This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/TNwGG2m1L2hBsryREeIQXegxqC8.roa
File:                     TNwGG2m1L2hBsryREeIQXegxqC8.roa (raw, json)
Hash identifier:          qxwDV6WoDDiOmsG10pUToCVPGXttKPCsnfGeedyzo7w=
Subject key identifier:   4C:DC:06:1B:69:B5:2F:68:41:B2:BC:91:11:E2:10:5D:E8:31:A8:2F
Certificate issuer:       /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial:       019B77C6D85CAFEC7B2966CD05B25505DB65
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/TNwGG2m1L2hBsryREeIQXegxqC8.roa
Signing time:             Thu 01 Jan 2026 04:17:58 +0000
ROA not before:           Thu 01 Jan 2026 04:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31273
IP address blocks:        82.113.224.0/19 maxlen: 24
                          2a00:6f00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:d8:5c:af:ec:7b:29:66:cd:05:b2:55:05:db:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
        Validity
            Not Before: Jan  1 04:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4cdc061b69b52f6841b2bc9111e2105de831a82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:cf:d3:a5:51:9a:8e:99:61:c7:04:95:00:
                    7d:8a:77:12:c4:fc:cb:1d:f2:46:2b:3f:1f:8e:d8:
                    4e:94:3a:a2:04:ec:31:f9:a9:2b:8b:de:bd:02:28:
                    54:21:12:3c:08:b6:a8:e9:9f:a2:2c:93:39:b5:59:
                    31:6c:83:b2:a3:62:82:46:ab:b7:ba:50:67:ff:1e:
                    13:a6:f2:be:a1:38:26:81:87:ed:6c:93:7d:39:9c:
                    45:8c:11:fa:b9:a6:f8:5f:0e:fd:f7:74:b6:3c:35:
                    98:bc:21:62:db:1d:39:f4:ca:41:dc:8d:96:04:d4:
                    06:e4:f0:95:b9:4b:85:23:3d:f4:26:5e:04:b7:b2:
                    dc:d3:ba:4f:2f:5d:b7:32:f4:e0:5e:3f:bc:58:2b:
                    59:32:d9:86:19:36:25:63:37:ce:27:b5:0b:39:e5:
                    dd:f3:9b:98:30:67:05:84:20:de:04:9b:a8:bc:e2:
                    fd:65:a4:82:92:85:da:2c:f5:40:a8:8f:ca:d8:7d:
                    6b:95:84:fb:a6:85:65:40:f5:f0:6d:d7:31:63:46:
                    cc:78:92:0b:bc:a2:63:c4:7d:c6:43:3e:5b:43:5f:
                    3f:8e:7f:db:4e:b9:4d:fa:32:35:54:c6:83:fd:13:
                    0d:35:ad:24:f4:62:75:53:3a:e9:64:dd:ea:cd:c9:
                    71:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DC:06:1B:69:B5:2F:68:41:B2:BC:91:11:E2:10:5D:E8:31:A8:2F
            X509v3 Authority Key Identifier:
                keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/TNwGG2m1L2hBsryREeIQXegxqC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.113.224.0/19
                IPv6:
                  2a00:6f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:fa:ec:13:08:51:6b:80:9c:59:bf:62:8f:76:c6:ff:c7:58:
         dc:fb:b6:04:ce:29:15:32:4f:9f:91:7f:7b:8c:1a:bd:2c:dd:
         e3:16:e3:aa:10:95:81:fc:5d:1f:ba:df:b5:f8:a7:7c:0f:a6:
         14:96:b9:53:f1:4e:86:3e:c2:50:0b:06:ff:69:4c:29:f6:e9:
         2d:51:48:99:e3:9f:bc:c6:57:61:07:15:68:08:c2:60:86:b5:
         4d:04:08:d3:83:d0:f1:c2:3a:23:70:38:7f:ec:96:23:f8:ee:
         7f:d6:1b:f0:49:81:1a:e9:0f:91:50:53:dc:b7:cf:47:f8:c7:
         35:34:41:0d:e2:dc:54:5a:76:7d:1e:5b:1f:ad:05:48:b0:19:
         53:d1:77:e5:e9:4c:4b:32:62:62:6f:5b:5f:43:18:b1:e1:97:
         49:63:29:2c:b3:b0:08:25:47:4b:12:46:55:19:74:90:16:04:
         2b:c1:81:00:9a:81:9f:f9:85:7d:4d:09:e9:db:ae:65:44:52:
         1f:1b:67:b7:28:e2:98:4f:40:3f:ce:ba:6c:f3:c0:d8:9c:96:
         ac:a7:a9:d6:e8:53:0f:ff:01:9e:5f:cf:5d:6d:0c:a6:2b:41:
         a0:92:22:7a:79:1d:ac:79:05:51:db:77:75:25:b0:b3:52:f6:
         8e:6c:4b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:47:41 2026 by rpki-client