This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/g84cD1l0NIWiAh0qYxQZFWYbDew.roa
File:                     g84cD1l0NIWiAh0qYxQZFWYbDew.roa (raw, json)
Hash identifier:          3YtnarT57s4PMZl4o0PMkx+Dnjlo0jMzpQu5PPXZZnk=
Subject key identifier:   83:CE:1C:0F:59:74:34:85:A2:02:1D:2A:63:14:19:15:66:1B:0D:EC
Certificate issuer:       /CN=2735b19db27d3f2d77d408188453be26b34550ad
Certificate serial:       019B7DC9FFF2E099B9CA07CD4F056CDD2C32
Authority key identifier: 27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/g84cD1l0NIWiAh0qYxQZFWYbDew.roa
Signing time:             Fri 02 Jan 2026 08:19:08 +0000
ROA not before:           Fri 02 Jan 2026 08:19:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212416
IP address blocks:        2001:67c:f18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c9:ff:f2:e0:99:b9:ca:07:cd:4f:05:6c:dd:2c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2735b19db27d3f2d77d408188453be26b34550ad
        Validity
            Not Before: Jan  2 08:19:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=83ce1c0f59743485a2021d2a63141915661b0dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:be:21:28:22:4e:db:da:ac:60:a1:6a:d0:
                    ea:98:b9:30:73:2d:c7:d8:6f:53:9a:0a:ba:a6:d0:
                    68:13:56:dd:ac:d2:21:3a:69:85:d1:7e:65:a3:ab:
                    5b:8a:25:85:65:e2:78:47:58:08:0e:d7:4b:d5:b7:
                    50:87:be:d3:44:1f:c8:84:6b:73:c7:5f:62:cd:84:
                    11:9a:e3:29:a8:8e:16:ee:b9:f3:bd:c0:a1:5d:82:
                    c1:51:c5:5b:5b:60:41:68:57:dd:4a:8a:11:34:1e:
                    68:c2:d7:12:e2:70:a6:30:2e:56:f6:3d:e4:73:34:
                    8d:e9:b2:7d:89:35:e3:c1:07:af:93:86:e1:60:37:
                    d0:fe:a7:bd:bc:d8:ff:2a:48:38:08:9f:88:1b:42:
                    bf:71:00:b2:a4:19:6f:4a:8c:bd:a7:66:01:cb:b0:
                    d4:c4:ee:7b:65:5b:f9:aa:b4:16:ae:43:8f:42:65:
                    06:38:ec:68:19:fe:64:03:d0:55:e5:da:17:a2:82:
                    d7:a1:3a:90:43:bb:bf:b3:2e:84:d1:16:51:65:69:
                    d4:37:10:0b:09:bc:f0:bc:ff:a4:f3:5c:05:dc:57:
                    ae:1f:d1:09:4b:05:9c:ad:c0:50:a0:95:c2:2e:48:
                    45:5b:2f:b4:f8:ba:24:fe:28:21:91:5d:1b:64:16:
                    3f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CE:1C:0F:59:74:34:85:A2:02:1D:2A:63:14:19:15:66:1B:0D:EC
            X509v3 Authority Key Identifier:
                keyid:27:35:B1:9D:B2:7D:3F:2D:77:D4:08:18:84:53:BE:26:B3:45:50:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWxnbJ9Py131AgYhFO-JrNFUK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/g84cD1l0NIWiAh0qYxQZFWYbDew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/00682c-f30e-4945-ad84-c5b0ef4e7bc6/1/JzWxnbJ9Py131AgYhFO-JrNFUK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:f18::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:53:85:6b:0d:fc:e8:e2:ae:40:cf:e4:42:aa:e1:13:01:d5:
         5d:85:d6:32:bc:15:53:7b:72:b0:be:e7:7d:5f:86:eb:32:ff:
         ea:cf:58:8e:91:3e:93:a4:45:73:33:92:ec:c9:59:bb:a5:af:
         a7:87:9e:23:ec:1c:2f:56:91:ba:dc:b9:bd:ac:c1:d7:fe:9f:
         a8:22:7c:79:ae:a1:72:80:3b:93:08:bb:60:48:59:50:b6:78:
         37:61:53:5a:1d:9a:b4:5e:44:17:90:60:91:59:88:29:79:f8:
         c1:af:58:85:57:be:05:d3:5b:65:b8:9a:44:3f:9a:81:38:8d:
         4e:e1:d3:59:b6:b8:58:88:89:34:b8:b0:a5:7a:db:ee:6e:8d:
         87:4b:2a:44:6f:32:fe:14:b1:a8:ff:32:24:f5:61:1e:48:e3:
         72:5d:3e:df:75:e3:8e:db:9e:07:ca:df:c0:a9:02:5e:53:10:
         6f:47:02:2a:d0:d5:13:8f:d7:15:1d:e6:c6:40:2b:b6:23:3f:
         e5:20:52:8d:fd:95:e0:65:11:49:56:01:88:b7:44:14:03:72:
         2b:0a:c8:bf:ff:1a:04:94:d0:09:35:bc:9a:2d:e4:15:52:2f:
         8f:06:87:4c:73:4b:aa:4c:ec:0a:5f:97:a2:ae:03:9a:f2:08:
         65:58:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:59:33 2026 by rpki-client