This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/SJ8xHe56ZjfCxTRlPLXv7qFZ7S8.roa
File:                     SJ8xHe56ZjfCxTRlPLXv7qFZ7S8.roa (raw, json)
Hash identifier:          hiWvSx1LIs95nwS/yqlT6EgpucPxVBdXThwk+Qru9lI=
Subject key identifier:   48:9F:31:1D:EE:7A:66:37:C2:C5:34:65:3C:B5:EF:EE:A1:59:ED:2F
Certificate issuer:       /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial:       019B78355305D7CA093B41A4B646983356F7
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/SJ8xHe56ZjfCxTRlPLXv7qFZ7S8.roa
Signing time:             Thu 01 Jan 2026 06:18:39 +0000
ROA not before:           Thu 01 Jan 2026 06:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207131
IP address blocks:        93.95.28.0/24 maxlen: 24
                          2a12:af40::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:53:05:d7:ca:09:3b:41:a4:b6:46:98:33:56:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
        Validity
            Not Before: Jan  1 06:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=489f311dee7a6637c2c534653cb5efeea159ed2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:ed:26:6c:1a:14:9e:05:ce:36:ce:27:05:
                    b3:ca:36:a2:1d:a5:cc:71:15:c5:75:79:e8:a9:44:
                    e8:7d:1a:12:66:86:3d:ac:d2:f8:71:bb:44:48:d5:
                    f4:b0:c7:8c:5b:39:61:8b:ad:37:c9:6d:65:18:8b:
                    46:1f:88:ed:7f:5d:dc:c6:91:bd:8f:15:8a:d4:cd:
                    a3:df:f9:cd:a3:eb:b4:77:5a:88:5b:ef:e9:6f:0e:
                    5a:e5:2e:63:01:fc:4b:5a:26:c5:0e:8e:5c:46:00:
                    47:1c:f4:47:8c:2e:46:fc:9a:3d:a4:72:37:52:7f:
                    1e:ad:11:93:7e:ac:87:bd:79:50:39:bf:ff:d8:5b:
                    33:ec:dc:ff:df:f5:93:2d:0e:27:51:cc:c7:e4:8c:
                    00:86:34:dd:4d:65:39:c2:a2:82:b2:ca:64:40:2f:
                    77:92:a1:04:8f:56:8d:d5:87:7d:9d:83:ec:8e:9d:
                    5a:ef:5b:a6:95:2c:29:f1:4e:7e:cf:22:0a:aa:3d:
                    20:73:82:8d:df:61:48:45:7d:1b:ee:51:88:0d:c3:
                    cc:39:6a:b1:7b:eb:81:ce:6f:12:2e:43:2c:da:de:
                    bd:b5:f3:f3:f6:46:55:33:83:95:8f:fd:b2:2d:06:
                    b5:6b:9f:e3:7a:f5:c5:ae:7b:da:e9:d9:df:39:06:
                    44:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9F:31:1D:EE:7A:66:37:C2:C5:34:65:3C:B5:EF:EE:A1:59:ED:2F
            X509v3 Authority Key Identifier:
                keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/SJ8xHe56ZjfCxTRlPLXv7qFZ7S8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.95.28.0/24
                IPv6:
                  2a12:af40::/29

    Signature Algorithm: sha256WithRSAEncryption
         41:79:6d:3f:fb:7e:2d:a2:4b:1d:cd:96:17:9d:9e:6c:fd:45:
         a2:0e:04:7c:2f:bc:3d:20:2a:ce:0b:6f:7f:93:a6:ed:95:9e:
         6f:99:b0:7d:11:bd:e3:7b:95:d1:21:8d:2e:17:10:d3:32:c7:
         23:6f:70:48:b1:86:25:e2:d4:0a:23:88:82:b8:aa:ff:ff:a1:
         07:c5:00:fd:56:6c:d2:bd:6a:f1:db:2e:54:e7:e3:f8:b1:4c:
         bd:5c:f3:c5:2b:07:56:ac:4d:ed:90:af:ce:dd:b8:a7:63:e7:
         39:05:96:d7:fc:89:06:be:b7:3e:dc:1b:50:68:74:00:a4:04:
         c4:04:c8:7f:c5:34:f4:89:7e:d0:58:d9:54:2e:f9:7d:c2:93:
         78:ef:8f:38:00:27:8d:78:6c:3f:a2:78:b2:4b:06:da:e8:04:
         d9:ee:bc:b3:c0:3a:a5:91:cc:82:a3:62:f5:f3:02:dd:5d:56:
         04:d0:cb:d0:bc:9d:15:59:db:63:5d:51:98:79:bf:e7:f8:01:
         b9:1a:7f:c0:f5:b7:0d:c1:61:2b:72:48:b5:8d:da:16:42:9a:
         fd:e3:a2:ff:f7:f3:7f:b4:07:fa:6f:ae:56:33:ec:71:91:a0:
         c5:05:5b:f0:52:89:23:60:f8:0d:41:36:ba:28:1f:24:49:66:
         e3:9f:52:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:26 2026 by rpki-client