This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/9lajBbw2IK54qLhZbAbYrITKq28.roa
File:                     9lajBbw2IK54qLhZbAbYrITKq28.roa (raw, json)
Hash identifier:          JkA5s09Tn9yYkwdqdO7wkc67UWoHU41/FgfHA+wxUHY=
Subject key identifier:   F6:56:A3:05:BC:36:20:AE:78:A8:B8:59:6C:06:D8:AC:84:CA:AB:6F
Certificate issuer:       /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial:       019B7DCB766291D6537891A501EF13A75441
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/9lajBbw2IK54qLhZbAbYrITKq28.roa
Signing time:             Fri 02 Jan 2026 08:20:44 +0000
ROA not before:           Fri 02 Jan 2026 08:20:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199546
IP address blocks:        193.187.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:76:62:91:d6:53:78:91:a5:01:ef:13:a7:54:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
        Validity
            Not Before: Jan  2 08:20:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f656a305bc3620ae78a8b8596c06d8ac84caab6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:40:54:6e:6b:df:fb:94:b0:e7:67:02:11:
                    e2:fa:65:01:fe:5c:3c:24:bf:4b:b6:b0:39:50:e0:
                    69:08:e4:8a:6e:cc:a1:88:ca:d5:6e:8b:40:18:60:
                    72:7b:d1:8d:88:6b:cc:08:4b:56:10:f9:dd:81:0c:
                    f2:ca:e8:e7:da:bc:6d:3a:a7:c1:e0:82:77:47:df:
                    0e:e9:97:85:cd:63:cf:70:0c:37:df:ad:09:97:ed:
                    52:c3:0d:b9:6a:c7:9b:e8:eb:b8:b5:9e:a9:07:84:
                    1f:32:90:bc:13:7a:7b:4f:a7:37:bf:2a:18:86:5b:
                    bc:94:e0:19:01:25:82:54:ef:77:97:34:b0:a3:9f:
                    c3:e8:c6:a4:32:b7:b4:1d:39:fd:f0:ec:58:8e:7a:
                    1d:84:1c:48:f7:50:ea:c9:cc:77:9d:c1:0f:be:7f:
                    0e:23:40:61:fd:14:23:d6:26:7b:56:fa:5b:6a:58:
                    81:c6:6b:60:47:71:b2:09:2f:c8:cb:9f:8b:64:44:
                    0a:3b:11:90:41:1d:99:ce:2e:b9:20:35:55:90:bf:
                    a6:85:72:db:9d:03:bb:e9:76:38:9e:48:48:30:ee:
                    cd:a3:4f:cc:62:0b:cb:5d:e9:b9:f8:c6:00:75:0f:
                    e9:8f:7f:87:35:30:c6:99:18:c6:88:74:50:78:33:
                    aa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:56:A3:05:BC:36:20:AE:78:A8:B8:59:6C:06:D8:AC:84:CA:AB:6F
            X509v3 Authority Key Identifier:
                keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/9lajBbw2IK54qLhZbAbYrITKq28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:83:5f:95:ac:5f:0d:28:4d:dc:87:2d:9a:57:c5:e9:73:b2:
         13:f9:7f:27:36:6e:0a:c8:fa:66:b2:60:b6:1c:bd:6d:df:50:
         56:c4:18:00:56:eb:c1:05:67:13:6f:8b:7f:21:22:22:f2:00:
         bc:a2:de:a0:7a:90:3a:69:66:3b:03:60:ae:58:1c:40:fd:67:
         80:2b:14:80:21:3a:52:f6:aa:b8:a4:8a:a9:60:b9:dc:72:1c:
         a5:b0:ec:93:55:78:4d:d0:73:42:7d:8a:31:63:0d:aa:4c:70:
         1a:f9:5f:ad:59:ac:ad:52:30:b7:85:f5:6e:df:af:58:95:b2:
         f7:e3:b9:97:49:46:4b:5b:15:d2:c7:cd:77:8e:dc:9a:1d:5f:
         31:0b:69:14:23:a4:61:71:61:1f:e9:a3:b7:0b:a1:dc:2c:77:
         28:20:de:45:35:2b:5f:0e:ef:71:1b:70:03:1f:f4:10:cb:34:
         83:2a:28:20:ec:ee:bf:8e:f1:06:7d:f6:b6:f1:97:b8:4c:8c:
         f9:d3:28:cf:ec:33:b9:20:58:dc:58:3e:4a:a5:3a:7c:83:61:
         e6:b3:c6:78:68:00:7c:52:8f:5b:1b:0b:26:c4:fc:6c:89:56:
         f9:e3:59:a6:aa:5b:51:88:f1:3c:52:a2:da:2c:50:50:ab:42:
         fc:c4:2d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:46:08 2026 by rpki-client