This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/tnDfRz3mtoeU30Gx8WzTPcfLyR8.roa
File:                     tnDfRz3mtoeU30Gx8WzTPcfLyR8.roa (raw, json)
Hash identifier:          pAE394zjlQUYsuracxTr1PN3S+HncJZRyV9JQFY9+ac=
Subject key identifier:   B6:70:DF:47:3D:E6:B6:87:94:DF:41:B1:F1:6C:D3:3D:C7:CB:C9:1F
Certificate issuer:       /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Certificate serial:       019C37129DC6BB3DEA80462912E570988782
Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/tnDfRz3mtoeU30Gx8WzTPcfLyR8.roa
Signing time:             Sat 07 Feb 2026 07:48:12 +0000
ROA not before:           Sat 07 Feb 2026 07:48:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     397081
IP address blocks:        195.24.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:37:12:9d:c6:bb:3d:ea:80:46:29:12:e5:70:98:87:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
        Validity
            Not Before: Feb  7 07:48:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b670df473de6b68794df41b1f16cd33dc7cbc91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:37:18:0f:0a:b7:d0:a1:b4:c9:cb:ef:b5:
                    4a:9f:6d:c6:df:04:f0:09:16:d4:80:14:d0:41:fb:
                    c8:7d:0a:0a:77:7b:d5:e3:80:a7:d9:23:dc:01:95:
                    e9:aa:22:05:89:58:76:02:6a:f1:b8:dd:a8:b1:c3:
                    04:ad:eb:00:5a:d4:91:c3:ee:e0:d8:b1:7f:de:14:
                    31:5c:f6:b3:4b:79:c3:ac:cd:02:89:f9:0b:4d:1f:
                    81:a5:86:a2:bb:85:43:de:0d:6f:f5:0b:82:a0:08:
                    0c:4e:ab:03:48:74:cb:9c:a5:91:7c:b9:55:18:fb:
                    88:1c:cb:e1:cf:40:f3:12:12:b4:9b:c9:bc:01:56:
                    3f:d0:c4:c9:7d:0b:1f:57:05:17:cf:76:34:fe:4b:
                    0c:2b:ea:19:67:76:1a:08:e9:45:64:0b:16:54:ed:
                    dc:74:2a:68:68:1b:87:1a:91:31:d1:fd:d9:ad:a3:
                    f3:1a:d6:87:ff:e2:2e:6d:23:60:a9:33:3c:4e:5e:
                    99:43:5f:38:15:51:e5:3e:1c:43:1a:f9:d6:9e:8d:
                    6a:08:47:1c:8a:57:4f:d5:45:b3:0d:70:3f:a0:76:
                    19:25:ec:7c:e9:12:1b:c6:85:23:ca:cd:92:78:a4:
                    99:e4:53:73:78:68:a4:68:7c:e9:1a:fd:bc:23:a4:
                    0e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:70:DF:47:3D:E6:B6:87:94:DF:41:B1:F1:6C:D3:3D:C7:CB:C9:1F
            X509v3 Authority Key Identifier:
                keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/tnDfRz3mtoeU30Gx8WzTPcfLyR8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.24.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:3d:8d:73:4b:91:2e:6d:fd:7f:41:77:9a:ab:ef:b7:44:
         c5:e8:b7:7d:24:1e:42:92:34:cc:c4:4f:a6:cf:db:d2:79:bd:
         c4:dc:2f:19:78:c8:29:31:6b:26:0e:04:75:11:58:1e:29:65:
         c6:d5:69:53:1d:8d:af:40:ea:c5:a1:96:cd:7e:6f:df:fd:a7:
         a2:5a:70:93:32:71:73:60:ca:b7:91:b5:9a:3e:b4:b6:8c:e5:
         b6:12:c2:e0:9f:18:0d:fd:89:9c:ac:23:40:ec:3c:d7:40:01:
         5c:8d:f3:c0:02:79:5e:8d:92:3b:30:cc:09:b5:b8:77:c5:57:
         1f:8d:bf:80:24:cb:55:8d:07:66:68:1d:ae:ab:29:d4:c3:3b:
         0e:ac:a0:85:f5:aa:ec:53:9f:88:9d:c6:45:84:20:e3:1a:d4:
         4b:73:d4:1a:cb:ca:1f:ce:0a:ac:d8:57:65:86:bc:9f:70:69:
         6b:16:56:37:08:89:df:ec:a2:55:ed:4d:17:6f:22:be:96:5a:
         70:50:fd:fe:8a:d6:3c:a3:60:ef:fe:7d:96:d2:dc:5c:50:87:
         69:07:42:15:5e:2c:24:44:f4:c1:49:b4:d0:c7:99:a8:25:a8:
         2d:f5:b0:a8:21:8b:2c:bc:ff:40:34:d1:70:f2:e0:22:0b:c3:
         04:8b:26:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:11 2026 by rpki-client