This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OWOMBwiTD1NIdaSVs1eq-MtLGbs.roa
File:                     OWOMBwiTD1NIdaSVs1eq-MtLGbs.roa (raw, json)
Hash identifier:          t3Kdm10lxijsyk9i4eGTGloxFWhVOxsuOgOEIxIq48Q=
Subject key identifier:   39:63:8C:07:08:93:0F:53:48:75:A4:95:B3:57:AA:F8:CB:4B:19:BB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019C475B709C78EE5137F92CA464718CC44A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OWOMBwiTD1NIdaSVs1eq-MtLGbs.roa
Signing time:             Tue 10 Feb 2026 11:41:40 +0000
ROA not before:           Tue 10 Feb 2026 11:41:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201354
IP address blocks:        2a0e:97c0:b70::/48 maxlen: 48
                          2a0e:97c0:b71::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Feb 2026 15:10:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:47:5b:70:9c:78:ee:51:37:f9:2c:a4:64:71:8c:c4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 10 11:41:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=39638c0708930f534875a495b357aaf8cb4b19bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:d6:6e:1b:cf:70:85:5b:b7:40:56:2b:41:
                    8d:70:5b:23:88:73:d3:0f:69:9b:54:14:38:12:ca:
                    01:03:1f:7a:05:ac:e3:a4:b0:a2:59:74:5a:3e:da:
                    bd:fd:13:83:a5:0f:ed:12:59:5b:a7:02:4d:df:60:
                    a1:a2:ea:2a:36:47:51:52:f8:0b:63:1f:00:6f:00:
                    0d:15:27:d9:a7:f0:45:78:4b:c4:b2:5a:7b:8c:b5:
                    7e:a2:2d:d0:40:d7:3e:17:f1:d3:5c:01:ad:aa:26:
                    c1:53:cc:ba:c8:65:61:d0:83:50:b2:b9:80:0b:90:
                    25:0b:3a:e7:e6:e0:44:9d:77:98:7e:93:a0:61:90:
                    2e:de:5c:ce:5d:58:3b:a9:18:35:f9:dc:8d:d7:78:
                    ee:4c:f3:97:87:94:b0:4f:4a:90:6a:0b:2b:4b:6f:
                    00:a8:46:47:f5:ac:fa:70:b8:93:6a:17:3e:fc:57:
                    90:2f:78:ff:ef:2c:a3:3f:c6:98:9d:41:5f:e7:9d:
                    ed:0a:cc:d5:2b:58:ca:b8:9b:93:99:a3:1c:4d:89:
                    26:c5:fd:59:d0:0f:de:65:f8:d6:b3:2a:9b:18:45:
                    81:65:92:0a:ee:47:1e:bc:04:ec:a2:16:c1:66:66:
                    91:f6:6e:56:c6:7e:ad:bd:de:b2:f3:f5:bc:aa:a8:
                    f1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:63:8C:07:08:93:0F:53:48:75:A4:95:B3:57:AA:F8:CB:4B:19:BB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OWOMBwiTD1NIdaSVs1eq-MtLGbs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:b70::/47

    Signature Algorithm: sha256WithRSAEncryption
         0e:0b:24:6f:98:2b:2c:a7:e0:07:d6:19:5f:ed:f5:c8:9b:87:
         43:74:43:0e:af:f9:e7:84:01:3d:81:e1:f8:aa:f3:54:8a:12:
         f3:0c:29:c1:06:c3:38:d3:43:4a:2e:79:1a:e1:df:48:d1:ec:
         f8:ae:3c:99:b8:e3:50:8e:6f:54:06:8f:b7:ff:90:a5:08:2f:
         3e:98:7e:1b:89:bc:27:b0:26:b8:73:7a:1f:0a:ea:b6:e4:4f:
         53:a5:08:34:50:70:9f:cf:31:99:54:11:bb:18:40:68:4c:bf:
         02:80:1a:90:1a:f9:2b:58:da:e6:8d:bb:bc:a2:71:09:07:5b:
         cd:15:36:20:91:c6:99:a4:46:4c:94:da:d1:df:32:c4:1e:52:
         c8:1f:6e:4d:ee:11:79:f6:7d:18:8f:b6:49:35:36:37:41:bc:
         c7:53:16:53:45:ec:5e:a3:42:17:fa:f4:ce:25:b9:39:bb:43:
         31:b4:c5:0e:95:c8:69:a1:ac:78:3d:50:88:87:a2:5d:42:9b:
         8b:18:e5:f0:d0:4a:9c:95:a2:c8:d9:08:12:4b:2a:4b:b6:ec:
         ac:ed:00:58:d2:e4:cb:89:66:15:d4:0e:3a:69:89:ed:0d:6f:
         e4:9c:99:ae:81:05:18:18:d6:c7:51:3f:52:df:84:11:fa:f2:
         e3:82:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 01:21:55 2026 by rpki-client