This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/cpS1wHSQ6aTdnwNWUDjBZlgAC7Y.roa
File:                     cpS1wHSQ6aTdnwNWUDjBZlgAC7Y.roa (raw, json)
Hash identifier:          XiHOtWW1/pqGi1+Lnl6yq25m5xXc7tXDYaQje+WHC+0=
Subject key identifier:   72:94:B5:C0:74:90:E9:A4:DD:9F:03:56:50:38:C1:66:58:00:0B:B6
Certificate issuer:       /CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Certificate serial:       019B7BA362E66CE668FED6C42CB755F3533C
Authority key identifier: 3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/cpS1wHSQ6aTdnwNWUDjBZlgAC7Y.roa
Signing time:             Thu 01 Jan 2026 22:17:43 +0000
ROA not before:           Thu 01 Jan 2026 22:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50091
IP address blocks:        93.115.6.0/24 maxlen: 24
                          93.115.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:62:e6:6c:e6:68:fe:d6:c4:2c:b7:55:f3:53:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b376725200d8d8c00cf0f7514af25ff362310f0
        Validity
            Not Before: Jan  1 22:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7294b5c07490e9a4dd9f03565038c16658000bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:4d:11:43:1b:1c:f6:6c:9c:3d:ac:fc:48:
                    b8:b2:9b:f6:75:28:10:8e:19:87:f3:e8:22:7b:ff:
                    fb:f6:ee:5d:f2:0a:69:0e:57:51:cb:3c:e3:a9:40:
                    ae:82:cb:d7:48:e8:21:09:ab:51:14:4c:d6:8d:b1:
                    fc:61:ee:cc:d4:17:6a:24:fb:5a:11:24:e7:44:4e:
                    0b:01:2b:89:a6:1b:73:06:d6:0b:1a:e3:10:44:f2:
                    91:ac:40:5a:9b:3d:8b:71:b3:ed:57:29:94:bc:a7:
                    0a:3e:52:c8:0d:a3:52:26:c4:2b:54:df:91:10:22:
                    77:48:98:59:8b:0e:c1:29:37:98:84:86:de:77:a4:
                    6b:e6:8a:5f:c2:cb:4f:19:e1:5a:5c:cd:25:2f:38:
                    24:ef:86:32:97:8b:24:ba:7d:d7:e1:da:0d:4f:f0:
                    98:b4:1d:ff:f6:d9:cf:5d:be:62:e7:0c:33:d5:75:
                    e5:1e:63:91:72:2c:52:87:0d:b6:de:6e:76:bb:ee:
                    03:05:e4:01:b5:fc:d9:fe:b9:75:cf:23:08:e7:3c:
                    83:e2:0a:8e:1b:01:79:d5:b1:e7:04:b5:e5:10:41:
                    57:b2:e9:1a:4d:99:a3:d0:ec:28:bb:3d:39:87:1d:
                    bc:42:8f:6a:32:f7:86:7d:0c:0d:a4:14:7b:be:ee:
                    ba:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:94:B5:C0:74:90:E9:A4:DD:9F:03:56:50:38:C1:66:58:00:0B:B6
            X509v3 Authority Key Identifier:
                keyid:3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/cpS1wHSQ6aTdnwNWUDjBZlgAC7Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.6.0/24
                  93.115.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:70:2c:d8:11:4b:bc:70:d1:03:74:2c:ec:2d:f7:9e:80:f5:
         ce:59:9b:9a:0e:2c:a4:bd:ca:53:4d:57:63:4f:1a:e3:5d:b0:
         9f:e8:18:4b:27:1a:49:73:47:cf:af:f6:b9:52:4a:0e:cb:e1:
         4d:df:4c:20:8b:bc:e4:63:7b:b0:1b:ad:bb:5e:29:62:3f:a0:
         bb:68:f4:8b:50:2b:ae:38:25:d6:5e:ab:ea:29:12:a4:d4:45:
         36:5f:c2:1c:07:af:5f:2a:72:24:46:28:23:9c:7d:52:de:48:
         77:8d:b7:96:8f:09:4f:4f:0d:b6:aa:37:cd:55:ee:0b:e9:8d:
         8f:d6:a8:34:dd:0b:e9:8c:45:70:bf:ae:5c:8e:57:0e:d0:14:
         8c:66:ac:08:aa:70:60:2e:d9:35:a7:b8:10:21:57:ea:c1:8d:
         96:61:69:33:ff:97:d2:11:a3:8d:30:c7:e6:b2:29:6e:15:f9:
         2f:cd:4d:95:71:76:f4:ad:51:c3:e8:2a:9a:ae:c8:6e:89:d5:
         ab:48:21:fb:64:e6:47:24:eb:c0:02:a4:63:f7:c6:96:a0:44:
         d3:7f:74:01:a1:1b:76:0b:33:87:12:26:bf:89:f8:65:18:bd:
         9e:e6:19:78:c3:f6:65:29:81:41:d9:a2:72:fe:7d:2b:91:e0:
         a5:b0:3f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:02 2026 by rpki-client