This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/1n27rvaelRUykey6wf5ROwjIidI.roa
File:                     1n27rvaelRUykey6wf5ROwjIidI.roa (raw, json)
Hash identifier:          KBBik8Julj24P9mvYdNU35DOMzPd5tmec1o6YPTRHDE=
Subject key identifier:   D6:7D:BB:AE:F6:9E:95:15:32:91:EC:BA:C1:FE:51:3B:08:C8:89:D2
Certificate issuer:       /CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
Certificate serial:       019B7EA7233CF0C9BB1C8752C244FB0E98DC
Authority key identifier: 44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/1n27rvaelRUykey6wf5ROwjIidI.roa
Signing time:             Fri 02 Jan 2026 12:20:41 +0000
ROA not before:           Fri 02 Jan 2026 12:20:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     45022
IP address blocks:        195.5.184.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a7:23:3c:f0:c9:bb:1c:87:52:c2:44:fb:0e:98:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=447cd41d9e6ccf80306c1b46bdc0b577b1ee2cae
        Validity
            Not Before: Jan  2 12:20:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d67dbbaef69e95153291ecbac1fe513b08c889d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:65:2d:5b:3c:49:24:0e:24:3f:ae:84:2f:45:
                    74:ea:f0:28:51:a6:24:82:24:e5:f4:ec:3b:9a:de:
                    55:e6:44:72:87:a0:42:12:ba:83:07:6a:1b:d2:8c:
                    91:16:a8:86:c5:e2:b3:21:c0:a5:17:9c:5c:6d:6b:
                    ae:86:6f:fb:95:02:89:db:89:47:58:f7:ef:cc:90:
                    41:da:e9:84:69:02:5f:84:59:f4:f5:29:d0:b8:68:
                    62:71:81:09:85:01:03:82:52:8b:16:af:7b:9a:fd:
                    36:60:a3:98:31:96:42:58:ab:9a:a0:5e:e1:f3:7a:
                    7c:59:bf:66:57:4b:fd:8e:a1:5d:1f:90:f0:cb:0c:
                    7a:a8:4d:64:5d:b8:63:06:aa:d2:11:6b:73:24:7e:
                    73:d9:c3:c1:a8:df:90:3b:31:de:90:a1:77:59:f6:
                    6f:5f:53:98:43:58:09:c5:25:c7:df:38:4c:52:2c:
                    82:29:f8:6d:e7:30:31:a9:72:cb:57:ca:a8:de:2e:
                    e7:63:8a:33:ab:08:79:02:c9:9f:ef:ca:9a:4e:7b:
                    cd:a0:dc:d4:8d:e9:78:84:ef:dc:51:85:70:ef:fe:
                    98:1a:a8:6e:4b:d9:f1:01:7a:f6:67:bf:60:de:a3:
                    b1:ad:7d:be:54:bb:44:30:63:39:4f:75:b9:7c:48:
                    1c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7D:BB:AE:F6:9E:95:15:32:91:EC:BA:C1:FE:51:3B:08:C8:89:D2
            X509v3 Authority Key Identifier:
                keyid:44:7C:D4:1D:9E:6C:CF:80:30:6C:1B:46:BD:C0:B5:77:B1:EE:2C:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/1n27rvaelRUykey6wf5ROwjIidI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/1203d7-41ab-404c-929b-b97838c8d658/1/RHzUHZ5sz4AwbBtGvcC1d7HuLK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.5.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:14:57:75:2d:39:d1:61:24:79:23:36:96:ba:8f:b0:e0:d9:
         98:2b:77:49:ef:29:a9:5c:95:7f:50:9c:08:a1:37:41:b3:6b:
         e3:ea:76:78:51:e6:67:5c:95:91:70:10:33:79:06:29:55:c4:
         b3:9e:8a:c2:dc:70:de:58:97:04:69:6e:06:b6:3e:a6:5f:39:
         3c:37:ff:6c:99:74:61:15:a4:45:db:3f:a1:db:d2:94:cb:55:
         49:45:1a:8a:6b:28:9f:82:d4:0f:56:18:c3:20:79:48:fb:17:
         df:5d:b3:b2:2a:ab:10:d5:18:50:50:9c:4a:f2:40:cd:3c:72:
         56:4f:64:91:35:89:db:f3:fd:c7:e0:8b:97:5a:94:7c:33:1b:
         ed:b7:bf:b5:e2:fb:b3:3c:09:f7:8b:e1:dc:b4:28:87:1e:08:
         6c:ab:07:23:e2:4c:6d:a6:fd:57:49:07:1d:9d:aa:71:73:c3:
         86:6a:98:fb:93:01:6a:9a:36:24:04:e1:44:1b:41:56:47:49:
         ee:5e:1f:b8:d0:df:05:1e:6c:fe:96:9f:58:65:d3:5d:04:0f:
         5d:f9:6c:cf:e7:64:ea:dc:b6:a2:d4:c9:0e:f3:8a:12:88:89:
         87:3c:99:9b:93:15:82:5d:a7:f1:f8:b2:c6:22:81:5b:7d:26:
         2c:91:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:34 2026 by rpki-client