This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/aRhK0X7eTNVO7V2USrWib9Yy4MM.roa
File:                     aRhK0X7eTNVO7V2USrWib9Yy4MM.roa (raw, json)
Hash identifier:          MPa5mbsL7LVHTMVq5SnfaR8X/yauxPgapPFTzRs4F7U=
Subject key identifier:   69:18:4A:D1:7E:DE:4C:D5:4E:ED:5D:94:4A:B5:A2:6F:D6:32:E0:C3
Certificate issuer:       /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial:       019B7EA4C0EFB5672046E033227A1C273ADB
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/aRhK0X7eTNVO7V2USrWib9Yy4MM.roa
Signing time:             Fri 02 Jan 2026 12:18:04 +0000
ROA not before:           Fri 02 Jan 2026 12:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56647
IP address blocks:        193.37.232.0/24 maxlen: 24
                          193.37.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a4:c0:ef:b5:67:20:46:e0:33:22:7a:1c:27:3a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
        Validity
            Not Before: Jan  2 12:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69184ad17ede4cd54eed5d944ab5a26fd632e0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:22:14:9d:85:74:2e:2c:2a:56:57:de:35:
                    58:c1:ac:c9:fd:4d:59:bf:5c:86:1b:c5:e8:c0:a4:
                    39:c9:98:00:76:2a:5f:df:fd:26:68:82:0b:6b:8d:
                    47:e4:45:cb:95:67:02:af:5a:73:27:66:c5:62:85:
                    76:79:3d:6c:57:4c:f9:91:13:1b:37:17:44:e6:7f:
                    f7:66:6d:ef:28:ee:38:76:c3:e3:2b:00:f1:a6:95:
                    7f:8a:1e:11:bb:83:42:8b:72:a8:db:3c:ed:c8:41:
                    11:43:a4:a2:b2:b1:ab:11:d5:2f:41:cf:f5:9f:d3:
                    f3:29:02:07:9a:14:60:8d:4b:40:63:e4:59:2a:4d:
                    69:d1:8f:ef:ad:70:8b:17:61:22:37:c2:5f:6b:93:
                    30:71:55:94:02:d9:fd:07:1e:d2:c0:b0:b5:23:02:
                    b9:b9:54:20:d1:e5:df:6c:7a:ce:0d:17:5b:15:f0:
                    78:af:53:34:ad:1d:36:60:2a:cb:42:85:c7:9f:20:
                    5f:36:73:ed:a5:cc:de:42:c0:6c:f7:0c:56:00:4e:
                    8c:2b:e6:97:6f:86:31:f3:84:c3:9b:9d:de:81:72:
                    ea:ed:ed:dc:bf:16:dc:a3:0d:e0:77:d9:e4:55:96:
                    b9:24:b2:33:73:cf:97:e3:d6:b0:37:06:c9:16:a3:
                    86:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:18:4A:D1:7E:DE:4C:D5:4E:ED:5D:94:4A:B5:A2:6F:D6:32:E0:C3
            X509v3 Authority Key Identifier:
                keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/aRhK0X7eTNVO7V2USrWib9Yy4MM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.232.0/24
                  193.37.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:11:db:19:0f:e8:ae:0d:38:9c:16:fb:71:f1:a2:9d:98:d1:
         c2:9d:21:8e:04:95:a0:17:99:82:91:7e:96:0f:07:62:31:ab:
         e0:f3:2d:f0:af:85:1c:af:6c:8b:9d:c6:eb:a2:fd:23:71:89:
         5a:22:47:99:9a:54:7e:96:fb:1b:0a:fe:e9:3a:ef:6e:c1:7f:
         1b:f4:6a:95:cf:ce:ee:ae:38:ab:4c:32:1a:01:e1:6b:44:55:
         ae:ce:0c:e9:08:1d:35:a2:8a:ed:c6:4f:5e:cf:88:b6:5e:f9:
         2d:14:01:b1:f7:fd:12:b0:11:5d:f0:49:89:c2:76:bf:d4:48:
         7c:de:17:0f:93:5b:4d:6b:36:81:8e:24:67:d6:f5:30:26:72:
         9b:42:2d:76:48:da:d2:6f:d3:d1:b6:03:e4:a9:60:73:83:be:
         94:a9:9f:dd:2f:a8:6a:43:7c:f0:0e:ad:27:73:d1:92:53:e5:
         31:37:44:b5:0a:47:fc:7a:e4:d6:a2:5c:e7:98:fc:07:7e:cf:
         68:eb:d0:d5:0c:ff:37:f3:92:36:c6:f1:a4:dc:9d:da:96:12:
         ac:ae:bc:be:b2:82:0f:eb:30:5c:ea:2b:23:ca:06:ff:83:2d:
         63:56:3e:ce:4e:e5:70:a1:de:d1:c5:03:b7:2e:2c:9d:5b:d8:
         c0:bb:b1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:31 2026 by rpki-client