This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/1-W0WucTf2e7MzRTHEWXyGbOyjKY.roa
File:                     1-W0WucTf2e7MzRTHEWXyGbOyjKY.roa (raw, json)
Hash identifier:          HK0T1idnRlHMenIEf+1HtX704o9MA+zk5Uce2Rn+7+s=
Subject key identifier:   F9:6D:16:B9:C4:DF:D9:EE:CC:CD:14:C7:11:65:F2:19:B3:B2:8C:A6
Certificate issuer:       /CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
Certificate serial:       019B78A3623EA423AA7224F02396EEE805EC
Authority key identifier: E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/1-W0WucTf2e7MzRTHEWXyGbOyjKY.roa
Signing time:             Thu 01 Jan 2026 08:18:51 +0000
ROA not before:           Thu 01 Jan 2026 08:18:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49881
IP address blocks:        193.104.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:62:3e:a4:23:aa:72:24:f0:23:96:ee:e8:05:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
        Validity
            Not Before: Jan  1 08:18:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f96d16b9c4dfd9eecccd14c71165f219b3b28ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6a:d5:84:59:31:ee:88:1b:62:6c:87:2a:5b:
                    af:5b:86:82:c6:78:4c:8e:c5:89:46:c0:ed:61:e7:
                    b1:c3:fa:fe:15:ac:16:eb:65:2e:30:4e:f8:ee:5e:
                    b5:56:6e:cd:9c:59:b1:d3:80:f8:55:a9:37:04:f5:
                    f0:13:a2:b7:66:cd:30:bd:38:35:a3:a8:df:2d:b6:
                    b6:4b:2c:75:69:79:3d:5e:62:06:1a:24:7d:12:ba:
                    2a:36:5f:b3:1f:1b:4c:a9:b3:24:1b:ec:1e:6a:bc:
                    39:08:37:64:83:e7:21:e2:ee:56:0b:04:54:f3:36:
                    1a:41:f9:5a:53:9e:2c:e8:99:91:bc:5b:37:22:ce:
                    57:17:55:37:82:40:59:d9:ca:05:6a:1a:3e:0c:b2:
                    8e:a1:c8:83:b1:81:0f:66:2e:83:21:be:f4:a9:a9:
                    33:2c:e3:06:a2:85:b4:09:5b:5c:d8:e1:a2:66:09:
                    97:e8:fc:3f:50:3f:6a:68:f3:f8:a0:f4:7f:97:1f:
                    ad:a0:61:b1:d0:dd:d4:d6:62:47:bf:28:94:60:e1:
                    b0:59:19:8a:f6:f1:d9:df:6c:13:bd:f5:45:df:21:
                    6a:a0:d3:de:27:7b:2c:d8:60:a0:ca:47:c7:5b:4d:
                    fa:4b:0a:32:0c:69:b9:a5:b6:e7:ee:20:04:94:a0:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6D:16:B9:C4:DF:D9:EE:CC:CD:14:C7:11:65:F2:19:B3:B2:8C:A6
            X509v3 Authority Key Identifier:
                keyid:E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/1-W0WucTf2e7MzRTHEWXyGbOyjKY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.104.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:24:a2:11:83:91:82:f6:e5:76:2e:9f:0f:4f:38:cc:54:5c:
         78:2b:e0:9e:87:aa:5d:d2:7b:dc:48:89:f2:ba:46:db:90:39:
         c8:9a:c6:a2:87:1c:54:a1:89:f0:56:d6:4d:b1:72:85:c2:f7:
         7e:f8:1d:5b:64:9f:6b:4f:71:c7:c5:d5:c0:00:d3:83:42:83:
         d5:a0:f4:ba:ab:b1:f3:3b:9f:b3:76:a1:73:98:a7:02:62:b0:
         25:05:8d:47:91:f3:36:6e:1d:2a:48:fd:93:eb:6e:f1:2c:1e:
         bb:90:54:04:c9:7a:d5:ca:73:d1:3a:72:d3:e9:78:cd:65:27:
         f9:a8:fa:8b:4c:5b:12:ef:fc:e2:fb:75:22:1a:a1:3e:24:4d:
         a0:df:85:48:3c:ae:c9:d9:e1:c0:74:f5:58:60:66:2e:98:8a:
         9e:38:81:d0:5a:d6:23:75:64:d5:81:02:bc:3c:fc:54:40:81:
         18:ab:f4:3b:72:16:4e:2e:ec:0f:38:50:aa:8b:5d:af:96:f9:
         2a:32:ba:29:00:df:0e:b5:d5:7a:b3:3c:a4:4a:de:6e:d4:50:
         2b:1e:87:89:2a:cf:f8:32:30:3a:89:85:d9:8d:62:76:7a:7e:
         6f:67:60:c9:08:2f:4c:5c:57:5c:a8:99:cf:a4:fd:a6:2a:5b:
         bf:66:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:21 2026 by rpki-client