This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/Xedx6t18K1lN2iVg6JylZsX90O8.roa
File:                     Xedx6t18K1lN2iVg6JylZsX90O8.roa (raw, json)
Hash identifier:          rknrmpVMbPTrGouqD8ol7zOt5zIU+0aREZj+NOBKEmQ=
Subject key identifier:   5D:E7:71:EA:DD:7C:2B:59:4D:DA:25:60:E8:9C:A5:66:C5:FD:D0:EF
Certificate issuer:       /CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Certificate serial:       019B7A5B5C3EFB15F7C3B8526E9F54A7FE76
Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/Xedx6t18K1lN2iVg6JylZsX90O8.roa
Signing time:             Thu 01 Jan 2026 16:19:26 +0000
ROA not before:           Thu 01 Jan 2026 16:19:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210394
IP address blocks:        193.201.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:5c:3e:fb:15:f7:c3:b8:52:6e:9f:54:a7:fe:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659
        Validity
            Not Before: Jan  1 16:19:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5de771eadd7c2b594dda2560e89ca566c5fdd0ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c6:6f:88:ba:ce:37:5f:92:2a:01:f9:2b:84:
                    05:fb:a6:c7:66:5f:df:eb:52:aa:ce:44:78:ef:ad:
                    29:98:fa:b5:e4:be:fe:8b:6a:d1:95:53:93:c1:a1:
                    22:52:b4:42:07:9b:f0:2d:66:b2:64:02:ed:72:62:
                    f5:3f:9a:60:52:78:dd:f7:e2:73:b1:a4:94:89:eb:
                    b9:60:53:45:25:7b:19:2b:2b:61:6e:a0:41:d3:74:
                    a4:fc:6f:e6:7c:12:66:23:e2:86:f9:4e:a5:84:fe:
                    ae:17:82:d8:5e:d4:79:f9:7d:16:64:76:e7:17:6d:
                    2d:95:2e:c2:24:7e:4b:d2:31:e9:83:8c:89:3e:34:
                    20:02:d8:fd:d1:f6:0b:e8:11:ac:ec:ed:9c:e6:96:
                    75:ac:ee:51:e1:cc:c7:09:79:67:e1:3a:ad:3a:bb:
                    a9:21:39:11:e1:d9:27:cc:63:4b:ef:5c:42:b1:12:
                    bd:af:1e:36:7b:22:91:96:d5:06:69:4b:a3:17:3f:
                    d0:fa:08:09:85:c0:fa:78:8c:aa:b9:eb:11:de:ea:
                    a0:3a:60:a2:32:d9:10:8a:29:d5:85:07:dc:72:b0:
                    76:23:16:49:fa:e4:b1:b1:c0:6b:1e:d6:b0:45:be:
                    4c:d0:5c:60:a1:be:65:af:a3:97:4d:ed:2a:b1:c5:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E7:71:EA:DD:7C:2B:59:4D:DA:25:60:E8:9C:A5:66:C5:FD:D0:EF
            X509v3 Authority Key Identifier:
                keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/Xedx6t18K1lN2iVg6JylZsX90O8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:bc:cb:43:58:be:dd:97:c5:6e:59:53:66:e1:8c:c6:6e:51:
         b6:e1:10:8e:e3:db:47:19:ea:ae:59:5f:27:b8:f3:e5:3a:66:
         05:ee:f8:06:f7:65:ac:6d:ec:d8:6e:64:13:e5:d2:4d:cf:e4:
         4f:ed:cc:25:ca:52:63:82:7d:16:8d:99:be:97:a6:7d:a3:6e:
         fe:75:70:4b:bb:a1:b6:0b:32:2d:fd:f7:12:77:3d:4f:13:a7:
         42:f0:63:46:f4:01:25:b4:1c:d0:ff:db:17:43:6d:24:5c:68:
         ac:e9:ff:2e:1b:da:36:a6:40:a7:fe:3a:db:73:9a:d7:95:84:
         b4:e0:81:69:d0:0b:c4:3c:bf:81:dc:cf:ff:9c:bf:7d:95:44:
         f8:05:05:aa:6a:86:8d:cd:23:15:df:30:d2:af:06:a1:48:b4:
         16:16:40:90:d9:a4:f2:ae:c8:4c:b3:69:7e:bb:d2:af:9d:1c:
         e9:22:01:0d:c5:20:b6:37:72:c7:4f:ab:ee:5f:78:e6:72:44:
         6a:b2:72:09:cc:72:d2:32:b8:88:ae:24:43:83:c4:d7:03:28:
         77:2a:a8:4a:55:42:d1:be:0a:c7:a7:14:f2:ff:3d:07:6c:dd:
         c7:17:a2:05:90:2a:ae:0b:c5:1a:0e:31:91:95:c3:19:c6:7b:
         74:d7:79:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:07 2026 by rpki-client