This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/PpVR1H9Dr3vZRcc8033VYEw1iR8.roa
File:                     PpVR1H9Dr3vZRcc8033VYEw1iR8.roa (raw, json)
Hash identifier:          HtJF9iQGIeR/alkm252L+bhPoI3G21HA8V6y+HAStow=
Subject key identifier:   3E:95:51:D4:7F:43:AF:7B:D9:45:C7:3C:D3:7D:D5:60:4C:35:89:1F
Certificate issuer:       /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial:       019B7A5B4C158664D48860E28C0E761FA366
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/PpVR1H9Dr3vZRcc8033VYEw1iR8.roa
Signing time:             Thu 01 Jan 2026 16:19:22 +0000
ROA not before:           Thu 01 Jan 2026 16:19:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58039
IP address blocks:        193.135.15.0/24 maxlen: 24
                          193.135.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:4c:15:86:64:d4:88:60:e2:8c:0e:76:1f:a3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
        Validity
            Not Before: Jan  1 16:19:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3e9551d47f43af7bd945c73cd37dd5604c35891f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:3d:53:74:25:0a:9d:a5:0d:ab:64:2e:7d:
                    5c:27:51:14:83:56:e9:23:f3:35:b8:44:9c:1d:ce:
                    e5:82:1c:a1:02:e7:41:72:3f:e2:64:7c:87:3c:89:
                    e0:8c:c9:d8:e2:fc:48:e0:5d:f4:d8:99:60:45:bb:
                    fd:2a:b1:b7:f3:57:47:95:30:b0:33:2b:b1:9c:8e:
                    5f:67:04:50:f2:7b:5e:de:13:a1:9a:e0:34:07:19:
                    03:f0:d5:eb:0f:f0:fd:7a:cb:8e:e0:e5:6b:cb:69:
                    07:51:79:e9:32:54:c3:7e:76:19:26:b7:f7:f9:37:
                    65:7f:61:85:07:62:b1:e3:22:29:dc:ac:e1:0d:ce:
                    d1:14:86:c9:75:39:c8:41:4b:71:b4:ae:92:01:4b:
                    10:8b:27:c8:48:fe:8e:54:d6:38:c0:2a:28:75:28:
                    ec:f1:74:82:78:32:10:3d:f2:a4:bb:84:bf:08:3d:
                    6c:5f:cc:fd:9b:77:c6:67:2e:e4:0f:a2:f0:9b:65:
                    2b:b1:10:2e:a6:fe:ef:77:96:c5:47:71:b1:f6:f7:
                    4c:d2:a6:b5:6e:a5:ae:d5:1a:22:70:16:c7:79:2c:
                    e2:f6:15:b7:8f:a2:0f:64:f8:f8:4e:1a:a6:ff:ae:
                    db:12:3d:94:a3:c6:b1:67:58:10:38:e9:74:d9:42:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:95:51:D4:7F:43:AF:7B:D9:45:C7:3C:D3:7D:D5:60:4C:35:89:1F
            X509v3 Authority Key Identifier:
                keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/PpVR1H9Dr3vZRcc8033VYEw1iR8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.135.15.0/24
                  193.135.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:92:58:a0:7a:da:5f:c2:f8:8f:35:53:2e:b7:bc:62:d9:bf:
         8f:08:af:1a:7f:c1:2b:40:f9:d8:2f:c3:a4:31:bf:1a:c8:be:
         e3:5a:f1:eb:bb:ed:ab:85:4e:c5:59:e5:b5:bf:69:18:5b:34:
         41:7f:88:ad:28:61:49:28:5c:5a:ab:bf:3d:18:33:c9:5d:73:
         22:c6:de:62:83:82:68:b1:ab:a7:ec:3e:38:59:99:38:a4:d6:
         2f:7c:19:da:d9:49:a7:5e:f9:78:36:8f:24:c3:07:5e:70:cb:
         1b:96:25:e0:0e:5f:9b:c3:b9:89:b5:4b:e3:ea:98:f7:d4:e3:
         3f:d8:7c:d6:4e:ca:22:95:23:49:bb:19:a0:38:73:d1:25:14:
         dc:a5:51:e1:43:39:8c:0f:42:bc:65:d3:e6:d8:1e:dc:67:c2:
         a2:a4:7d:d8:d3:76:21:d4:52:a2:0c:c4:c8:52:30:f9:7b:17:
         da:33:fd:3b:90:e4:32:85:47:ae:de:ce:f4:5d:54:ba:a6:81:
         e0:a8:f3:cf:bd:d6:d4:c1:46:ab:00:1c:04:55:c0:4e:32:91:
         99:c9:87:83:5a:60:66:6b:aa:9c:9d:b3:a7:a1:5f:fb:b0:1e:
         2d:61:52:73:ec:d6:41:1d:7b:12:c4:15:e7:65:20:e1:55:d6:
         3d:48:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:43:35 2026 by rpki-client