This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ipq9YcAYnvrFr3vqcqcr947YdMg.roa
File:                     ipq9YcAYnvrFr3vqcqcr947YdMg.roa (raw, json)
Hash identifier:          5bi2ErlqCm4qbH54sBMbvuS3P5od6hC4MqJwITyM1xA=
Subject key identifier:   8A:9A:BD:61:C0:18:9E:FA:C5:AF:7B:EA:72:A7:2B:F7:8E:D8:74:C8
Certificate issuer:       /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial:       019B783460640AFA80B513DDFDB8C2C445E2
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ipq9YcAYnvrFr3vqcqcr947YdMg.roa
Signing time:             Thu 01 Jan 2026 06:17:36 +0000
ROA not before:           Thu 01 Jan 2026 06:17:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44515
IP address blocks:        193.181.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:60:64:0a:fa:80:b5:13:dd:fd:b8:c2:c4:45:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
        Validity
            Not Before: Jan  1 06:17:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8a9abd61c0189efac5af7bea72a72bf78ed874c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:c0:33:3d:c6:b1:72:e4:24:fe:71:03:8b:
                    88:d1:50:05:45:00:45:59:52:d9:83:bf:3e:d8:d4:
                    91:ec:9f:79:49:27:2b:56:a7:c2:09:01:ac:50:0d:
                    df:f9:8f:b9:93:5e:06:a0:50:2e:b5:b2:ef:39:1a:
                    83:f6:11:3f:93:53:52:6e:54:85:25:ef:10:b3:24:
                    84:38:b6:23:33:fb:16:44:d2:d1:22:f4:fb:23:e2:
                    a6:82:cf:42:06:01:ff:4d:6c:1c:fb:67:66:d5:8a:
                    a6:c0:11:0a:f0:3e:82:3e:c7:46:c8:92:cd:dc:3f:
                    d1:45:bb:37:ee:2e:1c:e3:dd:09:8a:0b:9f:19:5c:
                    b4:e1:e8:d5:2b:c4:f7:b7:5a:5f:3e:3b:fc:f7:1a:
                    1d:14:ea:df:4f:c4:28:78:8a:c6:5e:eb:05:be:70:
                    8c:50:61:3e:d9:ed:4e:20:ff:25:df:28:40:a5:ef:
                    da:48:a0:99:1c:19:14:7e:37:ff:a3:f2:c9:80:69:
                    05:25:9c:31:4d:57:6d:07:a1:fd:92:5e:2f:e9:a2:
                    2a:1e:9f:55:96:32:b7:b3:5f:9f:6d:77:94:ae:5b:
                    ba:ce:b9:00:7a:ea:21:d7:c1:8f:00:2e:cf:8e:9f:
                    c2:4a:9d:dd:d3:57:ae:34:ba:52:e9:f4:b7:db:dd:
                    6b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9A:BD:61:C0:18:9E:FA:C5:AF:7B:EA:72:A7:2B:F7:8E:D8:74:C8
            X509v3 Authority Key Identifier:
                keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ipq9YcAYnvrFr3vqcqcr947YdMg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.181.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:3a:ef:9d:75:7c:ac:28:e5:e9:74:7e:5d:fc:ea:ff:6e:68:
         81:70:d2:87:5c:2d:df:e2:35:06:90:36:37:62:0e:40:3e:49:
         a9:46:1c:77:25:89:e8:8f:c0:ad:0f:6f:85:92:d8:72:c8:19:
         a2:11:8b:ee:05:4e:b7:ef:a7:53:8f:a7:e4:05:b6:f2:fc:5f:
         bb:e3:db:0a:f5:ad:95:13:67:75:99:da:63:10:ee:4c:f5:d2:
         bc:e5:9a:d3:3f:32:b0:16:78:fc:60:f5:6a:70:f8:41:94:22:
         53:ff:5f:b1:a6:b9:8d:3f:cf:f1:d4:07:98:24:7a:d5:37:35:
         1e:ee:36:db:96:b5:80:ed:63:4b:c8:67:85:15:77:89:ca:45:
         2f:ef:3d:1d:4c:01:e3:91:bf:da:8c:7e:14:75:ff:43:ed:3a:
         88:a3:c9:36:3c:17:1f:d1:df:75:00:59:2d:38:a2:18:66:f5:
         fc:d7:5c:0a:16:49:b0:78:7c:17:31:0e:19:d7:76:b8:27:46:
         01:a5:df:e9:3c:5c:50:c8:8f:48:3d:1a:19:c4:fc:5b:97:05:
         08:a4:df:b7:ea:ac:8e:33:28:74:36:b4:db:78:fd:a4:60:32:
         ae:2d:57:9e:02:25:e2:90:90:f5:0f:e5:96:96:bf:4b:5d:83:
         d6:ce:1e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:43:39 2026 by rpki-client