This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/V0Kc-9jaGGtebrHpTSJ9mGrEKv0.roa
File:                     V0Kc-9jaGGtebrHpTSJ9mGrEKv0.roa (raw, json)
Hash identifier:          yOtT6S4+DTyzwOitbl09n9UxGrPHDfj9Iqqxk3uAElM=
Subject key identifier:   57:42:9C:FB:D8:DA:18:6B:5E:6E:B1:E9:4D:22:7D:98:6A:C4:2A:FD
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       019B7EA6F45CE23A17CF46897EEBC85CA8E4
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/V0Kc-9jaGGtebrHpTSJ9mGrEKv0.roa
Signing time:             Fri 02 Jan 2026 12:20:29 +0000
ROA not before:           Fri 02 Jan 2026 12:20:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208717
IP address blocks:        2a0e:46c3:200::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 02:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:f4:5c:e2:3a:17:cf:46:89:7e:eb:c8:5c:a8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  2 12:20:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=57429cfbd8da186b5e6eb1e94d227d986ac42afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:a8:27:76:1e:d5:12:db:3f:2b:b0:1a:cb:
                    1e:06:af:78:0f:8e:01:27:2b:84:f7:93:ae:50:40:
                    ae:cb:bf:5c:b0:8e:d6:94:61:68:4b:05:d7:23:0b:
                    3b:5b:b6:d1:8e:38:cb:3b:69:ad:e0:fe:13:29:c8:
                    f2:f3:79:90:c9:2a:e7:c0:31:e3:4a:aa:72:52:59:
                    c4:24:a1:62:19:31:88:1a:4a:a0:0d:00:26:60:8b:
                    28:e7:57:74:ad:6f:a8:c4:b0:d2:4c:32:a9:9d:b9:
                    51:0b:af:0a:bd:14:81:da:7f:8d:b6:c1:ad:1d:71:
                    44:18:dc:67:b0:2a:0d:2f:76:97:6c:d7:a3:e0:c8:
                    d7:2c:be:fb:30:4e:17:7d:14:fd:b9:43:3b:0f:f6:
                    42:34:38:ed:e2:57:32:dd:d6:8b:ff:8e:3a:93:ac:
                    d8:0c:e8:cc:1b:fa:3b:3b:19:ca:ad:77:80:cd:2c:
                    2c:b9:f2:21:31:7b:df:00:e9:1e:22:36:f7:08:d5:
                    f8:4f:7c:e8:a9:8e:63:9a:c3:f0:70:bd:1e:52:1e:
                    87:be:0f:2e:d6:60:63:39:36:9e:24:80:48:00:6a:
                    c8:0d:a3:85:c1:8a:e5:7c:49:9f:b5:35:7e:20:6e:
                    e4:f4:7e:e4:a8:3f:1e:f8:5d:a2:b8:33:f6:9d:00:
                    ef:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:42:9C:FB:D8:DA:18:6B:5E:6E:B1:E9:4D:22:7D:98:6A:C4:2A:FD
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/V0Kc-9jaGGtebrHpTSJ9mGrEKv0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:46c3:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:d1:01:6d:ee:97:99:b2:2f:4f:f7:5b:53:fa:32:7a:23:3b:
         19:6d:e1:92:11:dd:79:a1:57:fb:6b:89:24:2b:c0:fc:59:fd:
         2b:3d:f3:9d:6c:ad:ac:0c:f8:3b:41:0d:68:d2:e4:fa:5d:bc:
         41:b2:6f:15:89:1e:f8:b3:3b:60:6c:3d:0e:95:f4:48:c8:e0:
         42:66:5d:2a:43:51:63:3f:c1:6d:fb:45:13:12:52:93:89:5a:
         59:85:7d:08:c7:01:e6:19:e1:6a:5a:54:30:eb:98:73:73:83:
         bc:a1:7b:40:fa:2e:cd:ce:c4:3b:f9:72:72:50:c5:c1:51:a1:
         cc:4b:b8:b5:48:e2:20:da:d6:5a:e2:d5:27:c1:5f:fe:b9:55:
         81:f1:cc:dd:00:60:3f:9c:f4:d5:11:e8:15:28:f5:87:41:d4:
         82:06:e4:55:5e:e4:38:91:55:d9:bd:40:97:f6:43:9d:e9:a4:
         f2:83:5f:b3:0d:ae:8c:71:4b:49:2e:28:7c:36:d8:9d:e4:36:
         49:cb:37:e7:31:da:ca:a0:db:17:14:de:45:5c:c2:89:8f:f7:
         0c:82:d1:88:81:70:d1:31:d2:92:56:9d:5a:40:cb:f3:b3:c4:
         ec:ce:e6:d3:09:cf:38:a3:00:97:60:69:ba:fb:1f:2a:37:17:
         38:16:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:05:19 2026 by rpki-client