This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/A16F9NsEyUOAtSY1zXDtoFPyOvI.roa
File:                     A16F9NsEyUOAtSY1zXDtoFPyOvI.roa (raw, json)
Hash identifier:          jjt60ulArhgQ6L6QMOP8j3tqRiV3ooxzVNi5fS2TRAM=
Subject key identifier:   03:5E:85:F4:DB:04:C9:43:80:B5:26:35:CD:70:ED:A0:53:F2:3A:F2
Certificate issuer:       /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial:       019B7D5B99C406AED50DAEC50B8FC5893E04
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/A16F9NsEyUOAtSY1zXDtoFPyOvI.roa
Signing time:             Fri 02 Jan 2026 06:18:33 +0000
ROA not before:           Fri 02 Jan 2026 06:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        193.9.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:99:c4:06:ae:d5:0d:ae:c5:0b:8f:c5:89:3e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
        Validity
            Not Before: Jan  2 06:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=035e85f4db04c94380b52635cd70eda053f23af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:be:1b:5c:5e:8e:42:b8:e3:5f:96:e0:5d:12:
                    0d:1c:e3:87:c7:95:81:6c:bf:52:13:55:53:30:8e:
                    ce:ec:04:fc:29:91:02:bb:e2:fb:b5:53:fe:7f:66:
                    9d:12:e7:72:ff:96:8e:fd:52:1e:6d:74:7b:89:ed:
                    5c:73:05:6c:c5:f0:00:f6:23:7d:b3:7d:01:94:a3:
                    80:74:73:c7:c8:b3:b7:d7:fc:33:a4:27:6c:03:24:
                    f5:e4:a6:60:1a:58:48:29:ac:ea:1d:0f:3e:1d:98:
                    18:88:e7:15:46:20:c3:a6:6c:39:7d:c8:74:fe:d1:
                    32:31:33:9d:68:6c:1c:ff:3f:fb:57:e0:2a:1f:90:
                    43:ce:5a:e6:3c:35:ac:68:aa:3f:11:13:a6:59:99:
                    85:ef:94:ed:b9:bf:8f:d7:6c:5d:dc:8d:d0:c6:d0:
                    88:9f:e9:28:c9:b6:f8:b4:17:a5:74:16:d5:51:ae:
                    2e:25:28:dd:43:bf:2f:63:bc:c4:9d:44:9c:75:1a:
                    a9:03:45:93:1c:51:39:01:ce:82:a1:68:aa:88:a4:
                    42:29:a3:a8:c4:05:d1:47:4c:33:5b:b4:46:8e:60:
                    e0:69:ed:f5:0d:d1:84:86:03:25:a6:4e:71:e1:39:
                    78:16:96:f3:cc:1c:11:37:e8:4b:32:cf:d9:b8:e3:
                    22:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5E:85:F4:DB:04:C9:43:80:B5:26:35:CD:70:ED:A0:53:F2:3A:F2
            X509v3 Authority Key Identifier:
                keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/A16F9NsEyUOAtSY1zXDtoFPyOvI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.9.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:be:56:99:55:73:22:4d:c1:76:89:f3:55:96:11:49:27:01:
         b5:f0:32:9f:29:f9:a9:20:9f:c6:54:e9:c2:39:07:32:a4:89:
         73:c5:46:0c:15:d1:14:81:b2:91:8f:9d:3b:a3:02:3c:14:dd:
         f9:54:8a:c3:c6:15:c7:a9:07:c3:af:b0:5a:d2:05:b4:a0:e1:
         99:71:f8:73:a7:af:48:a0:b2:00:4e:9c:26:99:28:bf:d1:ff:
         e0:be:65:48:8c:44:89:6a:7d:a1:7b:1a:67:58:1d:3d:bf:ea:
         fd:31:a0:61:45:ab:ad:ef:d2:b2:3c:a4:02:34:62:a4:c1:63:
         f2:0c:9c:22:5b:42:70:4d:2b:ca:b1:ca:33:4f:00:9f:ac:a9:
         2c:68:d2:01:5f:06:c1:c7:9c:fc:64:56:c7:09:39:3d:ce:56:
         fd:10:26:fb:a4:9c:fc:3b:ea:f3:7f:47:45:84:00:3b:98:3c:
         62:7e:13:c4:fe:32:a4:38:dd:9d:ad:a9:0e:ba:a0:29:97:41:
         24:95:e6:bc:dd:9e:f2:d1:2a:6b:47:b9:15:cb:2d:7f:7c:27:
         04:0c:70:62:ef:56:8e:ff:ad:7c:bd:80:08:d5:db:eb:01:93:
         59:e8:2b:02:47:1b:b6:d2:32:41:1d:6c:6b:5b:48:b4:17:7a:
         c3:1e:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:32 2026 by rpki-client