This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/KO5O23gejTKwTsZBDSCos8cKKa0.roa
File:                     KO5O23gejTKwTsZBDSCos8cKKa0.roa (raw, json)
Hash identifier:          5r7rarpuE2p/gSB/Pi8UtJYwr7G/QPULfTLWSJ5jkjg=
Subject key identifier:   28:EE:4E:DB:78:1E:8D:32:B0:4E:C6:41:0D:20:A8:B3:C7:0A:29:AD
Certificate issuer:       /CN=c83c4c9d2fce61665165c05a101e815047b64f6a
Certificate serial:       019B7D5CB76CDEA940E8BFCF135F921A94E7
Authority key identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/KO5O23gejTKwTsZBDSCos8cKKa0.roa
Signing time:             Fri 02 Jan 2026 06:19:46 +0000
ROA not before:           Fri 02 Jan 2026 06:19:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197717
IP address blocks:        193.200.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:b7:6c:de:a9:40:e8:bf:cf:13:5f:92:1a:94:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83c4c9d2fce61665165c05a101e815047b64f6a
        Validity
            Not Before: Jan  2 06:19:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=28ee4edb781e8d32b04ec6410d20a8b3c70a29ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:de:d6:b3:dd:bc:cd:ed:10:c9:1e:50:a5:
                    1c:4e:30:25:e7:f0:3d:c9:dc:31:5d:ab:8e:9e:7c:
                    46:1d:ba:34:9d:d6:e8:92:82:8d:6a:b8:12:7b:b2:
                    5a:f8:89:61:52:f0:8a:9a:bf:64:eb:45:29:84:ef:
                    a8:76:6c:c7:e0:07:7f:32:ca:55:46:2b:db:a2:75:
                    ed:77:47:21:ba:39:f0:42:eb:d4:1d:47:df:fd:67:
                    59:eb:39:b8:2a:d3:9d:20:87:d4:7b:a3:81:77:a5:
                    a7:cf:b4:de:02:00:a1:e2:72:fe:43:83:57:2e:00:
                    61:66:10:c5:ae:75:5c:c1:c0:3c:3e:37:cd:53:57:
                    e1:85:22:c0:5d:66:d3:4b:aa:de:98:54:03:7b:0d:
                    38:ac:67:22:53:24:76:93:8a:c5:28:b2:34:bf:0d:
                    ab:da:7a:7b:8b:b0:45:6c:9f:5e:ee:f0:27:04:72:
                    8f:d6:a1:6e:d6:00:9f:e0:36:e7:e2:7a:13:7c:2e:
                    9f:bd:ef:f9:8a:c7:96:5a:dc:ce:6e:a3:ab:cb:b6:
                    2a:d0:79:00:65:56:2b:41:41:6b:93:71:3d:5b:05:
                    c0:c8:bb:c4:ee:f3:02:9c:2f:d7:ba:63:f0:6c:96:
                    a6:e7:66:45:9a:5c:74:b9:99:83:5b:d1:a0:f1:ba:
                    77:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EE:4E:DB:78:1E:8D:32:B0:4E:C6:41:0D:20:A8:B3:C7:0A:29:AD
            X509v3 Authority Key Identifier:
                keyid:C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/KO5O23gejTKwTsZBDSCos8cKKa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:b7:d2:a5:c3:31:9e:ba:a1:92:90:98:92:aa:ef:5e:4f:8d:
         20:7c:bb:0d:af:e2:d7:9f:e6:1c:d3:e9:62:b9:e3:16:4a:e9:
         8c:11:0c:e8:aa:cb:09:2e:1d:c5:45:70:27:07:47:03:89:b8:
         04:60:2c:38:46:e2:60:08:51:e0:32:bb:6a:4d:dc:33:ab:65:
         c9:56:5a:10:08:66:82:54:41:88:43:45:98:f2:03:98:c9:a2:
         c8:95:d3:d9:47:b4:af:3f:c2:7d:a0:42:d9:f1:79:f6:76:93:
         96:0f:5b:e2:db:e1:ce:9e:1c:43:9d:3d:3e:29:ce:f5:b1:ed:
         07:cb:4b:30:d4:55:94:8f:2b:4a:ea:56:24:86:27:ff:d0:da:
         f8:79:bd:a5:fb:d5:05:31:d1:36:22:ba:02:a7:86:44:d0:9b:
         08:75:bc:4b:6f:e2:65:5b:2d:b8:84:c8:86:da:b7:04:6f:38:
         1e:d1:fd:af:41:cc:57:4a:43:e9:48:e8:55:11:5a:09:50:79:
         e1:a4:97:d0:c4:d7:43:0f:5a:ac:be:ab:2e:0b:d8:61:75:3a:
         97:f4:ad:5f:3a:c7:ef:f5:0d:56:d1:21:c1:53:28:25:9c:f4:
         13:58:69:fd:d9:24:92:47:f6:2a:4b:f9:6a:83:bd:0c:7f:96:
         8d:e3:ba:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:15 2026 by rpki-client