This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/nwyoORHnVLqfYrksvB0f6CfIa6k.roa
File:                     nwyoORHnVLqfYrksvB0f6CfIa6k.roa (raw, json)
Hash identifier:          e9CYwkBaqUibsyMU/gzh+rV4KhbNY883umfRTcrBM0Y=
Subject key identifier:   9F:0C:A8:39:11:E7:54:BA:9F:62:B9:2C:BC:1D:1F:E8:27:C8:6B:A9
Certificate issuer:       /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial:       019B7758BCA1C0756F4360790F12F8FB4F50
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/nwyoORHnVLqfYrksvB0f6CfIa6k.roa
Signing time:             Thu 01 Jan 2026 02:17:42 +0000
ROA not before:           Thu 01 Jan 2026 02:17:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203416
IP address blocks:        194.50.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:bc:a1:c0:75:6f:43:60:79:0f:12:f8:fb:4f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
        Validity
            Not Before: Jan  1 02:17:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9f0ca83911e754ba9f62b92cbc1d1fe827c86ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:fd:0c:d0:fd:59:d9:63:7d:1e:18:10:f3:
                    83:73:15:10:b6:06:47:f4:51:a7:5f:c8:60:f7:15:
                    65:0b:48:70:74:61:fa:7a:85:c6:f0:f9:7e:f1:e9:
                    7a:c7:a1:2c:5e:f9:a2:a8:f5:3d:16:cf:5f:96:ce:
                    44:e4:1e:bc:87:83:2c:28:c7:24:d9:fc:4b:b6:46:
                    04:c1:22:97:01:d7:0b:2a:56:cf:e0:68:8e:3a:20:
                    6f:0a:d2:53:96:ea:fe:86:7e:4a:f7:68:57:52:9b:
                    01:b2:f6:fe:b9:e2:a9:b2:6a:1e:5d:1b:34:29:07:
                    05:fc:81:9f:c8:b8:9f:a0:ae:dd:0b:fa:14:43:8f:
                    53:ea:ab:f8:56:0b:28:ff:db:2c:f9:f6:04:3a:e6:
                    bf:c4:6f:aa:54:95:54:5b:60:37:35:77:28:16:1d:
                    32:0c:38:44:95:95:97:be:25:22:56:cb:79:45:c8:
                    6b:ad:cc:d8:b4:20:cf:5d:83:d3:96:dc:2a:88:ac:
                    03:be:be:0b:35:e5:0d:26:ec:dc:4b:22:bc:6a:d8:
                    67:56:05:c2:2a:28:44:e6:7c:e9:de:fc:ff:2e:0d:
                    fb:d5:68:6a:62:b8:ca:ff:09:85:7a:99:79:50:0a:
                    0d:d5:88:9b:6e:6c:27:db:68:eb:e1:ed:f7:48:f2:
                    96:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0C:A8:39:11:E7:54:BA:9F:62:B9:2C:BC:1D:1F:E8:27:C8:6B:A9
            X509v3 Authority Key Identifier:
                keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/nwyoORHnVLqfYrksvB0f6CfIa6k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         df:44:46:a0:db:11:18:20:43:3c:f1:8c:aa:60:17:99:70:84:
         b4:aa:43:2e:13:22:4f:d5:29:fc:25:55:23:52:d2:b5:8b:dc:
         27:36:ea:dd:c0:94:54:1a:e0:79:19:b6:f1:e1:20:c9:a8:3e:
         7d:ac:f8:9a:0f:78:48:fa:30:5f:71:19:9f:87:98:3b:37:6d:
         db:4e:2b:e2:ae:9f:91:fb:fe:af:b2:05:0a:33:13:a5:fe:19:
         68:6a:cf:aa:3e:23:2d:d3:2d:64:76:eb:be:70:39:34:42:f2:
         89:63:48:c2:b1:4e:8d:a4:f4:16:20:62:bc:2b:15:ad:c1:a6:
         21:b1:95:0c:0a:70:3d:5d:2a:81:ae:3c:9d:ef:aa:7f:a9:28:
         73:42:89:3f:b9:39:7f:6c:ad:4d:31:bb:c2:af:88:69:b8:6d:
         fa:c8:0f:21:ec:65:b9:03:48:8b:2b:93:3f:ca:d4:f2:4b:a0:
         71:9d:a8:04:d4:9b:9c:68:bd:80:68:6f:d1:1b:cc:97:9c:94:
         1e:93:bd:96:5f:b0:a8:be:8d:68:58:9c:0c:85:44:bd:ca:5e:
         4b:ee:9c:c7:e7:54:3d:14:fd:70:03:8c:d8:78:31:4f:12:f9:
         b5:fe:f7:36:2a:4e:1e:f5:2e:ee:2f:2b:e8:68:dc:01:2f:c8:
         d3:13:d2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:20:40 2026 by rpki-client