This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/fy0xLRcedKrdOz_tcqW1Wz9EYV8.roa
File:                     fy0xLRcedKrdOz_tcqW1Wz9EYV8.roa (raw, json)
Hash identifier:          UicbF6HqFzNjuTONdGcIiDeIjerH1Ziz3AoeI+o7LaE=
Subject key identifier:   7F:2D:31:2D:17:1E:74:AA:DD:3B:3F:ED:72:A5:B5:5B:3F:44:61:5F
Certificate issuer:       /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial:       019B7C8008C2EA9BEE3431E35E5C6B342F42
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/fy0xLRcedKrdOz_tcqW1Wz9EYV8.roa
Signing time:             Fri 02 Jan 2026 02:18:44 +0000
ROA not before:           Fri 02 Jan 2026 02:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200375
IP address blocks:        193.178.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:08:c2:ea:9b:ee:34:31:e3:5e:5c:6b:34:2f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
        Validity
            Not Before: Jan  2 02:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f2d312d171e74aadd3b3fed72a5b55b3f44615f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:59:2d:0b:db:ad:53:7f:14:e1:da:4d:90:ed:
                    3d:39:f8:96:e6:63:b5:f6:9d:e1:e4:1e:f0:a8:77:
                    cb:3b:ea:48:d6:d9:08:23:e3:29:89:2f:c3:c5:24:
                    d9:40:ea:bf:e5:85:87:66:b4:e4:1b:9f:0a:d5:c8:
                    58:94:71:4b:d4:75:53:22:0a:e6:07:20:34:41:b8:
                    ea:5f:74:8c:27:5e:5e:dc:54:9c:ee:49:79:2f:00:
                    82:e6:a0:c6:60:e0:70:a0:78:96:55:c0:0f:1d:ec:
                    0d:88:ee:3e:ea:f8:a2:f3:b7:ac:4c:3c:d2:79:e9:
                    f1:bf:c9:70:50:14:25:6a:2f:04:31:34:e7:d6:69:
                    e4:a7:50:bb:d0:ba:c2:b2:8a:d4:1b:e1:e2:2b:a0:
                    dd:be:5a:e7:cb:c0:81:af:01:8a:a4:f9:cf:53:6d:
                    d9:35:d3:c4:46:24:9d:76:4e:b3:ad:2c:1f:15:e2:
                    e8:c8:b7:4f:3d:e6:c5:39:d8:1b:b0:78:43:df:e9:
                    63:83:e9:0d:8f:ed:0b:52:78:95:5a:93:5a:e1:bf:
                    78:50:e8:cb:f8:bb:ae:e6:b3:2f:89:07:6f:cb:e9:
                    e7:08:15:55:6b:eb:52:ef:b5:ef:a2:e3:1a:6d:9e:
                    80:27:49:e6:af:a4:e4:8e:aa:b3:7d:9d:a6:58:09:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2D:31:2D:17:1E:74:AA:DD:3B:3F:ED:72:A5:B5:5B:3F:44:61:5F
            X509v3 Authority Key Identifier:
                keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/fy0xLRcedKrdOz_tcqW1Wz9EYV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:d9:8f:d0:97:78:09:d1:e3:88:19:4c:d2:1d:79:b4:9d:1a:
         21:e9:b9:13:34:a6:d5:65:cb:c7:2e:4c:4d:11:51:fc:57:fb:
         36:b2:8e:13:ca:52:e7:bc:5c:7b:d0:85:b2:62:cd:6f:a6:35:
         04:75:a0:db:76:12:82:05:16:5c:af:d1:49:5a:1a:41:e0:0d:
         08:f8:7a:9f:77:31:68:b1:79:f4:43:7b:f8:ff:52:55:81:2a:
         97:79:e1:78:4e:3f:4b:70:5c:f8:93:bb:88:5a:d9:a1:4f:83:
         36:80:0a:6c:6d:6d:13:ec:ff:5e:7a:30:44:9e:a6:29:b4:3b:
         4b:f7:3d:5f:c6:97:b0:dd:c4:e6:17:ef:de:e9:9c:c7:eb:96:
         41:20:49:de:70:93:48:dd:3a:3a:63:db:8e:38:41:1c:b6:22:
         82:78:71:f5:c9:7a:c9:3f:4d:88:53:41:91:71:66:22:0c:eb:
         5f:ae:aa:f4:2d:ab:9c:45:55:17:48:39:a1:29:3e:42:a7:fb:
         0f:ba:ce:28:30:c9:0e:32:e1:51:09:86:09:81:f0:7a:08:73:
         d1:16:bf:07:35:0c:c5:ce:f3:73:28:20:5f:aa:fb:dc:37:83:
         40:97:38:0e:79:7a:a7:96:83:95:cc:d5:c6:ee:d6:80:36:db:
         11:21:d6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:21:37 2026 by rpki-client