This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/X9c9GMVeYaYQqH2XyexJIcOVd5Q.roa
File:                     X9c9GMVeYaYQqH2XyexJIcOVd5Q.roa (raw, json)
Hash identifier:          LMkSmQgBQGug0NOzVugCkxvy72yFENtMgmfAEYQ2z28=
Subject key identifier:   5F:D7:3D:18:C5:5E:61:A6:10:A8:7D:97:C9:EC:49:21:C3:95:77:94
Certificate issuer:       /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial:       019B7910F7347A1BCE30FF892EB922AB003D
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/X9c9GMVeYaYQqH2XyexJIcOVd5Q.roa
Signing time:             Thu 01 Jan 2026 10:18:33 +0000
ROA not before:           Thu 01 Jan 2026 10:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28839
IP address blocks:        193.138.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:f7:34:7a:1b:ce:30:ff:89:2e:b9:22:ab:00:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
        Validity
            Not Before: Jan  1 10:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5fd73d18c55e61a610a87d97c9ec4921c3957794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:55:33:db:bd:45:6b:f7:f7:56:1c:c5:bd:
                    5f:92:03:76:62:69:e7:36:16:0a:df:ea:b6:08:29:
                    1e:4e:0c:0e:84:fa:0a:26:9e:b0:da:03:fd:13:32:
                    7e:5d:e2:7b:a3:80:6e:4a:31:a3:f1:54:36:fa:99:
                    7f:17:d1:c8:dd:1a:94:c8:b9:9f:76:33:c8:cf:ad:
                    72:40:87:c2:d6:49:6c:a7:ed:84:17:99:cb:c1:80:
                    1d:27:cf:67:fe:8a:72:ba:c6:18:36:8a:f8:4b:1b:
                    b7:79:0d:7d:02:a1:26:8b:8a:b6:7b:86:3f:35:39:
                    2f:01:81:cd:19:24:ec:ee:2c:1a:41:0f:bf:01:1c:
                    03:19:ac:1f:f7:61:e0:c6:4d:3c:6d:2a:43:97:90:
                    37:1b:5b:ed:b5:af:93:e8:65:f7:64:5b:2b:44:22:
                    5f:9b:c0:4a:24:94:ac:4a:9b:d8:6e:9c:35:21:71:
                    02:c2:6a:7d:f1:7a:ab:53:90:ce:8e:5d:2b:14:15:
                    a2:e8:8e:9a:c2:da:c4:cf:78:a5:53:e5:65:db:fd:
                    a1:ab:13:58:22:17:22:b4:b1:91:cc:86:42:08:17:
                    39:92:db:eb:d1:b6:d3:3d:40:8d:f2:15:54:0c:c6:
                    b4:d4:43:c5:3d:bc:32:a9:6a:17:26:37:97:36:4c:
                    a5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D7:3D:18:C5:5E:61:A6:10:A8:7D:97:C9:EC:49:21:C3:95:77:94
            X509v3 Authority Key Identifier:
                keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/X9c9GMVeYaYQqH2XyexJIcOVd5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.138.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:26:de:f6:f6:16:5a:1e:38:1f:01:1e:36:0d:ad:81:51:0c:
         70:c3:65:15:71:73:1b:86:dc:0b:2f:b3:e3:87:1f:15:35:1e:
         9f:de:fc:20:f4:4a:6f:d5:00:49:84:47:32:29:76:7e:87:3b:
         87:15:16:d7:23:11:cb:16:d5:ba:fa:93:81:b3:53:08:8c:b4:
         84:34:3a:4c:05:7a:dd:c9:a0:d0:83:da:0a:3c:68:5c:66:e8:
         e6:2d:fd:6d:45:0c:64:38:7e:49:3e:19:08:ba:94:2d:78:2f:
         e9:03:7b:7f:a7:83:46:13:1f:a5:85:74:76:d6:7a:a8:15:0d:
         62:6a:76:90:8e:8f:cb:67:44:91:5f:a1:d4:98:72:4c:7a:cd:
         f9:46:6e:fc:ce:ba:e4:86:61:f5:05:0e:4f:19:91:71:e5:55:
         87:7f:39:1a:16:1f:5d:59:dd:e0:7d:92:85:aa:b4:a9:c5:ba:
         c9:dc:8b:7c:ca:9d:06:d5:98:b7:eb:51:4b:71:ce:44:c5:73:
         e5:0d:0f:92:f6:b3:76:33:20:66:bd:be:40:52:72:c9:e4:52:
         52:b8:7e:6d:0b:a0:64:bc:1a:94:c0:4a:8d:5d:3b:5d:df:9f:
         13:26:b1:13:ea:4c:80:a2:84:16:ac:7b:dc:27:f1:d8:11:06:
         75:eb:df:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 14:03:30 2026 by rpki-client