This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/RO8EIzazCz5i9qCar0Fb-jUPsko.roa
File:                     RO8EIzazCz5i9qCar0Fb-jUPsko.roa (raw, json)
Hash identifier:          DUy255OTmG341QO1OT1MJtYrEowqoZ8jB65GBc6gQ8o=
Subject key identifier:   44:EF:04:23:36:B3:0B:3E:62:F6:A0:9A:AF:41:5B:FA:35:0F:B2:4A
Certificate issuer:       /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial:       019B78A2314FE2FBA083DFD099AB76BCD3DB
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/RO8EIzazCz5i9qCar0Fb-jUPsko.roa
Signing time:             Thu 01 Jan 2026 08:17:33 +0000
ROA not before:           Thu 01 Jan 2026 08:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     559
IP address blocks:        193.5.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:31:4f:e2:fb:a0:83:df:d0:99:ab:76:bc:d3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
        Validity
            Not Before: Jan  1 08:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=44ef042336b30b3e62f6a09aaf415bfa350fb24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:87:da:5b:50:6c:b9:b0:93:a7:08:0a:a3:c3:
                    08:29:ec:8e:c5:ad:7c:35:de:cf:35:2a:f4:b8:bf:
                    cf:b1:eb:57:20:c3:0d:64:e4:4e:93:23:97:cc:44:
                    57:65:5f:40:cb:6c:5e:d3:22:66:48:5c:ae:a8:fb:
                    92:b8:44:d0:77:3d:3e:85:25:2c:27:e9:6d:2f:a5:
                    e7:62:de:11:d5:24:e7:88:53:7e:d9:00:82:b9:65:
                    d7:a0:53:d5:1d:7c:fc:bd:bb:0a:6f:46:72:4c:f1:
                    52:40:f7:9a:a3:18:2e:87:5f:20:6f:a0:02:c5:07:
                    1f:0e:f3:e2:93:9f:54:74:88:5b:d5:cc:5b:9c:10:
                    6a:c8:dd:e6:71:f0:3e:8c:98:6d:cb:bb:b0:4a:3a:
                    64:93:a7:ec:6a:8b:45:7b:78:cc:c3:e9:80:07:68:
                    e4:94:15:1c:56:5f:18:15:bb:65:40:a4:bf:85:b2:
                    cb:a3:d0:4e:15:fe:ad:c2:b0:90:e1:65:b9:f2:0f:
                    be:84:d2:73:ec:33:17:35:f2:4d:06:5c:df:1d:e9:
                    09:2e:d8:79:bd:eb:b4:eb:c0:5c:86:b6:36:a7:41:
                    b6:73:d9:fe:b1:6b:b7:d7:98:15:a0:35:8a:e3:79:
                    3c:fd:68:04:09:07:c5:ad:d2:b4:92:2c:5b:66:80:
                    de:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EF:04:23:36:B3:0B:3E:62:F6:A0:9A:AF:41:5B:FA:35:0F:B2:4A
            X509v3 Authority Key Identifier:
                keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/RO8EIzazCz5i9qCar0Fb-jUPsko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.5.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c7:05:ec:ff:b1:c0:eb:9c:2d:5a:6f:6e:0c:06:4b:bc:24:
         6f:89:26:24:e7:d6:05:0d:f0:6e:87:66:c3:79:04:36:35:a3:
         c6:05:e3:84:fd:f0:d8:e9:97:3c:08:61:1f:57:f5:4c:47:3d:
         56:43:51:42:9a:e1:b2:f9:36:91:61:ff:6a:c7:cd:33:2e:43:
         2c:4a:7d:a4:e3:a4:bb:ea:6b:86:f1:f0:e8:c1:30:95:c5:64:
         f7:eb:05:ea:bf:89:1e:1d:f0:e6:ab:ef:bd:12:0a:b9:8f:83:
         ae:00:87:a0:a9:c0:43:ff:82:3f:65:2a:6a:c4:80:59:c3:0a:
         f4:4b:49:03:d1:b8:4f:2b:58:cd:97:e1:10:c0:a7:a6:06:c7:
         d3:13:46:13:c6:0b:aa:ba:a0:8d:bd:08:89:b3:9c:04:18:23:
         b8:fc:fd:ac:b9:57:5b:d2:34:84:0b:6a:2d:34:86:7a:49:ea:
         8b:a7:96:03:0f:39:09:73:27:d2:ea:e8:61:f2:b7:48:48:2a:
         ce:83:60:1b:97:62:cf:98:d2:79:da:54:29:d1:a3:d6:5c:a0:
         55:9d:dc:56:ea:19:c0:13:c6:31:c0:a3:1d:31:8e:6d:7f:ad:
         70:60:a5:c6:67:f0:46:bd:e0:4d:24:fc:a2:49:07:cc:92:f0:
         9f:ef:b5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:14:47 2026 by rpki-client