This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/tLR8Xx9kGTwthIYBMxfEvODUS6s.roa
File:                     tLR8Xx9kGTwthIYBMxfEvODUS6s.roa (raw, json)
Hash identifier:          KHsotfa52tk8ozmtkTvPKINqIBAb1ObEd0CzRfZjCVM=
Subject key identifier:   B4:B4:7C:5F:1F:64:19:3C:2D:84:86:01:33:17:C4:BC:E0:D4:4B:AB
Certificate issuer:       /CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
Certificate serial:       019B7911323705CCB52E76E382C1474348DC
Authority key identifier: FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/tLR8Xx9kGTwthIYBMxfEvODUS6s.roa
Signing time:             Thu 01 Jan 2026 10:18:48 +0000
ROA not before:           Thu 01 Jan 2026 10:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211861
IP address blocks:        193.3.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:32:37:05:cc:b5:2e:76:e3:82:c1:47:43:48:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe6c6a604203e19bd236c0e3641ae69644d4aa74
        Validity
            Not Before: Jan  1 10:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b4b47c5f1f64193c2d8486013317c4bce0d44bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:7f:b0:33:31:b6:a3:8e:6d:43:a6:9c:56:
                    2a:98:c2:46:e9:cb:da:65:37:88:28:9f:b7:71:4f:
                    b5:c1:96:6b:97:f1:d0:8e:d5:81:2f:79:4c:99:b6:
                    10:b0:39:d7:97:9f:29:2d:9e:2b:a0:73:87:f7:74:
                    d4:63:b3:07:9a:98:b2:1d:3d:2b:43:f0:55:71:1c:
                    5e:6f:b0:b6:cc:b1:10:8f:d3:7c:9c:1e:60:1a:03:
                    91:e0:39:5b:38:ec:68:5d:35:e1:c2:ac:fe:5c:98:
                    ab:cb:bc:95:8f:6a:77:90:89:59:bc:5b:61:7d:f9:
                    98:42:58:cb:25:62:c7:1f:88:8d:62:e7:2f:b2:21:
                    aa:c1:c7:4f:11:50:cc:b5:11:cc:dc:fd:44:dc:56:
                    16:39:e2:e7:7f:ea:a2:e9:45:3f:6f:83:a6:bb:02:
                    aa:d9:0c:f5:2e:a5:f9:cc:92:b6:3f:2a:cc:6a:8c:
                    77:7f:dc:93:d6:1c:c1:bb:bf:a0:e7:3d:d2:79:af:
                    90:3a:44:84:6b:3f:18:1f:f4:65:db:68:f8:02:de:
                    fd:ba:61:eb:0f:39:11:11:a9:d0:2f:f9:b4:f6:e7:
                    d3:66:b4:bf:c0:6c:57:a3:c5:50:8b:36:20:88:0f:
                    6a:fb:8c:79:a8:36:8f:1f:43:3e:86:5a:42:61:b0:
                    87:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B4:7C:5F:1F:64:19:3C:2D:84:86:01:33:17:C4:BC:E0:D4:4B:AB
            X509v3 Authority Key Identifier:
                keyid:FE:6C:6A:60:42:03:E1:9B:D2:36:C0:E3:64:1A:E6:96:44:D4:AA:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/tLR8Xx9kGTwthIYBMxfEvODUS6s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/01acea-ca76-4a72-bc73-318636c4dc86/1/_mxqYEID4ZvSNsDjZBrmlkTUqnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:4e:c5:8b:69:cc:c8:4c:10:f9:a9:fe:6b:de:0c:db:15:35:
         05:84:86:b6:48:9b:f4:c5:b8:18:2f:4d:44:17:de:c5:5a:d1:
         24:c5:b9:dd:8c:9b:52:19:55:88:4d:c0:b7:b5:f7:8a:6f:4d:
         c3:d9:94:c3:e9:34:d6:51:86:b2:6c:f5:ca:f5:99:59:47:66:
         3b:07:73:fa:fb:5d:d0:d4:f6:98:d3:23:2a:78:df:6d:3f:5b:
         be:d8:95:a3:4f:d5:7b:4b:55:c0:91:6d:3b:cc:16:74:b1:28:
         b0:09:7f:70:05:57:58:89:1b:5d:4f:c0:14:72:ae:60:71:02:
         9f:97:ec:6f:6d:98:45:f6:24:ad:7e:d7:d1:8f:4d:8a:b3:ac:
         c7:0b:f4:4b:ba:bb:01:70:09:42:d8:07:c3:fd:2c:8c:21:7e:
         1d:47:89:39:ab:f4:7e:a6:7c:96:3b:72:7a:29:ea:d1:98:d8:
         67:4d:c9:cf:11:93:24:c6:43:07:3a:bb:f6:c2:91:6a:d4:60:
         a1:26:44:df:e3:aa:11:cf:dc:0c:ff:4d:70:4c:98:76:16:0f:
         86:4d:d0:fc:5c:9c:52:f4:4f:d8:b8:6d:ca:10:02:ff:c1:43:
         20:ca:ab:1b:de:8e:d2:c1:16:05:3e:63:61:89:4a:4d:d2:b2:
         97:d6:bd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:53 2026 by rpki-client