This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa
File:                     nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa (raw, json)
Hash identifier:          2DCxPDKTN3hjXlK5stoi0CcHybhnZoUg5yfutSyUspU=
Subject key identifier:   9E:5C:0F:0A:A7:71:DA:53:93:56:0C:FC:95:92:F4:8B:55:4D:6D:83
Certificate issuer:       /CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
Certificate serial:       019B7D5BF4F35C9456F862424078BC448C1F
Authority key identifier: A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa
Signing time:             Fri 02 Jan 2026 06:18:56 +0000
ROA not before:           Fri 02 Jan 2026 06:18:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60111
IP address blocks:        193.27.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:f4:f3:5c:94:56:f8:62:42:40:78:bc:44:8c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a26fa7ee30ada35ab1fc04f340fedf647a9f8162
        Validity
            Not Before: Jan  2 06:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9e5c0f0aa771da5393560cfc9592f48b554d6d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:34:f8:a9:88:7a:2d:80:12:e6:c2:41:38:
                    ab:79:53:65:59:cd:6c:f8:5f:5e:14:bb:f1:61:7d:
                    88:76:86:9a:cb:fa:8b:6a:46:2f:92:a4:54:5b:fc:
                    7d:d6:81:f9:e8:3e:76:0e:fa:ea:73:ae:c6:7c:a2:
                    7a:5a:35:cb:58:fa:f6:15:94:f2:59:90:28:83:2f:
                    3b:47:e0:00:9c:e9:ef:d0:91:6d:e4:43:bb:66:6a:
                    8f:65:7b:21:68:a8:30:20:c9:74:5a:0a:ad:f9:c0:
                    ee:20:24:33:71:67:4b:f9:0b:ca:ce:e2:20:e5:54:
                    45:35:2f:e1:6f:20:30:7b:ac:70:f2:b7:57:7e:c6:
                    6c:c9:8b:58:27:a6:cb:49:dd:cf:13:f7:ca:ac:c2:
                    b6:74:68:42:54:38:27:15:a9:f6:10:c3:08:be:3d:
                    b3:07:a0:fb:92:ea:a7:14:9e:91:b8:89:0f:99:5a:
                    7f:12:e3:7e:f5:97:ff:e2:3c:d2:a3:47:ba:e2:6b:
                    27:84:dd:93:14:81:a7:0c:5d:5d:d9:b9:fc:a0:b4:
                    86:03:9c:6e:e8:f5:76:46:78:d7:bb:f7:63:c5:64:
                    3e:af:d9:c3:c8:6f:87:82:dd:8a:44:99:63:a5:39:
                    f1:cd:0c:a5:c5:b0:5c:3c:c0:66:97:a7:6d:e2:b6:
                    14:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5C:0F:0A:A7:71:DA:53:93:56:0C:FC:95:92:F4:8B:55:4D:6D:83
            X509v3 Authority Key Identifier:
                keyid:A2:6F:A7:EE:30:AD:A3:5A:B1:FC:04:F3:40:FE:DF:64:7A:9F:81:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om-n7jCto1qx_ATzQP7fZHqfgWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/nlwPCqdx2lOTVgz8lZL0i1VNbYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b87a0d-cc4c-4825-a7e4-e924ce5a75b3/1/om-n7jCto1qx_ATzQP7fZHqfgWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.27.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:9e:cf:9a:1c:d6:50:ac:73:ba:64:75:be:50:08:e0:be:29:
         ef:b2:1b:1f:6c:c8:c8:b7:49:31:5b:8e:f8:cb:3d:c9:3a:8f:
         a7:54:a3:28:41:1b:9e:d0:f8:4b:d5:00:a6:60:f5:2b:8d:28:
         ee:75:42:37:a3:c8:6f:b4:ef:7e:80:d5:73:5f:8f:9a:fb:ed:
         d2:91:d0:9d:c1:55:e5:3d:bb:35:eb:f7:63:44:37:b3:a8:cf:
         65:24:eb:07:32:19:71:d4:e8:37:64:2c:09:87:4d:b8:f8:4d:
         15:e5:d1:c3:fd:3d:30:46:d1:79:6b:09:21:2f:07:81:a9:a2:
         c9:7a:27:91:ba:36:ce:c9:65:20:2b:7b:b6:d8:d7:67:98:5c:
         68:34:0d:86:c3:04:fd:4b:0b:26:cd:6a:0d:c5:c6:c8:99:bc:
         4a:84:c3:a5:f9:2e:bb:4a:01:8b:2b:f3:3d:89:1c:c9:f3:ba:
         c6:ba:ef:c8:23:06:bd:a0:f6:c6:90:9b:96:76:7d:f7:04:15:
         13:3b:df:ed:c7:3a:f9:59:09:96:92:20:04:1e:41:ce:1e:73:
         85:ea:35:d2:4e:d1:17:5f:89:e7:a5:21:e0:7b:bc:97:88:ac:
         21:40:66:4d:e4:94:0a:68:8e:9e:e9:d3:6d:18:9b:cd:8d:e5:
         14:96:63:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:41 2026 by rpki-client