This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_K0X2QivGJZfhEOZSOJRsLA2TiM.roa
File:                     _K0X2QivGJZfhEOZSOJRsLA2TiM.roa (raw, json)
Hash identifier:          9IzhQB7Ka+c30huFOU8dnjrsR0JnkvGNHQTxwfn45Ao=
Subject key identifier:   FC:AD:17:D9:08:AF:18:96:5F:84:43:99:48:E2:51:B0:B0:36:4E:23
Certificate issuer:       /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial:       019B7DCB74C3B80E80561A88208C3F7B6142
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_K0X2QivGJZfhEOZSOJRsLA2TiM.roa
Signing time:             Fri 02 Jan 2026 08:20:44 +0000
ROA not before:           Fri 02 Jan 2026 08:20:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62300
IP address blocks:        213.166.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:74:c3:b8:0e:80:56:1a:88:20:8c:3f:7b:61:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
        Validity
            Not Before: Jan  2 08:20:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fcad17d908af18965f84439948e251b0b0364e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:7b:88:e5:a7:69:e8:26:b3:94:c5:31:52:
                    54:90:81:9c:2e:d6:c6:b1:50:13:2f:e6:26:9f:6f:
                    dd:20:63:eb:d1:b9:a1:95:4f:46:0a:6e:e1:c6:00:
                    18:87:68:19:b3:68:44:3e:03:76:67:1d:da:5c:d9:
                    74:69:f8:52:d1:2f:d6:36:6d:44:80:fc:21:15:62:
                    ca:30:84:5b:0e:6f:50:69:b0:44:4b:03:93:6e:4f:
                    f1:a4:10:fe:5a:7b:28:df:22:c1:23:a1:74:1c:4f:
                    4d:67:b2:6a:ee:3b:90:9c:a2:18:42:1e:d7:8e:af:
                    25:cb:07:43:e5:1d:ab:b1:7a:d7:40:de:b0:e5:e6:
                    63:10:cb:6c:b2:bc:58:42:57:1e:66:fb:ab:33:ca:
                    f1:ab:b7:14:17:98:c2:44:95:05:29:89:06:41:a4:
                    3a:56:da:9c:00:cd:b1:b1:27:cc:c4:f0:7d:34:67:
                    13:3c:7f:11:39:4a:47:01:4e:92:3b:a3:d4:3c:fb:
                    fa:86:e2:ca:26:ea:53:70:13:42:f6:cf:3c:c7:ec:
                    14:fd:2c:86:b5:9d:a8:1d:15:7b:1a:98:f0:50:3f:
                    35:f1:8a:34:34:97:43:f9:b4:7c:78:8b:df:96:84:
                    fb:3a:71:a9:b5:0a:22:4b:0a:e3:9a:fd:b8:14:0f:
                    e8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AD:17:D9:08:AF:18:96:5F:84:43:99:48:E2:51:B0:B0:36:4E:23
            X509v3 Authority Key Identifier:
                keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_K0X2QivGJZfhEOZSOJRsLA2TiM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.166.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:22:5d:81:1d:fd:cf:91:ca:d6:2f:78:75:59:11:b3:50:87:
         d3:12:03:28:05:f3:30:01:b4:3d:1d:6e:ab:f9:1d:d2:9c:b1:
         a5:fd:9d:9b:e3:cf:08:78:1e:f8:8b:e8:55:c5:a4:71:c6:3c:
         39:0e:68:87:a9:14:05:fa:41:c8:c3:b3:6b:36:72:8e:71:81:
         0c:33:93:a7:b0:e6:21:36:ed:42:fa:31:07:ec:80:57:0e:89:
         07:53:3a:ed:f3:df:60:91:c7:f4:86:5a:43:d8:ae:38:9b:26:
         70:ba:3c:b9:ee:81:77:90:8f:1a:87:f8:53:2f:b7:41:9d:25:
         d7:16:69:4f:ca:9d:6c:b6:f1:7f:80:c4:63:e7:05:4e:20:45:
         55:c3:47:73:a8:b9:36:5c:c5:47:b4:da:9d:50:a3:2a:45:17:
         79:db:87:1c:a4:1b:31:77:5e:69:3a:fe:46:d0:6a:5f:8f:ef:
         8a:5e:ac:1a:05:3a:56:ca:50:c5:88:06:4c:55:a1:c9:28:cf:
         1c:2e:b4:9d:46:c6:59:24:a8:d7:23:1c:59:a5:e8:75:41:03:
         d6:04:cc:a9:5b:1c:89:4b:99:59:53:da:d9:d2:cd:44:77:7b:
         d3:28:5c:36:ca:28:e0:eb:24:3b:78:de:01:e4:fd:0b:a9:d6:
         27:19:4a:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9y3TDuA6AVhqIIIw/e2FCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwMTAyMDgyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2FkMTdkOTA4YWYxODk2NWY4NDQzOTk0OGUyNTFiMGIwMzY0ZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4V7iOWnaegms5TFMVJUkIGcLtbG
sVATL+Ymn2/dIGPr0bmhlU9GCm7hxgAYh2gZs2hEPgN2Zx3aXNl0afhS0S/WNm1E
gPwhFWLKMIRbDm9QabBESwOTbk/xpBD+Wnso3yLBI6F0HE9NZ7Jq7juQnKIYQh7X
jq8lywdD5R2rsXrXQN6w5eZjEMtssrxYQlceZvurM8rxq7cUF5jCRJUFKYkGQaQ6
VtqcAM2xsSfMxPB9NGcTPH8ROUpHAU6SO6PUPPv6huLKJupTcBNC9s88x+wU/SyG
tZ2oHRV7GpjwUD818Yo0NJdD+bR8eIvfloT7OnGptQoiSwrjmv24FA/ouwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPytF9kIrxiWX4RDmUjiUbCwNk4jMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvX0swWDJRaXZHSlpmaEVPWlNPSlJzTEEyVGlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1aZdMA0G
CSqGSIb3DQEBCwUAA4IBAQB0Il2BHf3PkcrWL3h1WRGzUIfTEgMoBfMwAbQ9HW6r
+R3SnLGl/Z2b488IeB74i+hVxaRxxjw5DmiHqRQF+kHIw7NrNnKOcYEMM5OnsOYh
Nu1C+jEH7IBXDokHUzrt899gkcf0hlpD2K44myZwujy57oF3kI8ah/hTL7dBnSXX
FmlPyp1stvF/gMRj5wVOIEVVw0dzqLk2XMVHtNqdUKMqRRd524ccpBsxd15pOv5G
0Gpfj++KXqwaBTpWylDFiAZMVaHJKM8cLrSdRsZZJKjXIxxZpeh1QQPWBMypWxyJ
S5lZU9rZ0s1Ed3vTKFw2yijg6yQ7eN4B5P0LqdYnGUrR
-----END CERTIFICATE-----
Generated at Tue Jan 20 02:45:00 2026 by rpki-client