This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/TdYAourfzXro8X37Y0IoM8aZBEo.roa
File:                     TdYAourfzXro8X37Y0IoM8aZBEo.roa (raw, json)
Hash identifier:          gZYndkQ6uGvgPeqwt5brtKCHj9NVuSxL2FUpX4xFOEs=
Subject key identifier:   4D:D6:00:A2:EA:DF:CD:7A:E8:F1:7D:FB:63:42:28:33:C6:99:04:4A
Certificate issuer:       /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial:       019B7910994BCA912F5D7B96104FC8CE9078
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/TdYAourfzXro8X37Y0IoM8aZBEo.roa
Signing time:             Thu 01 Jan 2026 10:18:09 +0000
ROA not before:           Thu 01 Jan 2026 10:18:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49576
IP address blocks:        193.148.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:99:4b:ca:91:2f:5d:7b:96:10:4f:c8:ce:90:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
        Validity
            Not Before: Jan  1 10:18:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4dd600a2eadfcd7ae8f17dfb63422833c699044a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:aa:50:db:57:3b:0a:9a:be:66:53:76:e7:85:
                    9b:47:7e:43:1f:69:79:a4:48:78:0f:eb:fb:79:9f:
                    f7:14:d5:81:49:f6:fe:e5:39:f4:60:d2:4b:60:0d:
                    35:2a:e8:6a:0a:59:77:9c:49:10:24:61:77:ea:77:
                    a3:d3:87:8c:5a:7d:78:72:1f:d5:13:94:f5:cb:7e:
                    31:fe:aa:04:17:e5:67:ec:37:94:bf:53:20:bb:7b:
                    2d:cb:2e:9d:0c:e4:d8:c3:22:ee:c6:a0:1b:a5:1e:
                    04:7f:7f:52:6a:3f:7c:86:be:a5:1b:03:57:bd:a4:
                    79:38:fd:ef:c2:13:35:44:b5:c2:dd:1e:47:4e:cd:
                    e7:69:a2:24:71:ed:0d:3f:64:4e:5f:cd:39:52:3b:
                    eb:3b:0c:80:48:53:5a:f4:72:ef:5b:1d:00:d4:5b:
                    46:d5:02:ce:99:b1:3d:03:42:56:e6:87:2b:12:9d:
                    2c:a4:c6:34:dc:a2:cc:c5:d0:37:2b:7a:17:4b:10:
                    cd:35:a1:22:74:00:1a:dd:dc:85:1e:e4:c7:d4:28:
                    61:63:51:57:70:17:c4:f9:ab:f8:86:67:3b:dd:9a:
                    d9:a8:0e:4e:9e:a1:13:0d:0a:a5:af:5b:96:e7:2b:
                    d4:69:ed:88:ad:19:84:a0:3a:6d:0c:e0:21:27:0c:
                    73:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D6:00:A2:EA:DF:CD:7A:E8:F1:7D:FB:63:42:28:33:C6:99:04:4A
            X509v3 Authority Key Identifier:
                keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/TdYAourfzXro8X37Y0IoM8aZBEo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.148.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:b9:4a:a7:f3:a3:26:f3:be:1f:e4:e8:4b:1e:b2:dd:af:ea:
         06:39:d1:13:5e:0f:18:2f:17:63:8d:dc:92:c1:2d:8b:31:26:
         5b:df:7b:a7:12:ce:f5:df:65:1e:8c:5d:38:fa:1c:de:cc:f1:
         d6:84:94:7f:13:93:7a:e2:e4:73:5f:52:11:f1:67:fe:55:a6:
         e8:d7:a1:86:ea:0a:0b:ae:94:25:a8:85:27:db:05:88:45:ec:
         4e:11:15:53:03:96:bc:aa:b7:aa:a4:db:d6:af:4d:87:b8:51:
         e9:e5:b7:da:fe:c7:15:ef:39:29:3a:d0:36:0b:55:e1:74:80:
         00:90:0a:d0:75:b9:47:57:24:7e:8a:8b:db:7f:e7:00:0f:c7:
         02:8e:51:95:f4:da:a8:b6:01:3e:55:e3:06:40:da:45:c6:4f:
         d0:05:31:f8:11:92:e3:a4:83:8e:20:62:a4:fd:a2:67:3c:8a:
         d2:2e:78:0f:26:77:89:1f:04:8c:c8:74:e6:7f:b5:26:63:68:
         92:f4:9e:a1:35:d8:60:9c:ee:55:02:40:27:0f:f1:4e:32:ad:
         0a:91:11:a7:8a:ef:d5:e2:03:bc:ab:02:da:d3:84:5a:a0:53:
         6e:ad:1e:99:c7:d9:1f:19:6c:78:59:bd:8a:6a:aa:0f:6c:e0:
         b4:85:b8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:06:13 2026 by rpki-client