This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/9Bpiuh903cf2KUyc3B43Sh-h6cU.roa
File:                     9Bpiuh903cf2KUyc3B43Sh-h6cU.roa (raw, json)
Hash identifier:          vOwl8xFJY0duh2VdVAScqH5k4a2xL8x3qVJv4PynVyI=
Subject key identifier:   F4:1A:62:BA:1F:74:DD:C7:F6:29:4C:9C:DC:1E:37:4A:1F:A1:E9:C5
Certificate issuer:       /CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Certificate serial:       019B7C808B9C9FC5D05AB8F252D7283C3CD1
Authority key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/9Bpiuh903cf2KUyc3B43Sh-h6cU.roa
Signing time:             Fri 02 Jan 2026 02:19:17 +0000
ROA not before:           Fri 02 Jan 2026 02:19:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44823
IP address blocks:        193.16.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:8b:9c:9f:c5:d0:5a:b8:f2:52:d7:28:3c:3c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
        Validity
            Not Before: Jan  2 02:19:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f41a62ba1f74ddc7f6294c9cdc1e374a1fa1e9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:86:ba:4d:e5:90:a1:d5:3e:d8:dd:34:27:e7:
                    b7:ca:a0:6e:15:43:4c:cf:4f:41:02:55:67:ac:b3:
                    30:b9:82:ae:ac:7f:e0:80:15:ec:f7:79:63:b0:36:
                    4c:3e:73:5c:8b:38:e4:81:38:57:cc:c5:6b:bc:b8:
                    49:41:cd:09:f2:a9:24:88:d2:18:c9:48:86:79:2d:
                    e0:47:f5:8c:1f:ac:32:40:90:c8:5b:1a:25:61:c0:
                    5e:34:74:5d:c6:6b:2c:15:6c:e8:cb:33:33:bb:e1:
                    85:f6:24:3e:21:74:69:21:10:2b:d7:b2:3f:bf:1b:
                    fc:4b:9c:c1:22:3a:7b:6f:34:c5:11:18:1b:ff:91:
                    94:40:4e:03:37:c4:54:1b:0e:a5:96:50:b8:96:ba:
                    68:6d:7a:c3:cb:20:73:b9:1c:f3:e1:ab:68:52:7c:
                    17:c3:db:0b:b2:c6:91:90:4a:a1:1a:d3:7d:55:cd:
                    23:5f:ed:17:07:b6:20:31:11:b2:69:a3:a1:8a:34:
                    13:61:d1:e7:30:27:cc:8a:21:54:8c:70:18:15:b4:
                    ee:b8:b3:fc:f8:1f:e7:74:c0:3f:83:08:9d:ef:e5:
                    7c:d4:f8:27:e1:b1:d3:be:83:45:59:cf:b8:9d:f6:
                    e5:ab:c2:b5:3d:5e:5e:a9:08:3f:19:12:97:1c:6d:
                    cc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1A:62:BA:1F:74:DD:C7:F6:29:4C:9C:DC:1E:37:4A:1F:A1:E9:C5
            X509v3 Authority Key Identifier:
                keyid:D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/9Bpiuh903cf2KUyc3B43Sh-h6cU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.16.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:1b:3a:f2:71:12:b9:6c:b8:99:b9:2f:a9:53:93:4f:4c:95:
         e9:82:8d:53:92:8b:53:fd:ee:b0:5b:84:a4:46:31:de:51:29:
         c0:1b:59:4c:05:54:0b:77:3c:52:d7:d5:41:a4:ed:7f:91:82:
         4e:6f:31:2c:6d:ba:67:4e:39:17:5c:b5:36:9e:28:d0:45:9e:
         6d:63:c9:16:32:b8:0b:aa:18:e5:c7:ea:b1:ac:68:c3:82:e8:
         0f:e2:4f:c3:05:f4:0c:ad:e7:c5:95:47:ab:77:80:46:47:76:
         86:b2:66:78:de:a8:3f:60:30:80:f9:7e:40:bd:0f:a1:a1:2d:
         f6:5a:c4:9e:3a:c9:9c:ca:ec:df:1b:29:af:ef:3a:b6:ed:3b:
         4e:2e:d4:5c:2f:bd:f7:4b:89:7c:30:b8:78:9b:db:30:cb:84:
         87:40:a5:fd:5f:fb:57:eb:d0:74:19:a6:f0:7b:2d:c0:76:f8:
         3a:67:01:8b:00:79:28:bc:71:2c:a6:9d:4c:5b:7e:4f:d3:40:
         64:8c:af:52:cd:1c:5b:55:15:d9:cf:78:0d:c4:d4:15:60:64:
         92:8b:3a:2b:25:27:ca:b3:e1:2a:9c:e5:1b:81:ec:a2:59:66:
         d0:2c:b9:b1:6f:7c:f7:d3:5b:84:e0:5f:4a:97:63:51:5c:e2:
         8f:8c:9c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:32:08 2026 by rpki-client