This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rZ9kBE893IiediPl8JVKgVoCtwo.roa
File:                     rZ9kBE893IiediPl8JVKgVoCtwo.roa (raw, json)
Hash identifier:          BGuq9RWJYP25W0Z07Vz7NQitArh9VRZNLo6+TEhYgkY=
Subject key identifier:   AD:9F:64:04:4F:3D:DC:88:9E:76:23:E5:F0:95:4A:81:5A:02:B7:0A
Certificate issuer:       /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial:       019B7F15E3784B2FBD60FB3D60988F5FBC69
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rZ9kBE893IiediPl8JVKgVoCtwo.roa
Signing time:             Fri 02 Jan 2026 14:21:39 +0000
ROA not before:           Fri 02 Jan 2026 14:21:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47400
IP address blocks:        195.177.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Jan 2026 14:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:e3:78:4b:2f:bd:60:fb:3d:60:98:8f:5f:bc:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
        Validity
            Not Before: Jan  2 14:21:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ad9f64044f3ddc889e7623e5f0954a815a02b70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:19:ed:85:e5:e7:89:6b:85:c1:c6:43:99:84:
                    90:14:1f:2e:63:52:85:b5:5e:2f:92:c8:d9:97:50:
                    e4:53:28:1b:85:1b:fe:28:07:f1:b7:a8:ff:a0:34:
                    35:bc:89:02:ed:8c:e1:a8:f4:c6:41:f4:55:55:ee:
                    74:ee:b3:61:6f:db:94:a7:a1:d7:1c:8e:ec:bf:0d:
                    32:e5:c5:71:eb:9c:68:cd:4b:c0:6c:6e:99:aa:df:
                    65:04:41:2e:e1:8f:9c:02:3d:a0:fc:ec:dd:30:38:
                    63:82:e3:d5:b4:ff:fa:38:9b:9f:1b:f2:ff:c6:19:
                    e3:c5:bc:17:90:25:82:df:e8:57:15:c2:d0:36:94:
                    49:93:8f:e8:86:f5:1d:ed:85:e4:19:3f:7f:2e:02:
                    b4:a4:16:9b:30:f9:53:c8:b9:0a:f4:90:22:99:0c:
                    c4:97:c9:b2:c8:6d:06:54:8a:c5:bc:16:9f:4e:43:
                    46:7b:bc:a2:14:8c:69:1f:98:aa:0c:69:3a:09:9e:
                    18:af:a6:62:c1:d7:33:7c:75:7a:8e:5b:b8:6a:81:
                    c0:85:dd:66:1a:98:f4:41:53:8e:50:dc:dd:d2:8a:
                    5e:e3:4b:8b:79:1c:5a:23:93:d8:58:fa:51:47:78:
                    b4:81:fe:50:cf:44:f4:2d:10:c3:f5:19:ea:ea:82:
                    ad:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9F:64:04:4F:3D:DC:88:9E:76:23:E5:F0:95:4A:81:5A:02:B7:0A
            X509v3 Authority Key Identifier:
                keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rZ9kBE893IiediPl8JVKgVoCtwo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.177.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:65:3b:a5:c2:10:50:1d:97:b3:ec:bd:2c:a9:2d:27:72:c7:
         83:10:da:6a:e2:a2:20:c5:57:2b:6d:27:44:69:13:df:fc:6c:
         78:ea:de:16:d9:50:af:05:e1:32:ce:01:9d:81:48:90:dd:4c:
         2a:e3:4c:73:9b:f1:a9:ba:cd:ce:08:86:b2:6b:fa:b8:59:aa:
         b5:3e:db:97:16:e8:2d:bc:d2:6f:7e:67:92:12:62:b2:6c:10:
         09:37:47:eb:e2:1e:18:65:8b:d4:da:8b:78:ac:6c:36:ab:f4:
         c6:79:d3:7c:df:c1:c2:89:c0:f6:b7:8d:8b:a8:a9:09:5b:1b:
         e4:c5:af:53:17:9f:49:ea:9a:8f:b4:df:68:13:83:56:6e:d7:
         c7:b1:78:5f:cf:10:4d:30:29:6d:b2:eb:cc:f5:26:d0:17:5b:
         17:9e:a8:26:c2:38:11:b3:43:5a:c2:77:a7:24:5c:b9:7c:92:
         24:64:66:6f:e5:0b:f1:60:c6:47:30:83:26:8a:38:20:16:66:
         38:b3:96:3a:68:c9:20:70:ef:a9:fd:0d:ba:ad:7f:32:47:08:
         fb:70:52:be:56:a5:0e:07:23:bc:65:88:93:1f:7c:d3:3b:82:
         73:bf:21:21:49:06:f3:d9:06:2f:09:8a:d3:3d:50:47:c2:30:
         25:73:6b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 6 20:51:31 2026 by rpki-client