This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/niUV0djy4P_JQW5PwXS4h9UDq3c.roa
File:                     niUV0djy4P_JQW5PwXS4h9UDq3c.roa (raw, json)
Hash identifier:          dUR1gqSul+jZS5ya9pRLXgQp3A3g2Y76zvsEH9Fq7CQ=
Subject key identifier:   9E:25:15:D1:D8:F2:E0:FF:C9:41:6E:4F:C1:74:B8:87:D5:03:AB:77
Certificate issuer:       /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial:       019B7BA38C113BB1B6E45454D1F4991380C7
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/niUV0djy4P_JQW5PwXS4h9UDq3c.roa
Signing time:             Thu 01 Jan 2026 22:17:54 +0000
ROA not before:           Thu 01 Jan 2026 22:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42837
IP address blocks:        193.34.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:8c:11:3b:b1:b6:e4:54:54:d1:f4:99:13:80:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
        Validity
            Not Before: Jan  1 22:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9e2515d1d8f2e0ffc9416e4fc174b887d503ab77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:68:18:fd:b1:de:96:47:40:6c:ed:d0:5c:
                    6f:ac:eb:67:75:47:d0:2e:08:c2:92:30:ce:23:db:
                    af:4a:89:45:89:1d:e6:af:1f:11:27:34:4d:dc:fc:
                    c9:44:6a:07:c3:f3:80:7d:ec:4a:76:cb:e4:3c:77:
                    b2:eb:b3:13:bd:2a:ce:6a:b8:9a:59:84:7e:70:c8:
                    b2:a8:1b:69:59:9a:10:0b:b1:b4:93:a3:d8:fa:dd:
                    80:51:d1:51:58:b9:96:71:88:a5:48:52:27:fb:dd:
                    36:ef:73:f1:dc:99:9a:65:7b:83:59:4d:95:77:8f:
                    ee:ad:76:06:51:f5:0b:a3:95:4c:01:32:08:cc:2a:
                    ea:45:25:40:ba:25:39:9b:d2:e4:1a:cb:a0:76:47:
                    43:bb:02:f2:54:df:73:09:87:61:59:ca:04:0c:56:
                    c3:f6:f8:06:2f:e2:92:9b:e2:20:c0:19:e7:f3:25:
                    16:bb:57:da:1f:1e:14:07:b1:ac:23:89:6c:61:c1:
                    56:79:65:1d:7d:3a:65:ba:ee:b9:47:88:10:c5:2c:
                    5a:a9:d6:87:a0:de:04:6a:d4:60:27:e6:1e:2a:e2:
                    67:bb:89:93:75:c3:87:be:89:9a:06:96:71:3e:eb:
                    40:af:05:53:30:5c:c4:2f:65:4a:6f:cb:4e:a1:82:
                    ec:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:25:15:D1:D8:F2:E0:FF:C9:41:6E:4F:C1:74:B8:87:D5:03:AB:77
            X509v3 Authority Key Identifier:
                keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/niUV0djy4P_JQW5PwXS4h9UDq3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.34.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:21:1d:fa:ef:3e:6a:fd:1e:f3:b4:c7:ac:6c:ca:9b:dc:ed:
         2d:2c:56:c0:35:7d:a8:da:4a:87:c8:af:f1:b8:b9:43:b1:d1:
         e9:32:61:15:a5:6e:0d:01:ca:ba:d0:34:96:6c:73:2d:8e:f1:
         e1:6d:73:b7:0d:d4:48:22:9b:00:5d:16:fe:92:06:88:b7:25:
         4a:0c:6a:7e:1e:89:64:37:c8:25:44:35:bd:94:ba:e6:b3:a9:
         a8:7f:1d:e6:b6:bf:b3:75:e8:c3:1e:58:f6:31:ac:d3:22:c3:
         53:9b:f3:cd:2c:14:e2:5f:cd:f3:47:2b:27:3e:1e:af:68:4c:
         c3:36:00:20:fd:61:24:c6:53:ac:36:4c:8b:ef:08:4a:bd:6f:
         79:e3:82:5e:c1:d8:ea:77:df:d1:49:80:42:f0:a5:f5:79:27:
         cb:25:a1:96:a2:c9:f0:91:20:2d:ea:1f:c7:3b:b0:0e:1a:13:
         ad:c1:56:0a:63:5b:bb:64:72:5e:28:01:b2:76:be:96:ab:d3:
         27:61:d7:df:0a:f4:44:be:80:e4:e3:d6:c8:27:fe:19:a8:a1:
         cd:5d:c4:1a:f5:90:b8:0d:81:d8:56:5c:9e:fe:50:21:6e:fa:
         2e:44:79:4c:da:e9:9e:3c:61:91:33:ed:26:ff:0c:22:83:82:
         72:ac:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:52 2026 by rpki-client