This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/nileVr-DQfSJAZFmbcbQEtK8Yk0.roa
File:                     nileVr-DQfSJAZFmbcbQEtK8Yk0.roa (raw, json)
Hash identifier:          9mZq8h73P9FU0Z0VCgdb2KmGquLGZE66QT5Z6ZqwuxM=
Subject key identifier:   9E:29:5E:56:BF:83:41:F4:89:01:91:66:6D:C6:D0:12:D2:BC:62:4D
Certificate issuer:       /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial:       019B7759056A1DC759341C21FAD911AB5ADC
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/nileVr-DQfSJAZFmbcbQEtK8Yk0.roa
Signing time:             Thu 01 Jan 2026 02:18:01 +0000
ROA not before:           Thu 01 Jan 2026 02:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8447
IP address blocks:        157.247.0.0/16 maxlen: 24
                          192.102.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:05:6a:1d:c7:59:34:1c:21:fa:d9:11:ab:5a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
        Validity
            Not Before: Jan  1 02:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9e295e56bf8341f4890191666dc6d012d2bc624d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:38:b3:7f:37:9f:a0:70:c2:20:82:16:05:
                    ad:03:d2:09:52:3c:eb:1c:7b:8d:43:21:ce:31:1e:
                    1c:80:e8:1d:4f:9c:95:f8:dd:bd:dd:c1:a9:23:b0:
                    19:23:05:39:fd:e7:e2:09:7e:e2:1b:a9:30:c4:0b:
                    0c:20:8c:6a:65:2c:f4:55:ac:fd:d0:9c:2e:67:19:
                    4d:fb:8d:ca:25:43:45:f9:65:d2:41:b2:96:be:55:
                    1f:a6:e7:29:f8:26:67:83:78:05:80:13:63:5b:3a:
                    b9:64:a8:df:b2:08:d8:3f:6e:fe:0f:21:ce:12:29:
                    9f:8f:35:e2:0a:ce:6d:8b:a6:35:10:e0:f4:32:f3:
                    15:09:aa:39:d1:4f:eb:ec:7f:63:0f:a4:92:07:bc:
                    90:40:99:88:a8:66:53:9a:04:21:c2:29:c1:c3:3c:
                    54:c0:9c:29:1f:99:a6:58:5d:14:c2:9e:49:e0:22:
                    7c:ab:03:5b:3a:40:51:42:e9:9d:d0:cd:2f:08:21:
                    47:72:18:dd:22:14:6e:c9:60:a3:39:db:61:e4:1f:
                    e9:b5:01:33:27:55:5b:b9:28:a9:05:12:68:35:8a:
                    03:fe:3b:89:b2:c9:9b:94:45:3b:90:6d:eb:d0:91:
                    2c:f6:4a:51:46:dc:ed:96:99:f5:1f:4c:60:b9:6b:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:29:5E:56:BF:83:41:F4:89:01:91:66:6D:C6:D0:12:D2:BC:62:4D
            X509v3 Authority Key Identifier:
                keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/nileVr-DQfSJAZFmbcbQEtK8Yk0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.247.0.0/16
                  192.102.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:6c:e7:fa:b3:38:b1:bb:fd:5f:1f:01:70:d6:4d:77:52:b1:
         c2:0f:e3:9d:17:81:48:23:19:6a:01:ff:87:3a:5c:c7:d1:a3:
         12:9e:41:42:d8:0b:9a:b4:d4:83:7c:5d:9c:3a:33:cd:41:33:
         3a:f3:03:c6:e9:8c:9e:f9:a1:b4:65:00:b8:b8:ca:b7:51:8b:
         4b:a4:3a:06:45:05:de:44:03:45:1b:5b:f6:2f:3c:b4:c5:fb:
         f7:22:5f:be:2d:b8:18:79:67:ac:00:fa:c1:88:7a:ee:e9:5a:
         b8:73:e9:8d:6f:dc:2c:27:17:56:a0:f5:c4:88:ae:f8:8e:24:
         04:08:ce:ca:3c:82:da:00:69:4c:07:c6:2b:6f:9e:65:9a:0e:
         98:dd:36:de:d2:22:26:bc:fb:52:e4:f4:25:3c:dc:1b:a3:e0:
         de:b8:e3:90:7c:dd:5d:97:16:0b:79:9f:5c:c7:8b:b7:4e:19:
         20:a0:3b:32:86:a2:fe:5e:fd:eb:a0:8c:4d:82:57:b0:18:bf:
         90:16:cb:19:5c:53:df:08:2d:d6:e5:84:33:7a:12:f3:c2:e4:
         9d:18:95:ff:e9:e0:15:5f:6a:80:cd:a7:e7:d3:97:25:f9:f5:
         3d:7c:e9:0d:27:34:2c:ed:59:51:c7:a0:f7:0b:c9:9d:1a:8f:
         c0:96:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:43:27 2026 by rpki-client