This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/65v9LHi_MDiJFfxsRpTQKZGQtKQ.roa
File:                     65v9LHi_MDiJFfxsRpTQKZGQtKQ.roa (raw, json)
Hash identifier:          AD4zC7meiWbh1Y7ei46GISC0uTS4fKqWlAroEgp7qMg=
Subject key identifier:   EB:9B:FD:2C:78:BF:30:38:89:15:FC:6C:46:94:D0:29:91:90:B4:A4
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       019B7C803793A3020F90C843EB1E9996A8F8
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/65v9LHi_MDiJFfxsRpTQKZGQtKQ.roa
Signing time:             Fri 02 Jan 2026 02:18:56 +0000
ROA not before:           Fri 02 Jan 2026 02:18:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212238
IP address blocks:        93.88.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:37:93:a3:02:0f:90:c8:43:eb:1e:99:96:a8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Jan  2 02:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb9bfd2c78bf30388915fc6c4694d0299190b4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:1f:60:82:c6:70:8c:c3:c4:a8:8c:36:21:
                    3e:1a:7c:1f:f3:f9:c7:84:ad:e7:01:90:14:49:4d:
                    bb:5a:2d:8b:de:c0:6e:d9:98:2f:04:a8:59:4e:30:
                    eb:fb:b2:f5:0d:3a:9c:4b:f4:62:b0:4a:10:4b:94:
                    70:8f:76:27:99:b8:ad:3e:0f:19:30:2a:98:e0:cb:
                    95:4d:bd:cd:60:a0:90:e8:ec:27:63:68:03:9c:0b:
                    6c:ef:6b:b0:c2:6d:95:1c:20:9a:25:51:27:48:2d:
                    0f:2f:bb:68:29:1d:23:a0:37:64:72:ea:a1:2b:52:
                    06:93:45:58:5a:c5:9f:c1:06:39:b1:23:60:75:17:
                    52:f2:d1:d4:ef:d2:71:f0:54:b7:23:ff:6c:b5:09:
                    e6:d7:18:76:f0:20:5a:b3:4f:8d:05:64:63:dc:02:
                    fb:3b:61:75:f1:83:21:bc:79:ee:80:fb:3d:06:60:
                    38:71:f2:8a:85:9c:64:e0:8b:b6:8a:79:4a:90:a0:
                    39:5b:d8:87:01:56:21:a3:82:27:f6:f7:c4:d0:2c:
                    73:7b:40:ed:07:40:d7:7d:db:81:0e:37:ea:43:0e:
                    74:82:93:f3:a1:56:f9:2a:27:6e:a3:1b:07:1d:ed:
                    7f:28:6c:da:33:d5:02:82:0d:67:77:60:4c:26:4f:
                    c9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9B:FD:2C:78:BF:30:38:89:15:FC:6C:46:94:D0:29:91:90:B4:A4
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/65v9LHi_MDiJFfxsRpTQKZGQtKQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.88.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         78:77:d5:cc:08:9d:c2:96:fe:eb:a4:5c:9e:29:fa:69:90:d1:
         e0:e7:d6:28:17:93:67:04:59:9b:31:a9:09:ec:a2:20:47:17:
         13:4a:17:4b:b1:1c:bf:7a:21:02:be:ee:fd:c7:e5:ab:a5:30:
         4e:a4:fd:c0:bd:a2:a9:89:d1:cd:b1:7f:5e:f8:23:eb:f2:ef:
         18:54:76:0e:2a:bc:76:38:f2:6f:44:84:a2:66:38:4f:bd:0f:
         33:04:98:57:0c:92:72:5d:11:07:be:9e:5f:d6:d4:8a:a8:c0:
         0a:b2:e5:74:07:63:32:8b:00:ad:e7:b7:67:90:3c:23:7c:ac:
         03:1f:f6:e6:57:e6:5d:f1:42:91:a2:56:1e:f6:1f:5d:e6:75:
         38:84:01:f5:8a:30:0c:6e:3a:29:5a:bd:d3:76:1f:9d:f4:b6:
         a9:89:d2:37:38:60:77:c2:ab:e4:f8:b0:57:46:fe:d5:99:95:
         dd:0e:36:e4:a5:d0:83:e8:9b:66:d3:93:ea:02:f7:c3:1b:76:
         fe:2e:04:c5:8d:98:00:1a:e3:30:c3:92:4c:f1:4a:bf:85:89:
         bf:2c:55:5e:02:17:6a:fc:68:33:76:d9:ff:fa:19:f6:66:e2:
         fd:b2:b9:06:e2:3e:e5:6b:f0:22:7e:a4:bc:cb:73:46:f3:d6:
         12:65:cc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:03:58 2026 by rpki-client