This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/AKrnC7ODjSOXMdeL8wrToif0Wj8.roa
File:                     AKrnC7ODjSOXMdeL8wrToif0Wj8.roa (raw, json)
Hash identifier:          xAW6Xh8ZxCJiYIacyACrSRCzv0AulHAv512L4kczh4U=
Subject key identifier:   00:AA:E7:0B:B3:83:8D:23:97:31:D7:8B:F3:0A:D3:A2:27:F4:5A:3F
Certificate issuer:       /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial:       019B7C80739DC40DB27D2CA3BB892B86E642
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/AKrnC7ODjSOXMdeL8wrToif0Wj8.roa
Signing time:             Fri 02 Jan 2026 02:19:11 +0000
ROA not before:           Fri 02 Jan 2026 02:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216092
IP address blocks:        195.95.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:73:9d:c4:0d:b2:7d:2c:a3:bb:89:2b:86:e6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
        Validity
            Not Before: Jan  2 02:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=00aae70bb3838d239731d78bf30ad3a227f45a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a8:1d:63:b6:87:c7:e5:fd:9c:a3:30:14:63:
                    ec:d8:80:89:93:6b:47:cf:57:e7:f9:65:53:6f:9e:
                    12:3e:bf:a0:8f:00:cf:f1:e4:1a:4a:f9:86:16:d2:
                    fc:36:76:28:a6:e7:51:78:f7:23:ff:c1:ce:da:7b:
                    c8:58:3c:85:70:8b:c3:f6:65:a9:8a:b2:d1:71:b2:
                    00:57:33:67:c5:6f:f6:24:c6:b8:01:7d:f0:01:8a:
                    09:e3:1f:82:44:5f:70:04:31:7f:50:63:fb:53:fb:
                    79:49:c7:8b:07:34:1f:3b:6a:ab:08:b2:c8:0c:43:
                    2c:24:3a:52:76:dc:fc:e2:d9:10:1d:ce:a8:ca:d5:
                    f2:d5:c7:bc:8e:1d:64:06:6c:b9:fc:f2:b7:39:68:
                    8b:4c:37:f0:99:e7:a6:fd:41:8b:07:83:f6:7c:40:
                    48:61:fa:51:6f:3d:cd:a5:b3:e6:d4:93:b1:7c:7b:
                    d2:d2:d7:42:9d:7a:c0:c2:e7:e4:54:b3:e7:ca:eb:
                    bf:9c:63:a2:78:0d:63:1b:cb:55:67:4a:54:1f:4b:
                    db:42:0c:5e:ee:86:d9:6a:e0:4d:87:84:81:9d:81:
                    4d:f1:cd:72:c0:fc:cf:66:f4:cb:b2:ce:96:c8:1d:
                    de:d6:81:05:b3:f5:79:1d:d4:94:3c:95:14:61:17:
                    0a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AA:E7:0B:B3:83:8D:23:97:31:D7:8B:F3:0A:D3:A2:27:F4:5A:3F
            X509v3 Authority Key Identifier:
                keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/AKrnC7ODjSOXMdeL8wrToif0Wj8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.95.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:11:21:ea:b4:27:db:c6:2e:3b:1e:80:37:2d:a7:5f:8c:51:
         55:0e:02:17:a2:fa:3c:08:04:4d:49:68:dd:f4:4e:69:08:d8:
         15:35:6d:ee:f6:96:b8:81:45:92:44:40:1b:f0:a1:2f:79:57:
         aa:54:c3:07:86:9b:80:f0:e7:32:3c:a4:1b:03:51:39:9b:a3:
         10:02:4b:0a:14:3e:a2:63:93:9e:20:28:61:7d:9a:ba:e3:d7:
         af:50:70:83:be:a7:8d:77:70:02:02:e4:2c:39:fe:5d:c6:66:
         70:4d:ab:f6:50:52:6b:47:92:1b:57:25:ce:db:9f:49:64:a7:
         ae:63:61:74:a9:70:19:87:9c:04:78:80:8c:5e:96:7d:77:d2:
         d0:87:5e:63:fa:44:28:25:ac:79:e0:d7:a2:a9:33:f1:e2:56:
         3c:03:5d:1d:48:39:9f:3b:c9:99:bf:54:dd:6e:df:56:44:1f:
         80:e5:3a:ac:fe:fa:80:3c:66:06:1c:de:9f:fa:57:b7:2a:fa:
         95:bf:08:ae:98:fe:91:6e:9b:36:90:11:b5:24:0f:c5:a0:99:
         6b:43:1f:21:55:3d:a7:d9:c5:bd:73:fc:5f:dd:36:bb:ba:8b:
         61:fc:39:1d:3a:ca:8b:12:19:b2:7c:5f:b9:73:ce:b5:bd:dd:
         41:b4:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:20 2026 by rpki-client