This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/_NSr0h0Kt0SbJsZS8dEj8fAEATE.roa
File:                     _NSr0h0Kt0SbJsZS8dEj8fAEATE.roa (raw, json)
Hash identifier:          gHQWo6MfDdcWF8qTZNVOf3frooR2b9p4qIOyB4d8FFQ=
Subject key identifier:   FC:D4:AB:D2:1D:0A:B7:44:9B:26:C6:52:F1:D1:23:F1:F0:04:01:31
Certificate issuer:       /CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Certificate serial:       019B79105DCF7069D6E75A0DC32D3B140B06
Authority key identifier: 22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/_NSr0h0Kt0SbJsZS8dEj8fAEATE.roa
Signing time:             Thu 01 Jan 2026 10:17:54 +0000
ROA not before:           Thu 01 Jan 2026 10:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41971
IP address blocks:        194.60.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:5d:cf:70:69:d6:e7:5a:0d:c3:2d:3b:14:0b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
        Validity
            Not Before: Jan  1 10:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fcd4abd21d0ab7449b26c652f1d123f1f0040131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5e:02:c3:f9:43:1a:27:68:82:e0:05:b8:59:
                    90:4f:8e:b0:3e:aa:e6:b3:da:8e:ea:f1:1a:6b:1b:
                    48:f6:f9:54:40:56:da:70:d1:48:e7:59:7b:af:c8:
                    11:c2:ed:17:59:91:aa:ce:55:8a:e4:84:17:bf:5b:
                    41:31:6b:47:b0:4f:85:78:4e:73:de:22:e0:5f:75:
                    d2:a0:89:3a:fd:9c:ca:22:77:c7:42:30:8a:3a:ba:
                    29:ae:85:2b:db:98:a9:e8:03:96:f3:b8:c3:d3:eb:
                    c6:f5:52:d7:2f:52:0d:8d:de:86:fe:c3:c5:6b:f9:
                    44:ab:cd:d0:64:d1:4c:e8:8c:ea:d5:f2:69:02:9a:
                    b3:a9:e6:02:de:cf:0b:6e:2a:c9:2e:8e:fe:17:a1:
                    0b:eb:81:8c:ba:c7:c8:27:0b:e3:e8:42:e9:39:ad:
                    77:b7:c0:52:d2:70:87:d5:a8:eb:8b:1f:18:40:58:
                    92:be:b5:12:50:e9:bf:b0:e2:1a:49:27:16:c9:e8:
                    29:5d:21:13:5f:80:06:93:28:d0:32:25:e4:22:ea:
                    c1:80:2d:92:58:4f:7b:20:3c:7d:a4:5f:c3:c6:f7:
                    b3:f5:5b:02:92:06:9f:fb:f1:27:9b:26:10:44:3e:
                    9d:94:fc:05:e3:9c:24:fa:83:0a:db:50:65:dc:1a:
                    76:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D4:AB:D2:1D:0A:B7:44:9B:26:C6:52:F1:D1:23:F1:F0:04:01:31
            X509v3 Authority Key Identifier:
                keyid:22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/_NSr0h0Kt0SbJsZS8dEj8fAEATE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.60.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:60:80:d6:20:fc:df:76:6e:70:c0:dd:89:e0:bb:5d:f1:1e:
         1d:c8:ae:a6:86:8d:66:8f:ff:db:56:69:ea:8b:01:83:49:d9:
         41:d2:ff:eb:c1:76:24:bc:41:e1:6f:dd:08:28:7c:e7:1c:57:
         fe:59:e5:c3:1f:3e:90:9d:6f:47:ae:3c:dd:2f:4a:08:b8:9c:
         d6:b1:ae:63:a5:03:61:f1:5b:b7:3a:d3:ae:d2:36:3b:1a:32:
         af:bf:93:d0:e7:31:84:7a:50:33:43:18:95:e5:70:4a:2b:f2:
         89:8a:5a:b9:ad:68:0c:50:00:32:42:74:c5:a7:e1:48:46:b7:
         c7:c6:a2:ef:58:61:8a:d4:70:88:b4:cd:6a:2d:2d:d0:e2:3c:
         d1:92:19:8a:cb:ea:8d:05:41:40:a5:4a:ca:8d:59:5e:f2:e4:
         06:e4:0b:e2:24:89:ba:f4:ab:99:1e:92:cd:de:28:8d:b5:65:
         3c:0b:fb:dc:b7:cd:ef:2d:3b:5f:0a:78:b3:04:9c:20:b3:ef:
         a8:92:20:bf:e5:a0:42:46:14:11:ce:65:2a:34:cf:45:24:79:
         61:da:85:4c:3a:7d:f8:b8:fb:e3:f1:df:05:75:65:fd:da:b7:
         c8:5a:5e:1e:ed:1c:c8:00:6d:6d:2a:34:f8:48:81:5f:a3:82:
         68:85:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:32 2026 by rpki-client