This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/nCVjTQL_SSrsbw0G75uo5yZ-_v8.roa
File:                     nCVjTQL_SSrsbw0G75uo5yZ-_v8.roa (raw, json)
Hash identifier:          +GwSabbywoLmkIXJSWeaDqfIdmp99ZheKDOIGajjMZE=
Subject key identifier:   9C:25:63:4D:02:FF:49:2A:EC:6F:0D:06:EF:9B:A8:E7:26:7E:FE:FF
Certificate issuer:       /CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
Certificate serial:       019B78A37CE5998AE1761368DF11189851C8
Authority key identifier: 09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/nCVjTQL_SSrsbw0G75uo5yZ-_v8.roa
Signing time:             Thu 01 Jan 2026 08:18:58 +0000
ROA not before:           Thu 01 Jan 2026 08:18:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34412
IP address blocks:        193.37.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:7c:e5:99:8a:e1:76:13:68:df:11:18:98:51:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093ad08ad73c2ac438ac69816381e7aa3e86579a
        Validity
            Not Before: Jan  1 08:18:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9c25634d02ff492aec6f0d06ef9ba8e7267efeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:63:13:a0:48:55:85:37:17:3d:4d:3f:c9:
                    66:7d:98:b4:ee:a9:f1:15:5e:6b:ea:41:b8:53:f4:
                    f2:be:92:9a:a4:31:53:1e:d7:54:d8:fa:1f:62:4d:
                    22:a8:34:0f:cd:86:e1:29:06:b0:bb:21:20:a5:01:
                    cf:3e:a4:73:b8:27:30:f8:cc:ac:dd:9b:29:86:44:
                    60:39:0c:8b:4e:3c:86:d9:93:e2:1e:ff:42:0f:2f:
                    14:71:5e:6d:2d:e5:8a:f1:e1:43:4b:1a:16:ad:fd:
                    e0:2e:88:92:e7:a9:03:71:41:a5:44:5d:89:48:15:
                    29:af:20:f4:aa:be:f5:37:f5:4f:0c:88:3a:53:fa:
                    3b:31:5b:72:06:33:25:da:51:79:75:6b:4a:28:01:
                    aa:63:f6:fe:e7:3f:14:06:9d:40:aa:61:8c:4f:2d:
                    6e:92:1e:b0:7a:0b:41:00:ad:ce:5f:d6:e5:e9:87:
                    94:57:40:08:21:43:19:14:09:be:1e:96:69:78:c3:
                    fb:65:b4:8b:50:a5:c6:5e:7d:49:7b:82:4c:8c:2a:
                    4f:c6:07:e0:02:b9:e0:10:52:47:6f:24:3b:23:f2:
                    fb:6f:9b:a4:11:58:80:fd:52:66:a6:7c:2f:e3:29:
                    87:03:0c:c2:4e:4b:7c:d0:a7:68:b0:f3:e5:34:38:
                    07:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:25:63:4D:02:FF:49:2A:EC:6F:0D:06:EF:9B:A8:E7:26:7E:FE:FF
            X509v3 Authority Key Identifier:
                keyid:09:3A:D0:8A:D7:3C:2A:C4:38:AC:69:81:63:81:E7:AA:3E:86:57:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/nCVjTQL_SSrsbw0G75uo5yZ-_v8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/095985-d0dc-4d41-98eb-41aa475d15b8/1/CTrQitc8KsQ4rGmBY4Hnqj6GV5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:1a:ea:27:7a:e9:b3:e9:c4:18:6b:34:d8:13:e5:5b:e4:24:
         46:56:49:8e:b0:6e:0c:4d:e6:39:36:35:8c:35:35:f4:28:0a:
         d4:6f:bd:ba:c8:43:fa:70:1c:d9:27:b0:38:0b:04:a1:a2:19:
         51:94:5a:e7:d3:3d:3d:5f:6b:0e:03:5a:0b:33:24:c1:ff:29:
         48:17:ab:cb:4b:74:0d:18:5c:98:42:63:8f:a1:a7:cb:b6:a6:
         bd:3e:b1:d0:40:8d:d3:e4:0a:05:5e:ad:17:7c:ad:75:2b:07:
         6e:f1:31:b8:16:d6:5d:a4:52:6e:7a:71:e2:a7:9d:3c:02:f0:
         23:61:e4:9c:cd:34:ec:84:a5:f1:3b:a2:48:fc:54:b4:bf:87:
         02:b3:d1:59:61:61:c4:eb:c0:65:c8:86:b5:7f:45:43:4e:15:
         6f:0c:3d:d6:ed:37:39:34:68:ec:24:b5:8d:4f:51:ef:94:49:
         1e:20:a6:5c:e0:4a:1a:41:8c:68:7a:f7:07:11:9b:d5:6a:3e:
         7f:69:18:25:6d:5b:83:71:0c:75:12:d2:a5:3a:7f:9e:57:1e:
         e8:18:e6:cb:1c:72:81:00:8a:d4:2e:20:53:f5:ec:74:85:8b:
         01:33:6c:b6:b6:2e:25:6e:12:f8:8f:2b:ca:6f:7a:f0:e9:bd:
         d9:7e:a0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:17 2026 by rpki-client