This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/a4tcSb4rS0ZTyQ0HQWUrw9ZU1WI.roa
File:                     a4tcSb4rS0ZTyQ0HQWUrw9ZU1WI.roa (raw, json)
Hash identifier:          6y7B5mYALV8RuAK+rFKCQl3TCy8ZRF7yNkPXxeMdXfU=
Subject key identifier:   6B:8B:5C:49:BE:2B:4B:46:53:C9:0D:07:41:65:2B:C3:D6:54:D5:62
Certificate issuer:       /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Certificate serial:       019B7E38613E5F4B25D9A02483316EE1D853
Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/a4tcSb4rS0ZTyQ0HQWUrw9ZU1WI.roa
Signing time:             Fri 02 Jan 2026 10:19:42 +0000
ROA not before:           Fri 02 Jan 2026 10:19:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49556
IP address blocks:        195.26.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:61:3e:5f:4b:25:d9:a0:24:83:31:6e:e1:d8:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
        Validity
            Not Before: Jan  2 10:19:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6b8b5c49be2b4b4653c90d0741652bc3d654d562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:cc:c5:cb:65:cf:8b:09:4e:7e:1d:03:bf:
                    ca:c8:87:0f:4f:c7:d1:55:8f:5c:ef:3b:04:e8:a1:
                    20:8b:91:87:c9:f5:12:08:1b:e0:6c:31:9e:da:bb:
                    3a:b5:9d:99:e9:68:dc:f7:5f:dc:13:f4:50:fc:77:
                    0d:eb:b9:0f:d3:b7:47:cd:8a:d6:99:81:f5:74:dc:
                    91:ac:f4:53:21:f9:f2:d2:f4:39:53:cc:f8:b9:a2:
                    d0:18:f8:5f:79:81:ab:0b:18:10:50:16:11:47:44:
                    e3:0d:85:8a:d1:9c:44:e7:76:d9:08:03:03:7c:ba:
                    89:90:80:1f:28:b2:89:dd:f8:57:18:b3:1d:bd:14:
                    11:a8:65:8f:09:50:77:1d:87:95:ba:5c:a6:b8:75:
                    ea:d0:b9:6d:b7:8a:ef:c9:7d:9e:48:49:71:74:5a:
                    3b:61:1f:52:18:01:1b:25:8d:e4:fb:2a:91:90:f1:
                    3e:ef:4f:97:fe:7a:d2:38:e0:70:8f:68:32:b6:4a:
                    4e:b4:91:b1:2c:f1:3a:1e:55:98:87:da:c6:0c:f7:
                    a3:da:23:fb:32:67:34:27:a9:5d:c4:ec:16:c6:72:
                    f0:e7:f1:d0:b7:be:2e:ac:a3:4a:03:ff:31:fa:80:
                    78:b4:0e:6e:04:8c:f0:35:c8:d8:0d:70:a4:55:33:
                    8c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8B:5C:49:BE:2B:4B:46:53:C9:0D:07:41:65:2B:C3:D6:54:D5:62
            X509v3 Authority Key Identifier:
                keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/a4tcSb4rS0ZTyQ0HQWUrw9ZU1WI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.26.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:a7:01:d0:51:87:00:26:a0:e1:a7:c8:0a:7f:c0:fb:53:92:
         34:95:61:72:26:7f:1c:e4:0c:66:40:a5:57:8b:14:6f:9a:af:
         5a:8b:b5:01:ea:e3:d0:34:d6:7e:bb:f9:1e:0a:89:cf:93:4a:
         25:a1:1c:51:0a:10:63:88:81:d5:94:4c:02:fa:70:df:df:75:
         e5:d8:b3:b6:30:f4:14:bf:fb:ee:29:d7:b4:46:75:d1:ca:cb:
         b6:22:25:3b:c6:db:a8:ee:39:05:96:56:ba:0d:3e:cd:c3:bb:
         58:77:64:f1:69:f9:90:b9:9d:90:f9:58:ef:64:f5:81:da:3d:
         ac:19:f6:a9:6d:07:79:b8:16:c3:23:51:f8:44:24:4c:c1:4b:
         05:c2:5a:8b:7a:6d:c2:48:6b:49:5d:81:6a:f0:5d:15:32:c2:
         9a:da:7d:79:03:0e:46:80:52:e7:5d:15:a2:8a:ad:02:e9:09:
         af:f9:b8:0c:19:d8:61:ff:29:02:3f:0a:54:1e:98:5b:2c:b3:
         1a:d2:0f:aa:a1:16:c8:f9:63:8d:c8:6d:26:3d:cd:dc:1c:f2:
         1f:2a:04:bb:5f:45:c8:93:e3:e0:0a:27:92:4d:43:90:5a:25:
         03:70:2b:40:25:c2:7d:eb:19:56:59:8d:11:93:ea:ae:0f:37:
         92:3c:7b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:22:35 2026 by rpki-client