This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FeOSxQSJ2SUZAw52eHbd491Gy-M.roa
File:                     FeOSxQSJ2SUZAw52eHbd491Gy-M.roa (raw, json)
Hash identifier:          FcKZDJ4+FG/Cew0k4npzcg7eXY2/u1JxxQl8/+fmsHk=
Subject key identifier:   15:E3:92:C5:04:89:D9:25:19:03:0E:76:78:76:DD:E3:DD:46:CB:E3
Certificate issuer:       /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial:       019B783440B322AE0F843BDE1CC81AE3314D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FeOSxQSJ2SUZAw52eHbd491Gy-M.roa
Signing time:             Thu 01 Jan 2026 06:17:28 +0000
ROA not before:           Thu 01 Jan 2026 06:17:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3308
IP address blocks:        193.234.184.0/24 maxlen: 24
                          193.234.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:40:b3:22:ae:0f:84:3b:de:1c:c8:1a:e3:31:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
        Validity
            Not Before: Jan  1 06:17:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=15e392c50489d92519030e767876dde3dd46cbe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:e8:51:a2:e7:31:fe:2d:7b:2d:4a:28:a1:
                    f4:1a:43:53:dc:7b:e8:60:e9:a5:b6:b1:3a:97:6c:
                    1c:15:be:c3:2d:c3:45:95:11:2b:6e:1e:ea:d5:9f:
                    c2:1c:0c:3d:da:29:63:8f:e3:d8:f2:d4:00:98:3d:
                    66:7a:9c:8c:0d:a8:8c:d9:3a:71:95:2e:0e:f4:79:
                    95:da:9e:28:09:68:03:e5:13:d3:5d:9b:b1:96:78:
                    15:cb:81:be:53:99:8b:af:0f:f6:4d:9b:fe:fc:fe:
                    2a:d2:64:9b:c4:76:3b:08:fc:d4:c9:4a:6e:4a:32:
                    78:0f:36:21:8e:3f:39:a9:37:cd:5d:45:f4:25:19:
                    52:84:ac:f8:a5:3e:e6:cc:c6:5c:f7:36:73:9d:51:
                    1a:47:a3:c5:ff:0b:37:25:ff:24:b7:1c:16:a9:48:
                    1b:aa:97:d1:fb:52:2d:ed:ea:66:a0:6c:58:cf:f2:
                    7e:60:9a:70:34:39:97:f6:f4:06:db:2d:a6:ed:73:
                    7e:21:89:21:ac:16:9e:25:3c:e7:1d:0d:6b:bd:3c:
                    ae:e8:35:9a:d3:70:a5:3d:59:45:f8:ec:de:35:18:
                    b2:8a:3e:1c:e6:41:6f:96:55:91:18:47:0b:1a:07:
                    d3:dd:a6:34:df:4e:4c:95:bc:35:6a:2d:b3:00:c8:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E3:92:C5:04:89:D9:25:19:03:0E:76:78:76:DD:E3:DD:46:CB:E3
            X509v3 Authority Key Identifier:
                keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FeOSxQSJ2SUZAw52eHbd491Gy-M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.234.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:9f:e5:42:2e:e6:50:9e:b4:98:94:29:32:92:f8:d3:62:70:
         8c:c8:27:54:f6:92:4b:dc:4c:1b:78:e8:df:31:9c:96:05:76:
         9a:a9:bc:2f:c2:35:b7:b6:e9:73:50:ff:ae:54:71:ef:a8:66:
         cb:ae:32:f5:65:45:40:ad:4b:8a:03:22:58:d2:98:33:6c:63:
         b1:ba:b5:39:a3:c1:41:95:6e:2a:35:24:96:7e:7d:cb:18:0d:
         49:83:fb:9d:64:28:85:12:25:4c:69:5e:24:d5:e6:ad:70:18:
         e7:01:4f:83:38:5c:bc:ce:72:4e:35:2c:e3:21:c7:21:3a:e9:
         ce:9d:e6:ef:35:0b:b4:48:37:a4:23:14:ac:64:ce:cf:d7:a0:
         45:98:bd:51:32:d1:7b:8f:28:4e:6a:37:83:74:fb:0d:cc:7b:
         76:03:3e:4c:ab:c1:80:4f:2c:16:ac:1b:db:d0:a9:7c:5b:28:
         c1:ae:c7:6c:28:8f:b3:c7:38:d2:d8:e5:99:ef:23:00:9b:62:
         11:1f:55:b2:80:95:78:7e:4f:e3:a6:d2:2f:b7:e9:65:47:fb:
         3f:50:69:c5:9d:00:bb:09:3a:4d:95:0e:a9:7d:44:5b:44:8f:
         70:9e:cf:61:d0:47:c6:68:68:3d:55:11:ae:75:8d:c0:2b:29:
         1f:be:8f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:29:24 2026 by rpki-client