This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa
File:                     r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa (raw, json)
Hash identifier:          8dNxZY7QKRfX/M2WT1sGj39y/DFg2Rn6j5AsES2fgtU=
Subject key identifier:   AF:BC:A4:AB:E2:3C:96:30:EA:D9:05:F1:66:B6:05:02:A0:56:81:DF
Certificate issuer:       /CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
Certificate serial:       019C4836A0069799E4B21C1B40751B2FB2F1
Authority key identifier: E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa
Signing time:             Tue 10 Feb 2026 15:41:05 +0000
ROA not before:           Tue 10 Feb 2026 15:41:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        2a10:4780:a4::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Feb 2026 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:48:36:a0:06:97:99:e4:b2:1c:1b:40:75:1b:2f:b2:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5da8e9cfc8b160ec59b540f39d8973d4218312a
        Validity
            Not Before: Feb 10 15:41:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=afbca4abe23c9630ead905f166b60502a05681df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:af:c5:2d:d4:a0:bc:5c:a4:9a:e0:b0:6b:2b:
                    9f:0e:be:d1:0b:8e:d5:2e:11:ac:b8:5a:f5:03:84:
                    81:b0:34:c7:44:38:16:44:a6:fa:3c:e7:fb:5a:0f:
                    53:fc:4b:c1:52:48:2c:bb:f4:49:46:83:f4:69:ec:
                    8c:00:45:22:80:ee:b6:f1:97:6f:ba:d1:ea:55:24:
                    81:fd:92:1e:0f:dd:1a:16:52:bf:a6:c3:ac:be:c5:
                    89:33:1f:5d:6c:8d:47:ad:a9:03:1d:42:a2:aa:72:
                    6d:49:71:ab:a1:ed:af:b4:1c:3b:76:3f:bf:0f:7d:
                    1a:c0:1d:a3:4e:3a:21:0c:88:41:53:c4:5a:84:62:
                    61:84:88:51:89:34:c0:bc:2e:7f:48:0b:1d:04:c9:
                    e6:9f:c8:3f:a6:dc:c5:e9:26:56:66:b0:6d:6d:ae:
                    2f:29:7b:59:d6:68:82:f3:a9:8e:39:2c:71:f3:82:
                    25:13:a0:91:b5:9c:21:1f:cb:07:81:3b:48:fa:d9:
                    d6:7f:11:a9:88:1d:61:ca:e4:ad:c1:3a:40:3f:5b:
                    fe:79:c7:ff:44:35:d3:f6:15:37:62:e5:03:70:b4:
                    f9:ab:82:11:b7:ba:0c:4b:58:7b:ba:17:07:53:57:
                    a4:4b:f3:1a:a2:f9:92:54:e7:72:00:85:17:5a:06:
                    82:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BC:A4:AB:E2:3C:96:30:EA:D9:05:F1:66:B6:05:02:A0:56:81:DF
            X509v3 Authority Key Identifier:
                keyid:E5:DA:8E:9C:FC:8B:16:0E:C5:9B:54:0F:39:D8:97:3D:42:18:31:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/r7ykq-I8ljDq2QXxZrYFAqBWgd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/003ca9-c390-4274-8fc6-7c504703bb02/1/5dqOnPyLFg7Fm1QPOdiXPUIYMSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4780:a4::/46

    Signature Algorithm: sha256WithRSAEncryption
         6b:41:e6:de:e9:c5:ee:5d:9a:bd:98:cd:ee:f4:09:c7:f2:83:
         08:8f:1c:d7:e8:e7:b7:87:39:91:aa:4b:cf:ab:83:00:b8:9c:
         dd:33:e3:bf:42:6d:ed:5b:66:c9:36:93:1f:0c:41:56:ba:70:
         8e:1d:89:df:b5:cb:2f:2d:ea:fc:17:1f:41:52:7e:69:e2:97:
         bd:1a:9c:d1:60:36:6b:3e:d1:57:37:d2:c7:7d:96:41:0b:99:
         72:82:51:a5:e6:38:da:44:a1:7e:4b:89:9e:37:cd:31:b0:64:
         34:1f:87:11:ef:eb:e9:91:e9:0a:fa:fa:4e:14:6d:7d:0f:fb:
         0a:0f:d3:3a:7b:c9:22:d9:20:41:3a:ec:00:1e:a5:2b:5c:f5:
         86:be:94:e2:b3:b4:2c:f9:06:ad:d6:7e:ab:ee:0f:6d:04:40:
         f7:0d:2f:97:ab:43:7e:55:74:15:07:d8:ab:d7:15:9f:52:25:
         54:70:fe:51:37:9a:82:0f:0a:47:f8:99:27:7e:c1:4e:2b:9a:
         74:62:f1:86:19:fa:a8:63:43:61:5f:91:a6:ec:9f:e0:34:39:
         11:e7:61:72:c7:81:76:92:32:fe:a0:84:ec:23:95:62:f7:22:
         24:f6:01:80:7a:0f:0e:95:55:cb:4e:a1:61:08:ce:91:75:01:
         b7:16:87:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 06:36:35 2026 by rpki-client