This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/Y3zEjxsT9LK8bAHKxpRR2-UNW-A.roa
File:                     Y3zEjxsT9LK8bAHKxpRR2-UNW-A.roa (raw, json)
Hash identifier:          gtJSWV6dJGPToJtFvmcUYQb8AcDhxr2Bne8t1GW0tKE=
Subject key identifier:   63:7C:C4:8F:1B:13:F4:B2:BC:6C:01:CA:C6:94:51:DB:E5:0D:5B:E0
Certificate issuer:       /CN=e83a2cce9083e8c15a1d325cf48767559f92b623
Certificate serial:       019B7D5CBDA64BB82C8C9FDEBFF148C58910
Authority key identifier: E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/Y3zEjxsT9LK8bAHKxpRR2-UNW-A.roa
Signing time:             Fri 02 Jan 2026 06:19:48 +0000
ROA not before:           Fri 02 Jan 2026 06:19:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59529
IP address blocks:        176.123.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:bd:a6:4b:b8:2c:8c:9f:de:bf:f1:48:c5:89:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e83a2cce9083e8c15a1d325cf48767559f92b623
        Validity
            Not Before: Jan  2 06:19:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=637cc48f1b13f4b2bc6c01cac69451dbe50d5be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:75:41:7b:81:26:ab:65:b1:22:5b:c1:16:
                    f6:1a:a1:11:7f:ad:76:5b:74:79:66:fb:8f:4a:ad:
                    40:59:64:dd:01:fa:a0:07:e8:8a:19:e3:68:b6:3a:
                    00:0f:ac:ff:3c:c0:86:ef:c3:9a:65:8c:5f:4a:6f:
                    ec:23:dd:4c:f3:a3:2c:42:f8:c8:bc:53:12:79:1d:
                    20:e6:93:99:7c:20:94:5d:90:0d:dd:6a:b0:5b:6e:
                    b7:d0:11:a1:17:ac:ac:e2:9b:d5:a8:11:6b:b4:7a:
                    d6:42:27:00:36:9a:18:bc:6e:92:e4:81:94:1c:02:
                    5c:49:af:b3:e8:15:15:7b:13:96:1b:f7:ad:b2:dc:
                    fc:1d:06:89:c4:ea:84:ba:84:09:29:c3:ee:7a:4f:
                    a3:ad:a8:5d:fa:20:34:a0:09:c3:83:04:63:4d:1e:
                    8c:50:99:90:2b:50:14:d4:bb:1a:be:32:f6:1a:46:
                    86:9f:69:c3:e5:18:4d:f7:4f:44:de:5d:fa:f2:78:
                    99:74:2b:37:7f:f9:72:97:06:13:e0:c8:96:dc:cc:
                    c4:9c:64:e3:e5:b6:8f:5b:b6:56:5c:2d:35:fa:ee:
                    a1:bb:7b:d3:8c:0a:c5:9d:b3:ee:53:20:6a:84:cc:
                    a6:8d:1a:20:9d:e6:4b:b9:73:47:df:4b:4b:39:39:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7C:C4:8F:1B:13:F4:B2:BC:6C:01:CA:C6:94:51:DB:E5:0D:5B:E0
            X509v3 Authority Key Identifier:
                keyid:E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/Y3zEjxsT9LK8bAHKxpRR2-UNW-A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.123.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:7b:d6:1e:5d:6f:3e:1d:e6:57:c5:67:81:02:d1:6b:cf:e5:
         1b:52:98:62:1a:04:d3:eb:9c:68:e3:55:63:e0:e4:f0:e2:a3:
         ce:42:cb:e0:2b:ee:d4:7e:2c:d1:c9:f3:c5:a0:49:aa:c9:aa:
         5c:dd:d2:42:d7:0c:0e:b3:2e:a9:d5:ce:d9:95:5c:55:80:4a:
         03:d3:7d:4b:a1:68:46:a4:8c:d2:af:af:97:ec:26:00:0e:29:
         4c:f9:15:54:fd:a2:a4:c4:11:94:64:28:95:f2:10:7c:9a:6b:
         66:6a:f8:0c:23:d2:8b:28:7c:90:50:54:99:3d:cb:f4:87:2a:
         11:f5:02:c1:bd:1c:a5:64:2f:53:2c:f6:06:2e:c3:8d:5b:1e:
         89:b8:57:2b:c9:ec:4b:90:c2:b2:2b:80:88:fe:83:1d:3b:6d:
         59:46:df:5b:9b:6c:48:ed:47:30:80:00:14:29:52:4b:30:1a:
         33:4f:23:a8:39:ea:55:41:f5:15:b3:a7:9a:e0:98:33:72:36:
         34:24:18:66:e8:b4:1a:d4:85:4b:55:73:87:02:1a:f3:e3:f9:
         3d:77:67:90:4e:94:03:9a:cd:fc:ea:d0:63:16:d0:63:51:05:
         ca:e3:b1:53:2c:b2:40:3c:95:9f:42:61:dd:15:7f:28:e5:2d:
         f3:f8:e0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:12:18 2026 by rpki-client