This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/ssY0Ecpevxu6EACddC_E40NRzc4.roa
File:                     ssY0Ecpevxu6EACddC_E40NRzc4.roa (raw, json)
Hash identifier:          CYLv+HrZ6HIbKWGjJhA83vswtZH+zwFmHuK90caezkc=
Subject key identifier:   B2:C6:34:11:CA:5E:BF:1B:BA:10:00:9D:74:2F:C4:E3:43:51:CD:CE
Certificate issuer:       /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Certificate serial:       019B77591ADAA3A6636700AEE5AA9361CE78
Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/ssY0Ecpevxu6EACddC_E40NRzc4.roa
Signing time:             Thu 01 Jan 2026 02:18:06 +0000
ROA not before:           Thu 01 Jan 2026 02:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60295
IP address blocks:        193.25.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:1a:da:a3:a6:63:67:00:ae:e5:aa:93:61:ce:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
        Validity
            Not Before: Jan  1 02:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b2c63411ca5ebf1bba10009d742fc4e34351cdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1a:75:25:92:8e:6b:4a:c0:7c:53:9c:0d:2a:
                    86:a3:0f:f3:10:b7:a0:2b:10:62:10:38:26:58:73:
                    95:d8:d6:32:5d:94:eb:89:51:c8:d1:24:34:14:fd:
                    df:f6:c8:94:11:f0:28:8a:3d:1b:cf:68:69:22:62:
                    cb:16:c1:38:ca:34:1f:03:3e:03:e7:19:f8:26:42:
                    95:50:31:42:55:49:80:75:50:a6:0a:8a:e8:b3:d3:
                    09:87:66:c9:4b:a3:50:63:a8:0f:59:89:4e:33:07:
                    11:f9:2f:d8:4e:66:62:2b:52:41:75:3e:6a:99:3d:
                    13:39:8a:62:6a:bf:21:34:b9:92:a6:ac:69:97:bc:
                    76:4e:18:8f:60:1c:25:f8:b4:ad:25:d6:ff:87:47:
                    38:51:a4:eb:fe:3f:8a:a0:61:67:cb:b0:74:18:28:
                    6f:7f:b6:e7:05:a2:d1:ae:c7:10:00:3f:c3:fb:ac:
                    5a:13:2d:2e:75:c8:75:3a:4d:2c:a1:65:8e:d0:1e:
                    bb:aa:56:31:c6:27:a2:90:59:ef:6e:91:c5:23:40:
                    9f:a1:12:d1:7c:31:fb:4e:84:80:59:94:04:a9:ad:
                    2e:23:4f:37:73:d7:de:cb:02:41:32:11:78:ec:83:
                    a8:8c:59:9d:59:bc:bb:74:87:98:05:44:03:bc:c7:
                    e7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C6:34:11:CA:5E:BF:1B:BA:10:00:9D:74:2F:C4:E3:43:51:CD:CE
            X509v3 Authority Key Identifier:
                keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/ssY0Ecpevxu6EACddC_E40NRzc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.25.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:c3:45:9f:46:3e:11:c2:06:f9:62:11:c7:2b:cc:80:df:59:
         d4:c5:a2:1d:4b:9c:07:4e:75:0c:c5:ec:09:da:5f:91:cb:2a:
         8a:8c:be:4d:74:1d:21:0b:fb:89:77:07:a1:47:12:4d:82:0b:
         7f:c7:06:5f:4e:cc:40:52:67:5d:26:9e:ae:88:e2:46:fe:2a:
         7e:d1:47:69:2a:fe:21:e1:fc:dc:a0:e4:1a:e2:24:fc:7f:57:
         47:8b:77:2e:df:3c:d4:0f:c4:76:db:21:ed:6b:1f:87:52:79:
         c7:89:cb:a2:fe:d7:bf:d3:1d:e9:73:b3:1b:3c:94:b9:f9:d3:
         b1:5b:95:5d:2b:fb:7f:ff:a9:8a:c9:a1:9d:3f:7a:c4:b7:70:
         67:89:bf:aa:57:12:50:3b:1a:50:46:7d:0c:8a:4a:04:8e:5a:
         79:fa:72:48:18:ca:dd:39:e0:3f:67:76:fe:90:a2:f4:26:37:
         cb:9b:49:de:e6:2c:39:76:82:be:a1:1e:54:9f:ec:8c:e4:97:
         8e:5e:2b:9c:41:43:46:82:e2:8e:33:09:6c:71:61:cd:52:75:
         0d:07:da:77:e7:01:16:c1:3b:3c:e4:64:68:00:e1:1e:ef:c5:
         71:03:4a:cb:a6:d2:d0:8b:c0:69:ae:e4:50:a5:f6:29:d0:0a:
         3b:1c:fc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:51:29 2026 by rpki-client