This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/vW46TJ5uzZ6zoMEWd6fFXSklJ0w.roa
File:                     vW46TJ5uzZ6zoMEWd6fFXSklJ0w.roa (raw, json)
Hash identifier:          o1r9/KJ1j+6SpSSRh6xGe+b2pBSDeZuWSzt9AXB1R2U=
Subject key identifier:   BD:6E:3A:4C:9E:6E:CD:9E:B3:A0:C1:16:77:A7:C5:5D:29:25:27:4C
Certificate issuer:       /CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
Certificate serial:       019B7C80AC57175D5738082ABD37E942EB7F
Authority key identifier: C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/vW46TJ5uzZ6zoMEWd6fFXSklJ0w.roa
Signing time:             Fri 02 Jan 2026 02:19:26 +0000
ROA not before:           Fri 02 Jan 2026 02:19:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48083
IP address blocks:        94.127.96.0/21 maxlen: 24
                          193.53.99.0/24 maxlen: 24
                          193.53.100.0/24 maxlen: 24
                          193.116.128.0/19 maxlen: 24
                          193.116.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:ac:57:17:5d:57:38:08:2a:bd:37:e9:42:eb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7dd297d0898fffde28d7696795bdbd5223f8a66
        Validity
            Not Before: Jan  2 02:19:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bd6e3a4c9e6ecd9eb3a0c11677a7c55d2925274c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:18:ec:2f:0a:8f:e3:6f:7c:3f:09:eb:53:
                    e6:16:1c:bf:70:58:eb:14:54:35:01:69:88:ca:0d:
                    95:b1:a7:14:ed:de:12:5f:b3:35:63:03:b2:b4:e8:
                    f6:de:96:de:17:68:9b:51:0d:ea:b4:8c:36:d3:91:
                    e9:35:0a:0d:fb:89:d8:49:f3:b4:52:b7:fb:bf:80:
                    5e:99:7f:5d:14:33:77:34:1a:ae:ef:f4:44:68:63:
                    a6:db:63:67:99:5d:8c:24:9d:d6:88:3e:b2:67:7a:
                    60:0a:f4:66:dd:ba:08:de:6b:29:63:fc:50:c9:a1:
                    7b:c4:12:8d:23:87:16:47:cc:89:e1:58:c8:81:78:
                    f6:55:1e:79:11:3e:53:ff:30:d0:1b:71:eb:1b:1b:
                    92:3e:6e:48:be:03:9e:30:10:fc:80:76:ef:30:15:
                    cb:90:63:8b:1b:cd:78:36:ce:d2:e9:38:25:c3:80:
                    be:1f:2b:cc:61:40:31:67:03:e1:db:8f:c8:e1:b7:
                    2c:8b:41:af:b9:6e:24:d4:b9:df:f5:2c:7e:3f:c7:
                    99:50:d7:02:d3:d5:86:a7:3e:07:29:09:12:11:a6:
                    93:be:ca:e3:0c:0f:18:e7:3b:71:76:14:52:34:81:
                    24:35:49:e3:8a:25:ea:8d:3f:a4:22:71:81:44:1e:
                    20:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6E:3A:4C:9E:6E:CD:9E:B3:A0:C1:16:77:A7:C5:5D:29:25:27:4C
            X509v3 Authority Key Identifier:
                keyid:C7:DD:29:7D:08:98:FF:FD:E2:8D:76:96:79:5B:DB:D5:22:3F:8A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x90pfQiY__3ijXaWeVvb1SI_imY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/vW46TJ5uzZ6zoMEWd6fFXSklJ0w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/25e079-fcbc-418d-bec1-1f3b5b056dfc/1/x90pfQiY__3ijXaWeVvb1SI_imY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.127.96.0/21
                  193.53.99.0-193.53.100.255
                  193.116.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         99:dc:85:8c:67:63:19:35:6c:fd:a2:64:e6:85:a4:3d:10:20:
         c7:cd:4e:69:e9:a9:ed:61:6d:f7:79:9a:62:f6:92:c6:64:d7:
         5f:c5:83:21:26:14:3f:4e:92:31:dd:01:24:3c:94:6b:7e:8c:
         02:44:db:cc:e1:24:e9:4a:8d:1d:df:b1:ca:dd:ed:73:63:19:
         d0:28:0c:91:bd:a8:cc:7b:bf:87:55:0a:cd:9c:e6:02:ee:b9:
         1a:6e:6a:32:83:e5:52:41:f9:80:93:9d:6a:ff:55:27:c0:51:
         b4:44:5e:ec:66:49:29:fe:98:88:73:b0:11:a8:d8:27:98:18:
         dc:e8:52:07:e9:38:f7:d0:bd:a5:d6:87:92:0f:f2:d8:f6:15:
         00:16:74:56:f5:e0:a7:66:f9:b8:e1:34:4f:31:b7:cd:13:4e:
         9b:c5:02:a9:29:f7:a0:2b:4f:24:40:ac:00:14:51:f9:e2:2b:
         11:0f:b1:cf:3f:ac:3d:e3:23:f5:50:51:52:40:6f:c5:00:02:
         e2:0f:8d:d5:9e:ed:30:da:8e:88:2d:c9:4c:28:90:70:17:1c:
         83:2f:4e:59:54:61:41:21:5e:93:a0:7e:72:de:48:6e:cc:06:
         b2:fc:53:8f:b0:dc:51:70:2c:19:47:e5:3f:e6:9c:6c:61:90:
         71:1d:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:17 2026 by rpki-client