This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/OG0MA0P-331V6_x2S3iABA12ElA.roa
File:                     OG0MA0P-331V6_x2S3iABA12ElA.roa (raw, json)
Hash identifier:          yBZDPzaktigpsyaBzxd/iTTuRUtpcBYUWNcpG8K5rdw=
Subject key identifier:   38:6D:0C:03:43:FE:DF:7D:55:EB:FC:76:4B:78:80:04:0D:76:12:50
Certificate issuer:       /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial:       019B7FF1B93A3F583249306D435BAAA0F57C
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/OG0MA0P-331V6_x2S3iABA12ElA.roa
Signing time:             Fri 02 Jan 2026 18:21:46 +0000
ROA not before:           Fri 02 Jan 2026 18:21:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203083
IP address blocks:        2a03:5840:290::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:b9:3a:3f:58:32:49:30:6d:43:5b:aa:a0:f5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
        Validity
            Not Before: Jan  2 18:21:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=386d0c0343fedf7d55ebfc764b7880040d761250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e1:b9:f7:56:6c:c7:a8:64:a8:29:6d:b5:fa:
                    d3:e6:a1:d4:02:12:0a:dc:28:40:56:26:9a:3e:df:
                    62:00:7e:01:e8:00:4c:3d:2a:6b:9d:df:5d:10:60:
                    6c:3e:fb:b4:71:0a:92:3a:e2:c5:be:35:ae:ae:83:
                    9c:0c:b0:b3:eb:2b:96:8f:77:4e:d1:42:0a:31:0d:
                    2c:81:8b:b7:a5:41:19:f3:db:13:a1:e8:6c:96:ca:
                    f5:87:54:f4:06:17:3b:12:13:20:af:77:ba:1c:ee:
                    aa:48:8d:89:57:f7:0e:38:b0:ab:74:be:6a:52:1d:
                    0b:6d:a1:89:04:9a:e4:92:ce:be:4f:cd:a4:09:24:
                    f4:fe:43:4d:0a:54:19:cf:ff:ea:1f:ab:4e:3d:a5:
                    b2:f2:ea:b6:f1:5f:ba:1d:a9:2b:79:09:37:36:2f:
                    f9:80:45:47:58:4f:00:d4:81:e7:8d:a7:1d:e3:14:
                    75:09:f9:c4:8a:7a:18:a0:ed:8b:1d:dd:00:96:f6:
                    65:a8:75:cd:2b:71:ec:8f:8e:b6:5b:93:1f:8a:ae:
                    e1:2e:b1:c0:f1:62:89:3f:dd:e9:ab:c7:ec:6c:97:
                    86:4e:e8:4e:33:2e:76:10:c8:ef:d3:b2:0b:ff:8e:
                    d9:ae:91:bf:db:62:db:aa:86:a9:f4:1e:c4:4d:51:
                    04:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6D:0C:03:43:FE:DF:7D:55:EB:FC:76:4B:78:80:04:0D:76:12:50
            X509v3 Authority Key Identifier:
                keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/OG0MA0P-331V6_x2S3iABA12ElA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:5840:290::/44

    Signature Algorithm: sha256WithRSAEncryption
         2c:a3:1b:05:c3:af:ba:87:74:6f:c8:a1:bd:ad:ca:00:02:12:
         25:cf:fd:44:23:b3:84:67:b2:24:a3:61:57:16:28:fe:04:c4:
         29:83:22:75:25:75:2e:90:c0:c9:2c:e7:31:f6:41:b7:c6:05:
         fe:3e:11:f2:bd:60:74:ac:c8:a7:c1:00:25:4a:74:1a:9b:96:
         ca:43:2a:96:0b:85:43:e3:da:35:44:00:87:ae:13:bd:41:30:
         2b:d0:a7:f3:a3:83:77:a6:a1:93:74:ec:06:94:52:29:18:07:
         8e:54:d1:0a:71:a0:48:60:02:18:93:63:6c:97:c6:0c:c3:cd:
         9e:6d:c0:2b:77:d2:86:11:39:8d:24:7a:e6:a1:0a:65:62:bf:
         14:76:44:2d:da:1a:af:2b:b5:e4:40:f2:27:63:93:eb:d5:04:
         19:32:6a:fd:43:2f:15:16:98:bd:51:2a:33:38:75:99:4b:69:
         a3:1c:6a:07:e5:89:d6:9f:b1:26:21:22:d3:a3:07:75:59:2b:
         22:ea:b6:9c:61:19:c0:d0:3b:e4:a2:98:de:a4:06:8e:f2:d0:
         0f:46:b5:11:ac:f0:89:7f:f5:3f:eb:b3:83:70:69:66:77:3d:
         90:e7:11:2e:03:37:d6:80:b4:48:b3:57:7a:e2:dd:0b:23:83:
         2c:e1:52:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 15:20:52 2026 by rpki-client