c:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
        Validity
            Not Before: Jan  2 10:19:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f6e6aa9fed24d15f5e8a111b97fd6a2998873ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:29:47:83:ea:c7:fa:e1:27:5e:14:69:8a:56:
                    42:a3:84:4c:0e:8c:2d:66:24:21:e0:49:ce:59:3c:
                    42:4b:70:ae:bf:7b:91:91:64:49:9f:4f:80:1e:d8:
                    11:49:9d:66:0e:4d:e9:89:33:a8:b9:27:ab:3d:8f:
                    97:18:61:2b:63:44:b0:de:ac:61:ae:ee:72:30:f6:
                    04:63:04:16:fc:ed:24:2a:27:cd:d0:cf:65:9d:1f:
                    a9:dd:50:cb:0b:30:23:ee:d4:b2:ca:14:2e:f7:10:
                    d8:69:ce:3f:28:ef:3f:38:69:72:6c:34:65:13:d8:
                    4a:b2:29:4b:b8:88:bb:57:c4:39:48:e0:69:62:1e:
                    fa:5a:ae:be:44:62:8c:58:76:4a:a3:30:a7:5e:81:
                    2f:0e:18:dc:3a:06:ec:8f:1c:17:a7:bc:b5:23:55:
                    25:2e:fc:dc:2f:76:fb:27:21:7e:da:8e:b3:d0:58:
                    5d:60:45:9a:fa:51:78:3d:92:09:a2:a5:53:26:18:
                    42:66:bc:be:d0:80:aa:92:f8:32:82:26:86:8b:2b:
                    1c:63:3a:ac:ee:31:21:35:e6:41:8a:49:1c:e2:91:
                    af:c4:4c:7e:9a:de:09:82:f8:7a:0d:6a:d3:14:54:
                    8c:c7:d0:de:0d:9f:f5:ab:c6:19:55:40:8b:a0:22:
                    45:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E6:AA:9F:ED:24:D1:5F:5E:8A:11:1B:97:FD:6A:29:98:87:3A:C2
            X509v3 Authority Key Identifier:
                keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/9uaqn-0k0V9eihEbl_1qKZiHOsI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.177.60.64/27

    Signature Algorithm: sha256WithRSAEncryption
         6e:0c:50:df:35:f8:f5:7d:36:b0:04:69:01:aa:b4:1b:c3:f6:
         a6:e6:b9:e5:41:c3:dc:0c:35:83:f3:7a:bb:86:ef:97:dc:6c:
         eb:75:97:94:af:2e:50:4d:3f:01:f2:56:ad:3b:8f:76:3d:e7:
         8b:73:b2:6c:85:b8:cf:30:94:9a:f8:17:a9:a5:75:75:f9:c0:
         66:82:26:39:f2:e6:d6:e7:28:5c:de:e5:74:c7:03:c9:ec:9b:
         ae:ec:38:49:7d:d1:98:31:74:c7:d5:23:2a:38:72:f8:58:aa:
         8a:3f:b2:8b:a8:35:2b:ba:80:8c:02:84:ce:40:a3:9e:59:c0:
         b6:4e:70:44:cd:8c:b0:69:5b:36:db:55:ed:19:43:df:20:ab:
         49:ef:01:7c:3c:2d:91:f0:ff:1f:92:af:8d:e1:3a:96:e8:00:
         40:57:70:1a:f6:cf:56:9f:b2:15:31:b2:4d:3b:e7:4a:ee:ee:
         b9:0c:00:a4:1a:74:93:11:81:50:bf:15:fc:f9:42:0b:3c:a1:
         ac:9a:e3:e4:05:ed:f0:e3:3a:d0:93:55:5a:58:02:f7:f6:70:
         2c:bd:09:b0:53:c8:c8:fd:2a:24:2a:91:f6:32:4b:42:6b:5b:
         ac:52:f3:92:0b:bb:71:50:9c:5a:5b:30:9f:73:51:50:87:d5:
         48:46:32:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:42:22 2026 by rpki-client