This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/DrNj16KdHBydg-pgyLTL6B45LSk.roa
File:                     DrNj16KdHBydg-pgyLTL6B45LSk.roa (raw, json)
Hash identifier:          aO4vG1Y0PWHmNb5jF8du/ccBdv9Na2OGncKoGutGl4g=
Subject key identifier:   0E:B3:63:D7:A2:9D:1C:1C:9D:83:EA:60:C8:B4:CB:E8:1E:39:2D:29
Certificate issuer:       /CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
Certificate serial:       019B7B355B7725047F972A47FA8CBA9E1608
Authority key identifier: 8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/DrNj16KdHBydg-pgyLTL6B45LSk.roa
Signing time:             Thu 01 Jan 2026 20:17:32 +0000
ROA not before:           Thu 01 Jan 2026 20:17:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8351
IP address blocks:        193.105.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:5b:77:25:04:7f:97:2a:47:fa:8c:ba:9e:16:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a34a7a3febafbc8400abe1dc12f22c6c1e8a5be
        Validity
            Not Before: Jan  1 20:17:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0eb363d7a29d1c1c9d83ea60c8b4cbe81e392d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:3f:2c:d1:73:70:16:a6:dc:d2:b8:97:d6:
                    21:d1:fc:4b:d8:27:aa:ea:54:fc:e7:e6:c4:4e:db:
                    1a:86:4b:b9:cd:20:03:51:1a:29:71:45:62:46:27:
                    23:69:c1:d9:8a:af:5d:1e:54:75:06:ad:86:13:19:
                    ec:32:44:42:5e:2e:b9:bc:9b:b8:d3:04:c8:50:9a:
                    ca:1e:c8:83:32:65:49:b3:47:75:87:27:6a:1f:3a:
                    8e:14:1b:0e:e9:f7:50:a0:dc:ec:70:bb:38:02:de:
                    f9:15:fc:49:24:35:fc:2a:50:af:32:bd:2d:06:2b:
                    e6:a5:7e:98:0c:a1:17:0c:6f:50:0a:40:51:db:5c:
                    e2:9d:c6:a5:f8:fc:75:3e:f7:08:50:fb:9f:fb:c7:
                    41:00:78:02:40:7c:dc:87:9d:4d:aa:01:6d:80:17:
                    cb:6f:6f:00:a4:d2:33:31:11:15:18:eb:7c:7a:be:
                    15:4b:44:8d:6d:cf:76:a9:00:ae:83:d2:61:82:89:
                    68:a0:c7:26:0f:ad:6e:d2:57:b1:36:b0:87:c9:3b:
                    bc:5f:af:51:97:f5:44:45:bf:d5:14:10:14:53:8c:
                    9c:8d:61:58:66:66:e1:81:cc:8a:cf:25:85:23:a9:
                    11:79:c3:88:3c:8e:8f:63:80:93:8b:5e:e1:9c:53:
                    57:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B3:63:D7:A2:9D:1C:1C:9D:83:EA:60:C8:B4:CB:E8:1E:39:2D:29
            X509v3 Authority Key Identifier:
                keyid:8A:34:A7:A3:FE:BA:FB:C8:40:0A:BE:1D:C1:2F:22:C6:C1:E8:A5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijSno_66-8hACr4dwS8ixsHopb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/DrNj16KdHBydg-pgyLTL6B45LSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/878c4d-d9e4-4488-b18c-b629bb4762f0/1/ijSno_66-8hACr4dwS8ixsHopb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:f3:e8:8e:54:16:33:20:f1:5e:21:cd:9f:e9:ad:4b:66:01:
         ad:13:8c:cf:fc:ff:0f:dc:97:e3:22:4b:c8:b3:04:4f:b0:bb:
         d2:a5:e0:a7:ec:1e:3f:4d:49:e2:8a:6b:58:ae:79:20:6d:1c:
         21:84:17:2c:6a:37:a6:80:9a:da:1a:4d:78:bb:20:12:7a:77:
         6f:c3:12:58:0a:ca:4c:77:dc:d0:c2:1c:29:1e:dd:a8:12:1a:
         83:ba:1c:99:e6:9c:5c:96:e4:b9:78:67:26:f2:a9:18:56:4d:
         7c:63:94:8b:65:08:bd:31:7a:37:6c:d0:ca:a1:6e:40:94:02:
         40:0d:3b:e0:8f:69:1c:d2:b0:ee:23:af:4b:8f:d9:05:ce:0d:
         91:7d:46:88:b6:82:ac:d0:8f:42:90:0f:bf:15:19:7c:ec:78:
         3d:ed:94:82:46:c1:5d:7c:b1:1f:55:39:de:7b:c5:74:96:4c:
         30:0d:83:66:51:69:2f:81:e0:9d:e2:e2:9f:a0:08:63:15:5a:
         cf:42:b2:34:b0:5d:9f:a5:01:59:7f:a1:1c:ed:ab:bb:5d:04:
         25:bd:37:9f:c3:b6:da:f1:09:3a:0f:8f:f6:fb:b8:f2:6a:85:
         28:c5:be:16:c8:3b:be:b5:87:50:da:8b:73:db:ec:f5:cc:74:
         61:50:60:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:35:57 2026 by rpki-client