This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/xedQc8k1ZNFjpdsXA6TYOm-QwAo.roa
File:                     xedQc8k1ZNFjpdsXA6TYOm-QwAo.roa (raw, json)
Hash identifier:          4/kRGVQh8aCzWxXk3+Kdjd95nYFMZaC5eRjEmyP9N4U=
Subject key identifier:   C5:E7:50:73:C9:35:64:D1:63:A5:DB:17:03:A4:D8:3A:6F:90:C0:0A
Certificate issuer:       /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial:       019B76EB3489EAAE3EE090B012FCB5F98847
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/xedQc8k1ZNFjpdsXA6TYOm-QwAo.roa
Signing time:             Thu 01 Jan 2026 00:18:04 +0000
ROA not before:           Thu 01 Jan 2026 00:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200723
IP address blocks:        217.26.219.0/24 maxlen: 24
                          2a13:4a40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:34:89:ea:ae:3e:e0:90:b0:12:fc:b5:f9:88:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
        Validity
            Not Before: Jan  1 00:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c5e75073c93564d163a5db1703a4d83a6f90c00a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:0d:74:e2:27:b3:98:5a:01:d2:6b:86:33:
                    8d:be:21:92:5b:62:76:d6:3c:77:29:03:51:04:38:
                    36:7f:80:b2:92:fa:96:c2:ee:6e:e5:ed:f5:2a:8c:
                    7d:ee:0b:52:23:ab:3e:08:b6:62:4f:08:8d:28:34:
                    2f:f4:92:80:63:24:a6:16:62:73:54:bc:c6:57:cd:
                    c7:ae:d9:e2:72:83:4e:e6:ed:c0:31:66:b1:fc:67:
                    30:7d:2e:4c:03:79:db:15:95:01:ec:fc:ed:45:f7:
                    1e:49:85:c8:10:2b:90:b9:b7:63:6e:ad:a3:8a:f9:
                    0f:e0:48:c8:d3:c9:fb:b5:40:12:e2:80:76:55:58:
                    de:6f:ea:31:b1:02:fb:a3:19:c2:7e:97:46:cc:56:
                    96:38:2c:af:96:f3:6a:7a:93:c2:63:f0:1a:90:04:
                    11:94:e5:ae:28:88:31:d0:b3:7e:69:05:0a:a6:c3:
                    48:21:20:00:7e:91:77:2f:d0:ee:15:7b:67:f5:07:
                    b4:a3:5e:4f:c1:66:73:9e:6e:0b:56:b7:06:43:a2:
                    13:b5:1f:df:e5:90:94:e3:65:2c:01:86:98:50:db:
                    c4:f3:59:7d:9d:97:9a:d1:e6:09:55:0b:0a:2a:61:
                    1d:e4:8e:3f:4c:a9:0c:89:85:fa:49:6b:4a:43:3b:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E7:50:73:C9:35:64:D1:63:A5:DB:17:03:A4:D8:3A:6F:90:C0:0A
            X509v3 Authority Key Identifier:
                keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/xedQc8k1ZNFjpdsXA6TYOm-QwAo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.26.219.0/24
                IPv6:
                  2a13:4a40::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:ea:3b:9c:8e:a6:d0:52:c7:8c:6e:07:78:c5:7c:54:fd:8b:
         b4:ca:57:ac:c8:fd:9d:7f:0c:11:5d:66:c2:f9:46:66:6c:88:
         2e:f0:00:5f:e2:82:a0:45:c5:98:d4:57:62:66:0c:85:da:1a:
         f8:ca:04:05:0f:b4:3a:60:9c:1c:60:4d:24:dc:2e:4c:5a:11:
         80:6d:8d:40:b8:18:cd:4a:c6:9d:86:6f:80:cb:4f:20:eb:79:
         ab:0b:7c:13:8f:54:4a:48:d1:59:1a:d8:ac:43:45:d5:da:2e:
         7a:8b:aa:2d:b5:95:96:02:a7:e6:68:2c:ef:88:59:75:90:b4:
         1e:19:78:48:f4:25:c8:4d:1f:46:27:37:03:a9:5f:53:bd:34:
         92:bb:2d:52:89:48:5b:1e:c6:f6:0d:33:5d:24:be:c3:11:0a:
         7a:94:1e:95:7f:4e:06:73:e0:ef:21:bd:45:24:77:35:88:ba:
         87:a2:87:e2:61:ed:97:3b:0d:cc:71:e8:df:4c:46:54:27:ca:
         01:13:ae:87:ca:4e:70:b0:c5:9d:a2:14:3e:31:50:ce:6d:22:
         44:9d:f1:dc:77:3a:86:f6:76:1b:84:5b:52:9f:7e:ea:00:20:
         d7:5e:25:5b:51:bd:9c:8b:00:ec:0d:2c:d7:4b:bb:de:5b:f3:
         60:13:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:31 2026 by rpki-client