This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hR6FjmSZrOcxglTQIeop3g-8itU.roa
File:                     hR6FjmSZrOcxglTQIeop3g-8itU.roa (raw, json)
Hash identifier:          L8JoSNHxqD8GZakrpThaN7mExWHxjjIRU8CrnXD6iaY=
Subject key identifier:   85:1E:85:8E:64:99:AC:E7:31:82:54:D0:21:EA:29:DE:0F:BC:8A:D5
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019B78A342E34040708AE923272F608E4782
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hR6FjmSZrOcxglTQIeop3g-8itU.roa
Signing time:             Thu 01 Jan 2026 08:18:43 +0000
ROA not before:           Thu 01 Jan 2026 08:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213446
IP address blocks:        193.25.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:42:e3:40:40:70:8a:e9:23:27:2f:60:8e:47:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 08:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=851e858e6499ace7318254d021ea29de0fbc8ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:19:c2:e0:19:f1:4f:85:ab:e8:c6:ce:de:
                    66:bd:a9:df:b8:61:08:d3:66:55:90:bf:4d:58:de:
                    87:02:7b:aa:19:c9:dc:79:67:09:7c:3c:8c:73:4d:
                    fe:5f:f7:66:10:61:0d:78:c5:cd:00:27:07:ef:ca:
                    20:c8:eb:be:59:57:f4:4b:8b:e3:c7:05:14:6b:09:
                    f1:4d:b4:8b:74:0f:3a:cf:9b:00:48:b6:d9:ab:c7:
                    39:f1:19:ee:9b:7f:fe:86:8d:d0:51:ec:39:7c:34:
                    62:e1:41:14:c7:aa:55:43:be:54:e1:9f:67:50:76:
                    e1:02:58:9c:37:3a:91:ee:19:ea:3c:6e:3f:f1:15:
                    51:53:a2:dc:f5:38:eb:70:c8:39:25:c8:f0:4a:72:
                    e4:8f:69:9c:87:b0:be:03:fa:18:22:54:33:28:bc:
                    27:97:3c:21:31:65:ab:4d:68:b7:62:ab:5b:13:34:
                    91:01:55:b7:a1:06:0c:7d:11:ce:cb:1f:7c:15:fd:
                    11:8f:ea:72:84:2d:e0:90:e6:8c:02:e3:57:bf:8b:
                    00:68:0f:1a:6b:fb:49:e9:33:c8:11:14:f0:ae:8b:
                    55:f0:e0:f8:c6:ae:62:56:21:56:04:cc:5a:5c:52:
                    14:1c:6c:d9:17:4f:5e:a2:81:dc:4d:31:a1:ad:95:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1E:85:8E:64:99:AC:E7:31:82:54:D0:21:EA:29:DE:0F:BC:8A:D5
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hR6FjmSZrOcxglTQIeop3g-8itU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.25.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:2e:a9:6e:6a:e1:7e:de:37:73:7f:67:03:b0:c3:0a:57:db:
         fa:44:04:be:fe:59:de:29:b9:18:96:8e:21:04:87:a6:2d:2a:
         60:9e:37:9e:cf:b9:03:f6:14:ce:02:90:88:38:53:8c:f9:46:
         09:b6:6d:00:60:c5:f1:88:cd:80:a0:87:98:a3:ab:28:69:57:
         54:4a:3d:2b:c0:c5:71:34:21:0a:f1:e9:c9:6e:49:88:a3:73:
         4a:bc:8f:61:62:ff:ce:7c:1b:44:8f:cd:57:0e:87:96:c9:7a:
         f1:c8:7f:49:29:5c:ff:67:79:ea:00:0b:2d:4c:f7:0a:1e:98:
         a0:f4:46:2b:19:30:9e:b1:49:35:5b:b9:35:7b:40:cd:87:d8:
         1f:37:70:e5:eb:aa:79:c8:19:c3:26:10:3f:bf:e2:7b:ad:b3:
         09:da:65:dc:4c:d4:b9:d3:f3:4a:d9:85:e9:3f:ea:70:0f:83:
         56:88:b9:48:47:ff:1f:2c:f5:3e:de:24:1e:d1:10:6b:13:50:
         09:66:7c:4f:28:32:7c:e9:1c:82:e8:3d:0b:ad:d4:9e:cd:35:
         91:9c:56:63:4e:84:cf:66:6b:63:3b:6f:f5:a7:c7:ef:14:8b:
         cf:5d:c0:6b:2f:12:46:e2:32:b1:cf:77:62:06:89:22:90:88:
         c1:51:7e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 12:06:33 2026 by rpki-client