This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/SEZ6fU5AhjTcT-v2AF7aa1Lk33I.roa
File:                     SEZ6fU5AhjTcT-v2AF7aa1Lk33I.roa (raw, json)
Hash identifier:          nyDU2awTDtLEQn8KT2rzLnNR5fVOBeEGOrOK5V7gTs8=
Subject key identifier:   48:46:7A:7D:4E:40:86:34:DC:4F:EB:F6:00:5E:DA:6B:52:E4:DF:72
Certificate issuer:       /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial:       019B7910E3E328690B636CF9C22BAB04451C
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/SEZ6fU5AhjTcT-v2AF7aa1Lk33I.roa
Signing time:             Thu 01 Jan 2026 10:18:28 +0000
ROA not before:           Thu 01 Jan 2026 10:18:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29355
IP address blocks:        95.58.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:e3:e3:28:69:0b:63:6c:f9:c2:2b:ab:04:45:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
        Validity
            Not Before: Jan  1 10:18:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=48467a7d4e408634dc4febf6005eda6b52e4df72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:14:b7:9f:83:7d:13:8c:eb:75:72:37:58:
                    5a:89:6d:38:54:a0:99:67:2d:48:14:dc:3b:36:0a:
                    07:33:ec:f7:cb:35:ed:1a:38:6f:f5:b7:e5:97:cd:
                    68:95:02:ae:9e:13:7e:80:bc:7a:b0:06:5d:c4:e0:
                    98:fb:3f:45:1f:3b:62:7b:4e:b7:bf:a2:63:de:5b:
                    f6:dd:2c:a1:9f:9b:e4:62:82:30:3d:de:59:03:21:
                    ab:ff:b7:8b:1d:1e:fb:54:ba:f8:19:9c:db:f7:25:
                    7b:94:76:28:6b:0d:4b:a0:8a:5e:5c:8c:57:cd:94:
                    23:57:16:16:9b:a7:96:52:9e:e0:57:41:ef:c3:d0:
                    62:90:0e:ce:c0:73:48:37:3b:c7:4f:1e:d0:dd:6f:
                    bc:f3:5d:00:63:dd:00:98:0d:0c:e6:8f:3e:b4:0c:
                    85:1a:63:f4:e0:71:34:c8:35:e2:d3:ef:59:67:85:
                    f1:cd:c0:10:fc:03:fe:4a:d9:ee:fe:77:56:d3:fc:
                    14:92:90:05:4c:c7:5b:da:fc:41:ca:d0:59:96:a4:
                    00:0c:1a:f2:8a:48:97:ae:16:9e:26:db:27:a5:a9:
                    01:62:e9:81:19:ac:09:53:a6:9f:58:5d:40:eb:ba:
                    9a:3e:ad:2f:f9:c0:da:4d:1c:dc:52:61:4e:75:a9:
                    b1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:46:7A:7D:4E:40:86:34:DC:4F:EB:F6:00:5E:DA:6B:52:E4:DF:72
            X509v3 Authority Key Identifier:
                keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/SEZ6fU5AhjTcT-v2AF7aa1Lk33I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.58.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:c0:84:88:26:9c:aa:5a:ef:fa:24:ac:52:58:68:8d:e0:de:
         25:24:54:2b:f2:0a:34:a6:0b:a3:ea:3e:12:1f:f4:d7:bc:5c:
         5a:6b:6a:4d:89:0f:c2:35:2e:74:3c:bb:ac:91:a4:65:ed:c1:
         5e:bf:fd:44:a0:bf:53:2a:95:ba:9b:2f:59:ff:ad:c7:b6:5b:
         50:5e:cc:4e:26:a6:b8:f4:51:7c:40:b3:cd:07:45:7a:19:c0:
         a1:60:11:3e:9c:96:7b:7c:7f:40:da:64:b6:45:a5:5e:4d:2a:
         37:4d:ff:fa:fc:16:03:17:d6:0a:31:f1:ed:6a:16:be:c4:b0:
         16:8d:80:8f:6c:fa:96:e4:66:b3:d3:b4:27:26:d7:b5:16:fa:
         ed:e1:5c:fe:1d:da:d0:32:94:f4:12:60:c2:ad:f9:cf:61:62:
         05:f4:8d:c8:b0:05:cf:61:af:ce:21:47:a2:41:d4:9d:af:3a:
         57:6c:72:37:c4:58:08:29:4a:5c:36:d6:4e:59:af:8c:e6:be:
         62:4f:db:5f:3e:08:ab:bc:50:87:97:07:1b:0d:cc:f8:01:6a:
         21:cf:57:72:f7:22:bc:32:ba:3c:1c:69:d0:b4:39:46:17:d0:
         6f:03:7c:0d:25:20:64:9c:3f:00:32:ee:55:5d:1e:ca:78:d2:
         0f:8e:ff:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:42 2026 by rpki-client