This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/iG53FLKNGEtI7O_-qbJCuOHpkfY.roa
File:                     iG53FLKNGEtI7O_-qbJCuOHpkfY.roa (raw, json)
Hash identifier:          btGtfmg9m2lBCFlLyRHCIrg7YepxRxneqBtZfQH7n/k=
Subject key identifier:   88:6E:77:14:B2:8D:18:4B:48:EC:EF:FE:A9:B2:42:B8:E1:E9:91:F6
Certificate issuer:       /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial:       019B7C7F0EB30FF5CFD36F70A9F8C6DB4C6F
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/iG53FLKNGEtI7O_-qbJCuOHpkfY.roa
Signing time:             Fri 02 Jan 2026 02:17:40 +0000
ROA not before:           Fri 02 Jan 2026 02:17:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13154
IP address blocks:        193.105.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:0e:b3:0f:f5:cf:d3:6f:70:a9:f8:c6:db:4c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
        Validity
            Not Before: Jan  2 02:17:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=886e7714b28d184b48eceffea9b242b8e1e991f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b6:10:73:d4:39:45:f2:53:89:b7:6e:85:4b:
                    25:ed:2c:99:c7:60:56:ad:d0:e8:50:0f:ff:e3:b2:
                    e2:d0:55:15:74:01:0c:4b:3b:15:97:cb:15:d7:bd:
                    72:14:dd:14:49:ea:74:cc:da:31:5e:73:b0:13:fe:
                    af:4c:60:e8:43:3f:8a:3f:da:92:ff:b2:3c:90:0c:
                    3e:4e:3f:c2:07:cb:3a:db:aa:6d:8a:8e:ca:03:b5:
                    f4:41:2b:1c:3b:3a:1b:84:01:5b:1d:23:01:5d:19:
                    15:df:9e:11:ca:9e:ac:c9:62:8e:78:fc:b4:00:68:
                    77:7a:8b:d6:4d:82:3e:6d:59:9f:20:03:f9:a4:49:
                    3a:2a:47:4d:fd:74:4f:89:9d:15:3e:6d:e5:b3:43:
                    5f:59:aa:47:42:47:31:7c:98:db:a0:56:60:e6:77:
                    4c:6f:a1:e6:cc:bc:2d:c1:9e:63:90:06:d1:c0:41:
                    6c:09:b3:93:98:4b:a8:b1:a4:74:f3:d2:dc:a5:2a:
                    dc:8b:38:c0:c8:db:8e:bd:53:c3:cb:ed:ad:c8:58:
                    e5:55:93:22:d0:f1:24:b4:00:94:14:f9:22:6b:fb:
                    a9:67:92:3b:8d:09:88:8a:ec:5f:93:79:dd:36:4b:
                    90:b6:33:30:49:98:49:ff:d8:39:2a:eb:90:80:70:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6E:77:14:B2:8D:18:4B:48:EC:EF:FE:A9:B2:42:B8:E1:E9:91:F6
            X509v3 Authority Key Identifier:
                keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/iG53FLKNGEtI7O_-qbJCuOHpkfY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:24:cb:b8:44:ee:f5:80:ad:f0:55:dd:0c:be:5e:24:e7:04:
         21:ac:87:ba:2f:44:6e:e9:98:c0:07:58:5b:e2:3d:75:bb:14:
         3e:4d:9f:b3:76:81:b0:74:d7:3b:16:57:b2:36:d3:23:b6:69:
         b1:49:d7:8a:a3:d0:87:c3:d3:2a:73:ea:d9:a2:e0:da:1b:6f:
         87:86:62:d1:57:c2:79:30:54:d7:e4:ec:d2:fb:4f:e8:f0:b3:
         af:79:ab:37:9c:16:9e:11:72:55:80:aa:78:fa:35:a4:2e:e8:
         6b:70:75:b6:d1:26:f2:ca:91:c8:2a:73:39:9c:d7:d8:ae:82:
         8d:ff:b9:06:04:57:23:d6:1e:9e:bf:9a:5a:92:a5:1f:7e:fc:
         64:1e:e7:c4:68:8d:ea:67:6d:5d:23:36:44:e8:c0:45:18:2b:
         d4:bd:d2:ac:7c:92:5b:42:5f:67:c2:ea:76:54:31:70:5c:9f:
         ff:eb:ea:04:94:8f:1b:9d:4b:70:f8:c8:af:5e:ca:f9:cb:ab:
         a3:89:dd:fa:a9:01:0c:eb:b5:64:95:ee:c3:f1:19:9b:ea:0c:
         13:ae:40:6e:83:41:03:d9:72:e0:3d:7b:29:46:dd:cb:48:de:
         18:8b:3e:a1:1d:b2:dd:72:b7:c7:c5:ee:8c:73:a8:28:19:45:
         9f:89:1e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:48 2026 by rpki-client