This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w3EcU0eFOdDRnKSkG15rwBA1atA.roa
File:                     w3EcU0eFOdDRnKSkG15rwBA1atA.roa (raw, json)
Hash identifier:          /vveBhOMD0oU4ajVC8qOixintqX5+DJFJKb9YUDUjCs=
Subject key identifier:   C3:71:1C:53:47:85:39:D0:D1:9C:A4:A4:1B:5E:6B:C0:10:35:6A:D0
Certificate issuer:       /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial:       019B78349A21190D78A05B8B3D703E2F7938
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w3EcU0eFOdDRnKSkG15rwBA1atA.roa
Signing time:             Thu 01 Jan 2026 06:17:51 +0000
ROA not before:           Thu 01 Jan 2026 06:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213923
IP address blocks:        193.183.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:9a:21:19:0d:78:a0:5b:8b:3d:70:3e:2f:79:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
        Validity
            Not Before: Jan  1 06:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c3711c53478539d0d19ca4a41b5e6bc010356ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:ab:61:bb:81:86:27:08:38:ea:5f:7e:78:
                    4a:35:de:3f:29:39:a3:12:36:b9:97:6c:c6:7a:05:
                    37:26:f1:f1:46:31:f5:35:fd:04:56:da:d6:ea:2c:
                    a7:e7:40:88:f9:0b:c7:74:3f:71:ed:3c:9c:cb:80:
                    b6:ef:ea:8f:30:03:ab:32:d4:c8:41:d2:2c:64:42:
                    96:d3:d7:f1:e4:88:17:8d:56:70:6d:1b:92:41:49:
                    7b:0e:aa:25:87:1d:eb:64:20:22:4d:7e:b7:9e:8c:
                    37:84:5a:91:7a:62:4e:21:d3:a8:f8:e9:b4:1d:90:
                    89:84:b9:d0:8f:7c:fa:31:d4:ad:be:d0:8a:33:f3:
                    9f:f5:60:67:6f:15:23:6a:3d:11:87:ec:74:7e:6f:
                    6e:4e:e0:31:b8:70:ec:2e:de:42:10:0c:f0:6c:22:
                    ff:89:a8:3b:43:9a:26:b0:69:e7:06:23:71:96:8f:
                    e6:8b:4a:94:63:24:70:a6:78:16:36:2f:bc:3f:b4:
                    ce:a8:51:63:1f:b3:91:ed:40:57:f5:e5:ab:ba:cc:
                    da:b5:f6:7f:6b:d5:b8:ea:3c:7f:fd:5f:ce:9e:65:
                    28:c6:d2:57:68:52:5d:3b:67:b3:13:62:7b:59:3b:
                    83:37:42:3d:f1:55:b2:4b:d6:ca:b9:5d:45:eb:31:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:71:1C:53:47:85:39:D0:D1:9C:A4:A4:1B:5E:6B:C0:10:35:6A:D0
            X509v3 Authority Key Identifier:
                keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/w3EcU0eFOdDRnKSkG15rwBA1atA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.183.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:23:8f:29:2e:8e:e4:1b:69:73:2d:79:39:b3:9f:42:f1:d7:
         32:54:52:9a:0d:b7:c1:7b:bd:75:f1:66:f3:32:e9:de:fb:1f:
         dd:e2:ac:12:d9:04:15:e7:4c:eb:41:a5:2b:a7:84:e5:79:87:
         27:21:ec:c5:c5:9e:20:21:6f:f4:d6:58:7f:fd:a6:f0:26:0e:
         20:8c:7e:a7:d7:e8:c1:26:30:43:5b:b9:a0:ee:2f:b6:d5:ad:
         60:92:49:58:92:83:8c:38:1e:67:c5:93:e4:57:d0:67:f7:80:
         47:aa:35:b5:29:10:f1:f1:94:32:58:46:d1:31:73:30:79:57:
         bf:8e:93:1d:2c:e1:e8:ac:5d:33:d8:5d:75:42:1d:6c:15:e7:
         a5:6e:79:9c:be:2b:5b:30:4e:55:3e:d4:e5:b3:38:13:19:4f:
         15:58:28:34:80:a3:7c:44:e0:80:85:07:92:1f:4e:4b:e5:e0:
         de:6e:8b:9e:e5:00:df:08:bc:98:bd:af:3f:72:c4:6e:84:98:
         58:0c:21:1e:58:22:b7:ce:af:d0:fd:6c:70:79:f8:d4:bd:fa:
         3a:9c:61:29:26:4d:09:b4:a1:27:56:d0:e6:2a:c1:d1:c2:17:
         48:66:af:44:06:64:af:68:74:90:d1:05:b8:40:02:6f:29:98:
         3c:7c:c1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:03:32 2026 by rpki-client