This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/9euNyWZww10dUcwium3SKofSFMo.roa
File:                     9euNyWZww10dUcwium3SKofSFMo.roa (raw, json)
Hash identifier:          +JOKxowiMT05XyUwYWDe27B5gTyN5fMXDPrSBu4Dh0U=
Subject key identifier:   F5:EB:8D:C9:66:70:C3:5D:1D:51:CC:22:BA:6D:D2:2A:87:D2:14:CA
Certificate issuer:       /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial:       019B7E38C0A17700A39D51F7A00FED10A797
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/9euNyWZww10dUcwium3SKofSFMo.roa
Signing time:             Fri 02 Jan 2026 10:20:07 +0000
ROA not before:           Fri 02 Jan 2026 10:20:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215575
IP address blocks:        2a13:a5c3:ff00::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Jan 2026 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:c0:a1:77:00:a3:9d:51:f7:a0:0f:ed:10:a7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
        Validity
            Not Before: Jan  2 10:20:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5eb8dc96670c35d1d51cc22ba6dd22a87d214ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:75:5f:57:cd:af:84:01:a7:bf:dd:b8:04:
                    b0:34:c1:00:0f:c3:23:3c:3e:3a:3b:ab:f2:44:30:
                    e6:bd:d6:51:10:85:d7:c8:7d:fd:ee:bb:43:00:5e:
                    b5:34:9d:07:c3:f9:2d:a4:8b:77:15:84:d7:18:cb:
                    04:d6:08:8c:ef:22:37:5d:66:b5:87:84:c6:52:21:
                    52:3d:f3:e1:a1:cd:d1:66:8b:23:72:e8:f1:0f:f6:
                    2b:88:d0:a0:14:88:c1:6b:f9:0e:9d:6c:2d:0c:c2:
                    ad:26:07:67:e7:d1:3a:32:4a:61:4d:24:c1:e7:7c:
                    16:47:a7:1d:9f:c1:13:21:44:6f:a0:8b:e1:f4:0d:
                    ee:0a:03:cd:7d:34:a3:32:63:6b:f6:bd:a0:5e:1d:
                    05:17:15:8b:8b:32:32:28:d8:cc:b0:57:8a:de:34:
                    3e:62:fc:fd:69:1f:b7:fa:a3:40:92:fc:3d:7f:a1:
                    f4:3d:b1:1a:64:b7:82:59:df:0e:7e:fb:96:4c:7d:
                    87:03:3d:b7:a6:77:48:98:26:88:06:e4:cb:de:c5:
                    b2:b4:49:a4:d2:3f:e6:f1:3f:9c:b8:08:3d:af:3f:
                    fb:b4:ab:43:f1:20:00:28:1c:15:d3:cf:5d:49:24:
                    7d:10:76:76:d9:a5:a3:eb:49:29:8a:14:64:f8:a2:
                    82:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EB:8D:C9:66:70:C3:5D:1D:51:CC:22:BA:6D:D2:2A:87:D2:14:CA
            X509v3 Authority Key Identifier:
                keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/9euNyWZww10dUcwium3SKofSFMo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:a5c3:ff00::/44

    Signature Algorithm: sha256WithRSAEncryption
         28:65:58:07:e3:ad:87:e1:73:6f:74:b9:80:4a:5e:aa:0d:bb:
         24:08:b9:d4:fe:a4:5d:9f:83:0d:e6:7e:cc:36:db:02:43:10:
         1d:4b:3e:b2:f8:a8:30:30:d5:86:a4:25:38:b8:f3:c3:89:96:
         2f:02:9f:13:5b:20:d1:f9:46:00:c2:d5:8d:66:80:5f:09:6c:
         4d:8d:48:33:b0:6d:9f:40:dd:71:1c:dd:a2:25:6f:0f:52:2d:
         4e:be:81:cb:f7:41:2c:58:7a:f0:c2:c5:65:82:60:15:f6:07:
         de:41:b9:ea:6e:2f:59:38:f5:07:81:c5:13:06:00:f0:0c:36:
         41:ec:b2:46:94:da:e5:bd:a2:b6:1c:8c:ac:12:3e:3a:65:74:
         5c:db:91:b6:ee:1a:78:66:00:2c:ab:58:f3:7b:8f:af:04:f4:
         d7:7a:5f:f5:06:3c:f2:3a:1a:f1:0f:f7:53:e9:2b:81:8d:52:
         81:9f:95:56:1b:d2:58:d8:97:aa:7e:80:da:dd:8a:cc:a4:b7:
         4a:ae:19:40:6a:e6:de:26:43:31:2a:1e:cd:ff:9d:4e:1a:94:
         2a:9e:62:f0:77:03:62:cd:a6:01:f6:5b:b8:d2:ef:fb:6d:dd:
         40:ce:2c:3c:ba:b1:7e:80:68:2c:2d:db:03:ed:0f:77:a2:1c:
         31:e4:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 03:47:27 2026 by rpki-client