This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/9qb9fQCKg075SKfxBk1ix_qAPeY.roa
File:                     9qb9fQCKg075SKfxBk1ix_qAPeY.roa (raw, json)
Hash identifier:          ksD7YfRBrI5VHGB6nC1MvxiuAu5qzLmqZW/7QEYBNgo=
Subject key identifier:   F6:A6:FD:7D:00:8A:83:4E:F9:48:A7:F1:06:4D:62:C7:FA:80:3D:E6
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019B7C132129F82DC432B3184D6D58059888
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/9qb9fQCKg075SKfxBk1ix_qAPeY.roa
Signing time:             Fri 02 Jan 2026 00:19:46 +0000
ROA not before:           Fri 02 Jan 2026 00:19:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31479
IP address blocks:        49.0.184.0/21 maxlen: 21
                          80.66.116.0/24 maxlen: 24
                          94.198.46.0/24 maxlen: 24
                          178.19.32.0/24 maxlen: 24
                          178.19.33.0/24 maxlen: 24
                          185.28.48.0/23 maxlen: 23
                          201.77.58.0/24 maxlen: 24
                          2001:4030::/32 maxlen: 32
                          2001:4030:16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:21:29:f8:2d:c4:32:b3:18:4d:6d:58:05:98:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  2 00:19:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f6a6fd7d008a834ef948a7f1064d62c7fa803de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:91:22:83:40:82:4d:f4:a7:62:6a:e1:b3:
                    57:48:b7:e9:a0:e6:84:79:65:f4:ea:fd:82:27:3e:
                    c0:43:c2:b1:a7:78:31:4e:67:8e:e9:34:9a:50:68:
                    34:ff:01:b8:98:54:e2:aa:dd:43:c3:f8:eb:95:f1:
                    16:cb:b5:8b:50:08:7c:44:ce:1c:32:e4:f0:15:7a:
                    d3:89:5b:56:8c:e1:fe:90:c4:07:dd:b6:57:79:a8:
                    a1:6c:e8:ac:69:47:be:fb:2c:88:01:f8:d1:37:11:
                    8d:81:67:41:fa:2d:e3:69:d1:48:18:23:d9:cf:a0:
                    f8:ee:21:d3:8c:ba:23:af:18:07:82:52:65:fd:c1:
                    75:e8:94:df:18:c8:ee:4a:e1:d0:0f:11:81:22:8f:
                    e8:c8:e1:56:a1:44:4f:b9:fd:09:45:ad:4e:ba:04:
                    6b:41:47:9e:21:7e:90:7c:60:19:6e:44:a3:be:56:
                    6d:67:47:18:c6:71:ef:13:fc:08:7f:ec:60:1f:37:
                    3b:e4:1c:b4:e7:62:df:ef:90:25:c5:a7:f8:9b:51:
                    a7:9d:b6:50:46:28:e4:31:9a:9f:49:e0:58:54:dc:
                    c4:7a:e0:4d:f4:9a:48:09:14:9b:1d:62:e6:be:1c:
                    50:8c:13:2d:0a:fc:00:e1:2a:1b:2d:0f:3e:9a:c0:
                    24:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A6:FD:7D:00:8A:83:4E:F9:48:A7:F1:06:4D:62:C7:FA:80:3D:E6
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/9qb9fQCKg075SKfxBk1ix_qAPeY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.0.184.0/21
                  80.66.116.0/24
                  94.198.46.0/24
                  178.19.32.0/23
                  185.28.48.0/23
                  201.77.58.0/24
                IPv6:
                  2001:4030::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:05:99:6b:85:22:be:ec:72:31:4b:db:20:e2:1c:96:b4:d5:
         65:27:a5:24:df:22:95:7d:9e:88:20:6d:c8:f4:c8:c4:26:37:
         28:bd:3a:63:3e:3c:1b:be:75:9e:de:fe:c3:c0:e5:d0:95:1e:
         17:9f:d7:b9:b9:ff:74:37:78:58:64:b7:e0:ce:99:ec:d9:d8:
         17:be:92:3c:a3:77:66:ed:4c:8a:89:7b:7c:6d:9b:85:9e:36:
         f9:5b:03:a2:b8:0a:5e:95:4e:c1:5a:bc:62:9a:8c:87:ad:65:
         63:07:21:f9:10:1a:70:ff:9a:98:14:b4:70:eb:86:8c:42:9e:
         70:7f:a5:e5:64:11:2e:42:5f:be:6b:2d:17:4c:37:5a:1b:e0:
         1b:5d:d5:bb:f6:e9:14:1f:2b:89:7c:9d:50:5d:94:91:8d:58:
         11:1e:9e:4c:64:59:0f:12:b7:3d:7a:c8:1b:3b:66:88:4b:be:
         4e:83:37:8d:58:de:46:f0:fe:56:54:a6:94:fe:4d:eb:a1:9d:
         d4:87:a1:e5:e7:10:10:ce:9e:a5:77:2c:51:b7:d7:bf:68:72:
         ee:c8:41:60:d6:ea:1e:74:a9:92:e5:5b:78:d6:55:a1:97:4c:
         4f:28:6f:3b:2d:97:da:9f:bc:c7:cd:97:70:4c:62:34:3f:92:
         ae:7b:31:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:37:10 2026 by rpki-client