This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/tOX7dyIThoDN1xaTAaaJqMi__Vw.roa
File:                     tOX7dyIThoDN1xaTAaaJqMi__Vw.roa (raw, json)
Hash identifier:          k4fTptzT7qrxypPu30EJnb+ns+ku02IYmPLr0kX7y1U=
Subject key identifier:   B4:E5:FB:77:22:13:86:80:CD:D7:16:93:01:A6:89:A8:C8:BF:FD:5C
Certificate issuer:       /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial:       019B78A25BDC4349FEFB0B870956FB37230C
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/tOX7dyIThoDN1xaTAaaJqMi__Vw.roa
Signing time:             Thu 01 Jan 2026 08:17:44 +0000
ROA not before:           Thu 01 Jan 2026 08:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24951
IP address blocks:        193.8.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:5b:dc:43:49:fe:fb:0b:87:09:56:fb:37:23:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
        Validity
            Not Before: Jan  1 08:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b4e5fb7722138680cdd7169301a689a8c8bffd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:ba:cf:17:d6:e6:0c:b5:b5:3c:d4:be:45:
                    b8:e5:d7:00:c7:e5:75:61:43:5f:c4:3d:3b:22:46:
                    0e:82:99:c8:9a:08:80:f1:05:89:d3:32:dd:85:3e:
                    57:b6:5a:24:a7:a6:4b:96:42:e1:6d:ce:09:d3:ef:
                    df:40:7f:22:67:eb:9e:d6:00:a3:07:ad:f6:d1:04:
                    26:44:ee:dd:62:63:20:ed:8c:0d:94:42:9d:00:67:
                    93:57:bb:a4:cf:cb:fc:97:bc:6f:da:11:99:90:20:
                    52:6f:6b:95:f3:23:e8:7f:68:02:78:89:8a:14:09:
                    73:23:93:25:ae:a0:09:9f:0b:38:83:19:1a:13:18:
                    5e:f1:99:c7:59:09:ff:e0:cf:b2:19:d2:bf:4c:a9:
                    c7:2b:00:68:6f:7e:78:d2:12:83:ba:de:1c:d0:b6:
                    27:8e:2d:4d:14:60:0c:8c:1f:47:47:bd:a7:52:ff:
                    c4:3e:aa:bf:29:f6:fd:5d:82:dc:a7:dd:85:4b:9b:
                    ba:02:ca:43:44:aa:f8:da:81:9d:d9:af:f5:26:36:
                    06:b1:33:ac:59:11:64:56:37:33:73:31:3b:57:d9:
                    c7:ef:f0:01:f7:1e:42:33:26:c7:88:d3:99:a9:c0:
                    78:d9:79:b0:94:ae:eb:46:79:ad:72:3b:33:f7:0c:
                    c0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E5:FB:77:22:13:86:80:CD:D7:16:93:01:A6:89:A8:C8:BF:FD:5C
            X509v3 Authority Key Identifier:
                keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/tOX7dyIThoDN1xaTAaaJqMi__Vw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:dc:fe:97:f7:ae:37:4c:83:d3:bb:ae:71:6d:99:0d:3e:42:
         2f:cf:4f:72:8f:96:fe:0c:b2:ff:85:f2:49:24:5c:ea:d9:21:
         10:5f:5c:98:e0:3c:ef:f2:d1:a1:5d:ba:15:ba:f7:2f:7d:76:
         92:a3:6e:ba:88:d0:c6:6a:88:90:54:f6:df:45:d4:a5:82:1b:
         e2:aa:84:d1:12:cf:75:91:79:c8:9a:62:1e:4f:bb:2a:64:7d:
         b5:5e:6c:bd:dd:41:22:fe:cc:0c:34:fc:38:26:72:b8:c5:d2:
         eb:bd:66:5b:9c:6b:0f:cb:1c:00:76:4b:f7:52:53:5d:45:e3:
         95:28:a8:9d:83:5f:8e:23:71:06:7b:22:ff:09:0a:31:47:c5:
         61:bc:7b:fe:19:7d:99:c8:d8:60:50:7f:fc:4e:5c:76:d0:39:
         c1:d3:47:08:c2:3c:e5:b3:23:14:91:7f:02:d5:3a:f1:dd:50:
         c8:e0:86:95:7a:0a:40:f5:b6:e9:b0:7d:4f:76:f5:da:5e:e0:
         d9:3f:32:f7:94:1e:d9:1b:75:ac:ac:79:b8:40:2a:06:b1:be:
         2e:ca:59:bb:ad:f3:e4:3f:2e:39:1c:0b:d4:bc:70:d8:19:88:
         b6:c1:7a:fb:44:31:11:e3:4f:1e:a5:a0:0d:fe:84:01:8a:25:
         86:bb:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:57:54 2026 by rpki-client