This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/cSeWyBS9AzYXBpViYHa1BylGQ6s.roa
File:                     cSeWyBS9AzYXBpViYHa1BylGQ6s.roa (raw, json)
Hash identifier:          PrBtaBiVH3j3v9lcfh2nnshhHKh443GU9s9mrNx3uY0=
Subject key identifier:   71:27:96:C8:14:BD:03:36:17:06:95:62:60:76:B5:07:29:46:43:AB
Certificate issuer:       /CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
Certificate serial:       019B7F13ACE5A80DB2FF753B5ED4974A7A09
Authority key identifier: D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/cSeWyBS9AzYXBpViYHa1BylGQ6s.roa
Signing time:             Fri 02 Jan 2026 14:19:14 +0000
ROA not before:           Fri 02 Jan 2026 14:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     33993
IP address blocks:        94.131.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:13:ac:e5:a8:0d:b2:ff:75:3b:5e:d4:97:4a:7a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bc52d94e62efa3ebf2cca16f42d2e5607388f0
        Validity
            Not Before: Jan  2 14:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=712796c814bd0336170695626076b507294643ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:83:e7:2d:c6:35:0e:fd:7e:38:1a:15:59:
                    31:ff:03:76:fb:5e:c6:54:c1:94:3b:9b:b5:d0:f7:
                    e0:03:8e:c4:6f:e1:b6:b6:47:6d:a2:08:45:2b:b3:
                    14:64:dc:82:50:40:f3:ce:b8:01:ef:ab:2c:d8:82:
                    fb:e2:0d:59:9f:a6:66:4f:87:ea:0b:34:50:31:45:
                    b1:d8:ca:65:fb:46:83:47:46:d0:d0:59:64:53:9f:
                    9c:86:83:5e:96:40:ed:8d:3f:24:53:21:75:fa:4b:
                    db:7e:71:61:bb:c2:45:2a:6b:a5:d8:30:be:0b:bb:
                    5b:e4:78:0d:15:47:37:92:58:4f:5f:e8:a3:03:ae:
                    f8:c8:48:42:2f:72:9b:83:95:7b:ed:35:2c:ec:07:
                    06:e4:1a:be:df:dd:f5:65:6e:e7:09:2d:ef:06:10:
                    42:bb:fb:dc:4b:8b:95:05:ed:84:a6:c4:9a:28:b6:
                    60:22:d3:a3:df:25:cf:3f:d4:a2:8e:42:a5:d2:c0:
                    66:08:b3:e9:91:79:b9:9a:5a:17:a9:cd:48:27:c7:
                    30:17:b1:01:f8:24:ba:c9:87:b0:60:42:e7:2e:97:
                    63:67:c4:48:e0:5c:39:d3:a6:b6:38:ed:ae:29:de:
                    15:ad:5c:bd:8a:b0:fd:89:c6:c2:aa:f4:70:ea:88:
                    49:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:27:96:C8:14:BD:03:36:17:06:95:62:60:76:B5:07:29:46:43:AB
            X509v3 Authority Key Identifier:
                keyid:D0:BC:52:D9:4E:62:EF:A3:EB:F2:CC:A1:6F:42:D2:E5:60:73:88:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LxS2U5i76Pr8syhb0LS5WBziPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/cSeWyBS9AzYXBpViYHa1BylGQ6s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/30d3cf-9557-4bba-ab42-c26c17563174/1/0LxS2U5i76Pr8syhb0LS5WBziPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.131.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:f7:db:23:a9:ca:e2:b3:92:63:77:39:c9:d9:cc:20:fb:d4:
         a4:a2:5f:cb:57:c2:d2:17:27:f4:54:35:73:74:b7:d8:6f:40:
         c5:83:2d:f7:7b:15:e0:a5:8e:cd:3d:d3:b4:1f:3d:d0:84:fb:
         4f:73:62:e9:e7:a3:20:15:2d:bd:45:30:8f:ee:21:4a:35:47:
         b5:45:65:14:cc:bc:6d:6e:dd:94:fb:7a:f5:d3:3e:57:c7:d7:
         d3:6b:77:de:1a:5a:49:2c:f7:41:10:e0:0f:ae:fa:e7:65:04:
         51:4e:00:ce:53:17:7b:fe:33:46:52:97:52:c9:bd:d2:f0:1d:
         d6:ab:d7:2e:7e:45:0e:3e:fe:2a:03:20:3e:48:5c:56:a6:7e:
         e9:8f:19:a3:03:70:9c:11:18:17:92:6f:68:ea:15:e8:f0:2a:
         cd:a8:de:04:16:e6:3c:eb:c8:47:43:32:22:9d:26:93:95:ef:
         cf:3c:ba:02:d6:75:22:e0:6e:d6:04:eb:3d:16:cb:eb:a1:fb:
         b8:a9:0a:7b:c5:ff:d9:9e:21:24:79:fb:b1:b4:cc:61:86:2a:
         ae:b5:d5:76:0a:ea:bd:f8:ad:de:5e:65:17:e2:52:a1:35:82:
         24:33:d3:04:bb:23:b2:1e:69:7c:3b:a9:98:21:eb:b3:7a:ac:
         32:e0:76:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:30:06 2026 by rpki-client