This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/8xv1vaPkjizBV3NIK5wM8RsMA5s.roa
File:                     8xv1vaPkjizBV3NIK5wM8RsMA5s.roa (raw, json)
Hash identifier:          TrXOTC7yyYjoWyoOQWLsGTnU2ndoGtykVNAIqNcdiEs=
Subject key identifier:   F3:1B:F5:BD:A3:E4:8E:2C:C1:57:73:48:2B:9C:0C:F1:1B:0C:03:9B
Certificate issuer:       /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial:       019B7C80941E345B440FBFE5897284065B66
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/8xv1vaPkjizBV3NIK5wM8RsMA5s.roa
Signing time:             Fri 02 Jan 2026 02:19:19 +0000
ROA not before:           Fri 02 Jan 2026 02:19:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48147
IP address blocks:        2001:30c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 17:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:94:1e:34:5b:44:0f:bf:e5:89:72:84:06:5b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
        Validity
            Not Before: Jan  2 02:19:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f31bf5bda3e48e2cc15773482b9c0cf11b0c039b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:80:2d:bc:46:a7:c0:99:5a:bd:70:14:d1:
                    fe:e2:e5:f1:4b:10:fd:9c:c8:40:8a:2a:48:bb:a5:
                    ae:0f:01:84:e8:e7:cd:18:b8:c4:8d:f1:7a:f0:7e:
                    4e:f6:6a:d1:54:04:ba:eb:93:1c:36:d1:0f:e1:ea:
                    b9:27:68:64:81:a2:7a:59:95:fb:b3:93:a9:b3:6c:
                    49:a0:0c:ce:41:a1:05:28:99:2b:63:ed:5c:ad:39:
                    dd:c5:28:65:a3:32:ec:f5:be:f3:ec:3c:00:92:9d:
                    76:b3:c5:97:e3:c1:ad:26:66:3a:76:0e:a5:09:17:
                    79:21:12:c3:4b:38:d5:60:ad:39:c0:d8:af:07:95:
                    f9:41:5d:21:97:3d:32:c2:28:48:bf:8d:a0:16:91:
                    74:60:22:73:3e:8d:00:51:a4:25:a4:9d:2f:11:ff:
                    e1:b1:72:a2:31:62:14:39:ff:82:b2:13:4b:f3:59:
                    9d:7f:fe:9a:7f:ff:d2:5f:72:58:fe:bf:e8:89:a8:
                    20:be:4c:c7:5e:4a:65:27:e6:c4:a6:cf:c3:29:02:
                    61:62:7d:34:00:05:c0:57:75:4c:76:ec:b5:c5:c6:
                    ee:48:04:b1:40:a7:35:d8:98:67:53:99:8b:a9:7e:
                    a5:2b:14:ab:eb:45:49:1e:51:5c:9a:bc:91:e4:96:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1B:F5:BD:A3:E4:8E:2C:C1:57:73:48:2B:9C:0C:F1:1B:0C:03:9B
            X509v3 Authority Key Identifier:
                keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/8xv1vaPkjizBV3NIK5wM8RsMA5s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:30c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:9d:f1:64:68:ea:2a:95:61:78:1a:a5:8a:51:8a:f1:06:bb:
         41:7a:19:a3:2f:34:cd:88:75:e8:ee:2e:d7:48:09:55:c5:63:
         fd:dd:58:6e:2d:01:0b:a7:46:ef:cc:6b:38:b6:30:08:17:71:
         a8:2f:49:b4:3a:eb:f7:c0:5c:8d:a6:09:fe:80:31:78:f2:d9:
         64:1f:3d:5f:cc:0e:05:81:bb:be:cb:0b:35:a0:fa:0d:86:5f:
         43:d1:87:f4:32:ef:e9:fe:2a:03:6b:04:c1:05:50:d6:99:88:
         84:3a:6b:84:38:36:f1:07:31:46:d7:12:f0:da:5c:c6:44:78:
         fc:7e:e5:b0:cf:0f:cc:01:d0:15:da:5e:5b:c9:d1:23:df:40:
         2e:2a:09:2f:a4:3a:c9:49:85:2c:54:c6:43:cc:a2:f0:ef:01:
         c0:39:0a:39:55:68:f9:e8:1b:c7:b5:14:6c:b7:16:4b:a4:ac:
         ff:c3:d5:86:07:f1:bc:a5:a7:ce:72:24:7a:f6:c7:86:02:2b:
         9e:ab:62:d4:a5:18:c2:82:22:0e:94:5b:bf:ff:d0:bc:1f:d0:
         7e:19:30:ef:33:88:13:cd:85:64:41:c7:99:c7:46:f8:65:95:
         c9:15:67:64:2f:71:18:35:e0:2f:d6:fe:b2:24:db:8f:5e:54:
         28:f0:b2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:43:44 2026 by rpki-client