This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/r9C6v0mqJc6AkdJfQ094m9sdd5k.roa
File:                     r9C6v0mqJc6AkdJfQ094m9sdd5k.roa (raw, json)
Hash identifier:          3Wm3ENOGC3Sjvo6Btm3L9HncovHv1CWJ0l5JCzPL+GY=
Subject key identifier:   AF:D0:BA:BF:49:AA:25:CE:80:91:D2:5F:43:4F:78:9B:DB:1D:77:99
Certificate issuer:       /CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Certificate serial:       019C091B9D1BF1C2E8C412D5806173E22E20
Authority key identifier: D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/r9C6v0mqJc6AkdJfQ094m9sdd5k.roa
Signing time:             Thu 29 Jan 2026 09:35:30 +0000
ROA not before:           Thu 29 Jan 2026 09:35:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215224
IP address blocks:        176.111.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:09:1b:9d:1b:f1:c2:e8:c4:12:d5:80:61:73:e2:2e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
        Validity
            Not Before: Jan 29 09:35:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=afd0babf49aa25ce8091d25f434f789bdb1d7799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f8:9b:b0:1c:e2:ed:ef:fa:db:8d:e5:bc:65:
                    1c:24:6d:ed:f8:04:ef:0f:b4:86:27:7d:07:fe:27:
                    70:26:25:af:55:8e:ba:7b:a4:3f:3f:fd:df:4a:50:
                    17:fc:c3:9a:4c:90:0e:b2:56:3f:bf:42:28:0c:05:
                    77:ba:4d:57:39:38:b3:b2:04:16:28:f2:3b:53:df:
                    d4:13:17:3d:88:06:26:f6:fd:52:9a:57:dd:52:a5:
                    e7:29:b8:e6:ab:aa:85:03:e9:ea:5e:21:b4:bb:1f:
                    1b:21:f7:b9:21:b1:8f:fd:70:74:8b:04:80:a7:01:
                    35:9e:39:55:67:df:3e:39:9a:61:d2:20:35:eb:c0:
                    43:0a:cb:6e:86:fd:81:64:f3:90:a4:07:ec:de:c8:
                    ee:0d:86:de:4c:2d:40:e4:e4:0a:a8:ef:cd:d2:ae:
                    08:d6:cd:c3:6f:b0:9b:3f:3d:16:0c:b8:0a:be:b1:
                    41:80:06:f8:37:64:95:27:40:e5:c1:cc:9b:15:1c:
                    f8:86:98:92:13:68:21:13:5c:73:56:57:77:d3:17:
                    5f:d9:b4:5f:41:a9:c7:0b:1b:24:44:c2:18:5b:30:
                    7e:35:9a:32:4a:af:3c:df:9f:15:f3:80:9d:22:f1:
                    54:c7:2b:58:72:ca:5f:50:ff:3a:92:ef:3a:34:21:
                    2c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D0:BA:BF:49:AA:25:CE:80:91:D2:5F:43:4F:78:9B:DB:1D:77:99
            X509v3 Authority Key Identifier:
                keyid:D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/r9C6v0mqJc6AkdJfQ094m9sdd5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.111.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:2d:b9:aa:1f:4b:73:e0:a9:aa:4e:86:70:69:bc:b6:3f:4c:
         b8:c1:14:f0:b2:07:c7:41:95:12:70:20:f4:61:c9:ee:fd:10:
         d4:b9:c8:80:00:c7:4f:2f:60:14:8b:a3:fc:35:25:60:df:04:
         b7:bd:a4:dc:47:a9:18:d0:69:b9:74:6c:54:2b:15:91:38:35:
         ef:91:8d:ef:76:c1:f9:56:5e:7a:26:47:32:06:89:dd:49:38:
         93:5c:e9:c2:7c:82:e2:e5:94:d5:ee:2f:a7:b5:b3:d7:7e:1d:
         47:79:da:1f:78:0b:3e:30:d0:a4:6e:5a:87:63:fd:77:98:e3:
         56:86:c0:44:90:60:c7:82:83:5e:5e:6e:d4:e3:2a:b8:01:4f:
         14:72:75:7e:9d:63:65:de:13:2e:ae:0e:ab:f7:2f:44:eb:f9:
         ea:95:b1:32:18:a1:99:66:b1:3a:32:a9:6c:d7:d2:b8:0c:39:
         4d:fd:0a:8e:c6:65:7b:de:5d:b3:aa:8f:31:26:1d:12:ce:4a:
         4b:9b:47:70:ab:e7:bc:e9:9f:28:c9:e2:19:c1:23:d1:ad:dd:
         00:3b:0e:43:5f:92:da:db:90:cf:65:50:66:77:0c:43:5a:d0:
         a3:ae:c7:6f:9e:e9:2c:dc:5d:3e:b0:db:73:53:36:fb:a9:0a:
         43:b7:97:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:45:36 2026 by rpki-client