This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/xeiogGwAtCeCjBLRSmo3ZJocRjA.roa
File:                     xeiogGwAtCeCjBLRSmo3ZJocRjA.roa (raw, json)
Hash identifier:          KSUZRzfRR5rgozWRC7ddCd3BDEPePUr8DzDwvCXXpUw=
Subject key identifier:   C5:E8:A8:80:6C:00:B4:27:82:8C:12:D1:4A:6A:37:64:9A:1C:46:30
Certificate issuer:       /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial:       019B7FF1BF887032D2F6DEA6A1F1F83710F2
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/xeiogGwAtCeCjBLRSmo3ZJocRjA.roa
Signing time:             Fri 02 Jan 2026 18:21:48 +0000
ROA not before:           Fri 02 Jan 2026 18:21:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210344
IP address blocks:        2a03:5840:160::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f1:bf:88:70:32:d2:f6:de:a6:a1:f1:f8:37:10:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
        Validity
            Not Before: Jan  2 18:21:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c5e8a8806c00b427828c12d14a6a37649a1c4630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:9d:04:e1:e4:02:93:64:dd:83:ae:62:27:
                    eb:b6:6e:b5:f7:71:db:f5:f3:5d:9f:12:f4:af:79:
                    99:d3:18:7f:2e:7e:ad:b0:24:e6:ef:e0:d1:fa:b6:
                    a5:a3:0e:10:f3:53:21:f6:78:24:a1:12:34:f9:22:
                    93:21:88:eb:c2:97:de:da:e4:19:14:08:a4:fd:0a:
                    82:64:e4:a6:eb:19:93:be:d1:f0:be:1e:08:c4:76:
                    37:b2:d7:3c:7a:f4:1d:a2:ef:c2:b0:dc:f2:3e:53:
                    ff:36:d6:ae:73:ee:ab:0a:2b:af:9a:c6:8e:24:bb:
                    41:3a:2b:49:3e:23:6e:c2:69:5f:6d:6c:85:d8:50:
                    a0:bd:23:f9:7a:e3:1f:02:3c:fc:30:5c:94:7a:e6:
                    4f:17:79:97:9d:9a:21:b3:82:fa:2e:b1:73:c8:80:
                    64:ca:f7:f4:1e:95:29:e3:94:99:72:a7:88:62:e7:
                    73:54:c3:58:b3:62:bc:06:b4:53:7c:c5:05:fe:13:
                    a3:04:da:10:f0:e2:78:96:98:5f:26:ed:d6:7b:2b:
                    a2:6f:45:6d:0e:7a:ac:8f:9f:64:2b:a0:20:d7:d3:
                    c4:f7:27:da:5a:df:1c:51:7a:60:d7:d6:1a:ae:58:
                    e2:69:44:24:df:76:59:29:78:3c:90:c9:58:bd:2a:
                    32:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E8:A8:80:6C:00:B4:27:82:8C:12:D1:4A:6A:37:64:9A:1C:46:30
            X509v3 Authority Key Identifier:
                keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/xeiogGwAtCeCjBLRSmo3ZJocRjA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:5840:160::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:12:7b:a3:ec:a6:61:ed:56:1d:65:2b:5d:e7:3c:1f:e7:0a:
         39:0f:8a:98:46:7b:cc:09:07:18:7d:2f:9b:8b:10:68:66:3d:
         82:68:1a:67:e3:bf:c7:53:26:68:4e:c2:22:9b:0f:b9:0b:75:
         7a:a5:53:d5:36:7d:bd:75:6a:37:ca:85:7b:09:95:af:ab:d2:
         e7:f1:05:83:b3:38:90:7c:7c:03:7e:60:4b:f0:7e:25:31:67:
         33:99:cf:34:b3:af:1e:03:a0:99:86:94:63:86:df:e5:48:9c:
         0a:08:55:72:72:b3:34:f9:51:2c:64:8d:47:36:36:ac:9f:5e:
         2b:12:79:93:d8:ab:fd:df:9b:11:1d:bf:ea:6f:d1:3d:7e:ea:
         11:0f:81:bc:e6:92:21:d2:47:8c:b9:c4:db:9e:48:d1:a2:74:
         f6:2b:17:f7:3e:ca:f5:f2:96:dd:d9:7e:f5:83:e4:75:ec:21:
         71:c3:b6:62:f3:c8:5a:f5:2b:b4:29:b4:3b:da:4e:9f:8b:d3:
         8b:a5:f0:67:dc:d6:c8:83:b5:1d:c6:a2:75:36:ca:c1:b6:1c:
         de:30:6b:e2:41:19:07:df:df:fd:e3:e7:2f:d3:17:bd:e1:31:
         00:07:3c:36:03:70:0a:82:75:86:f6:fc:87:9e:f1:80:4e:80:
         a3:4b:67:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 15:20:49 2026 by rpki-client