This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nFMIcbLlNnWz1Aqru9cqy4TRFpE.roa
File:                     nFMIcbLlNnWz1Aqru9cqy4TRFpE.roa (raw, json)
Hash identifier:          cLDk5XOKrbRl8ZowE5bT/thbho2XNAd1evvHqlHJrAE=
Subject key identifier:   9C:53:08:71:B2:E5:36:75:B3:D4:0A:AB:BB:D7:2A:CB:84:D1:16:91
Certificate issuer:       /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial:       019B77C77FDC8FA163B5796E720082F59727
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nFMIcbLlNnWz1Aqru9cqy4TRFpE.roa
Signing time:             Thu 01 Jan 2026 04:18:41 +0000
ROA not before:           Thu 01 Jan 2026 04:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212967
IP address blocks:        5.8.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:7f:dc:8f:a1:63:b5:79:6e:72:00:82:f5:97:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
        Validity
            Not Before: Jan  1 04:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9c530871b2e53675b3d40aabbbd72acb84d11691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:18:0e:43:23:69:a6:40:24:25:04:2b:0d:
                    ea:64:23:16:5d:3a:ce:bd:8e:36:c4:dc:5b:a9:5d:
                    fe:3f:87:28:ee:4c:7f:d0:85:4b:fd:ff:9a:6f:da:
                    ff:bb:0c:b6:ad:93:45:9e:f4:b9:5b:ea:30:fd:5e:
                    ff:d8:0d:2d:78:3e:ea:8d:3d:b7:95:ae:4e:a1:1b:
                    d5:58:04:fb:70:42:12:04:0d:fb:e4:fe:dd:a8:8c:
                    40:98:69:77:eb:08:f8:84:7f:75:e9:08:bc:f2:76:
                    d0:37:70:b4:0e:01:f2:b1:b6:ef:76:44:4c:45:23:
                    67:99:a8:c0:00:76:33:3d:30:3d:51:26:26:ed:1e:
                    00:4e:62:0b:64:a7:91:08:b7:ed:20:eb:d5:79:a7:
                    cc:54:70:19:c0:db:91:87:57:1c:b5:5a:09:14:03:
                    97:a6:b1:c8:cb:0f:4f:d1:17:4b:dd:91:e2:53:8e:
                    b1:80:c3:f8:36:05:18:27:7a:01:81:f5:95:80:22:
                    b2:e1:39:a1:ab:55:44:79:77:1a:f0:56:d4:be:2f:
                    79:2f:5b:ae:1a:88:40:3d:49:df:54:19:1f:00:93:
                    ae:fe:f3:06:80:81:14:5a:85:e9:4b:68:b5:96:b5:
                    54:c4:59:14:cb:8b:03:6e:07:8b:08:33:6f:e0:49:
                    61:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:53:08:71:B2:E5:36:75:B3:D4:0A:AB:BB:D7:2A:CB:84:D1:16:91
            X509v3 Authority Key Identifier:
                keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nFMIcbLlNnWz1Aqru9cqy4TRFpE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:e5:4b:45:d8:40:7b:a9:8e:b4:e5:9a:94:fc:e7:94:04:05:
         9d:35:c2:bc:69:80:cc:1e:16:18:63:c6:a2:d5:77:5f:15:9a:
         98:e2:b1:fe:f8:fa:77:65:fb:54:82:d0:e1:92:fc:f2:4a:9e:
         93:37:2e:75:f6:35:55:48:0f:bb:c4:e5:2e:02:dd:c7:5c:6a:
         3e:47:d0:96:ed:04:b1:33:67:6d:03:ee:47:f6:3f:b5:e6:b7:
         71:78:be:be:67:35:28:f2:f3:fe:fd:9e:d1:6f:6f:36:33:7f:
         b1:b0:dc:71:ae:f1:35:0b:50:71:91:28:d5:d8:37:66:5d:27:
         1d:6a:e6:1f:fa:c3:f4:9c:0f:53:38:0d:c9:0d:1f:c0:f1:dc:
         f8:76:fc:9a:d4:05:93:f2:cb:b4:c8:7e:ac:6b:9f:3c:97:0f:
         ee:16:4a:1a:73:99:bd:b4:b2:76:51:20:cd:4f:18:f4:7b:f3:
         1b:5e:9f:9b:31:cf:f0:c7:df:39:63:f3:e5:c6:71:2c:b9:1a:
         b4:16:86:87:37:dc:14:42:e5:0a:9c:28:91:d8:15:06:ab:69:
         4a:45:04:a7:10:91:b3:06:86:d9:b1:d6:35:eb:04:61:52:bc:
         61:6e:5d:f3:09:16:87:b8:68:d7:d8:35:29:1f:31:b5:6c:05:
         11:23:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:47:49 2026 by rpki-client