This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9Qcq9ZeiU0VXExdJEzNP4ddAylk.roa
File:                     9Qcq9ZeiU0VXExdJEzNP4ddAylk.roa (raw, json)
Hash identifier:          6VChVrQYoZDdIMy2TB9KCeQ3BcL0ok24Unsn/jp1pnQ=
Subject key identifier:   F5:07:2A:F5:97:A2:53:45:57:13:17:49:13:33:4F:E1:D7:40:CA:59
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B797DF478F6FDA40F6F3839D2F8BF9D6F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9Qcq9ZeiU0VXExdJEzNP4ddAylk.roa
Signing time:             Thu 01 Jan 2026 12:17:36 +0000
ROA not before:           Thu 01 Jan 2026 12:17:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199785
IP address blocks:        93.115.175.0/24 maxlen: 24
                          193.228.139.0/24 maxlen: 24
                          212.192.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:f4:78:f6:fd:a4:0f:6f:38:39:d2:f8:bf:9d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 12:17:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5072af597a253455713174913334fe1d740ca59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:fc:b8:d7:ed:a5:97:25:55:a1:c9:ab:6d:
                    35:b7:7d:88:6a:46:d5:b5:e9:cf:1c:ae:96:62:1f:
                    b7:db:ce:5f:c7:ce:ff:0d:88:bc:79:28:4f:98:a0:
                    a6:ed:23:4f:13:9e:93:1d:1d:3b:a9:1d:32:84:38:
                    16:f5:12:6f:84:a4:c2:eb:b1:7d:92:cf:51:f8:f8:
                    86:87:59:b4:0d:15:5c:c7:30:0e:89:8a:a2:42:36:
                    55:9a:56:b9:d4:62:68:b3:af:ba:a8:3d:d1:e8:58:
                    7b:cd:97:56:00:35:14:38:48:f6:2a:c9:83:49:0c:
                    ef:7a:8b:65:7e:d7:d8:36:bb:49:d9:80:38:40:c4:
                    db:9f:b2:38:50:37:3d:0f:08:6a:48:b7:03:c0:b3:
                    2e:4a:f0:1b:de:92:d3:db:3c:17:cb:27:bc:22:fe:
                    42:27:9c:6e:53:98:cf:f9:ce:3f:c0:60:6d:81:68:
                    c9:87:aa:76:34:ff:75:2a:2e:35:3a:3f:0f:d9:07:
                    f2:ba:66:5d:a5:0e:a3:e1:d6:d5:d6:87:f0:98:43:
                    04:e7:c8:85:ae:34:cb:4e:b3:75:d8:7f:6b:5c:95:
                    04:e3:de:6e:51:16:a1:b4:92:c2:86:2a:86:7b:12:
                    5d:94:90:71:7f:a7:2b:90:80:e7:5a:09:d1:a6:a8:
                    44:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:07:2A:F5:97:A2:53:45:57:13:17:49:13:33:4F:E1:D7:40:CA:59
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9Qcq9ZeiU0VXExdJEzNP4ddAylk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.175.0/24
                  193.228.139.0/24
                  212.192.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ac:a2:7e:ef:c4:cc:cd:b8:90:52:76:1b:67:83:77:5e:d7:
         38:a3:2e:68:bb:f6:e4:6b:62:d6:a5:dd:6c:43:87:f2:b0:6d:
         ef:e5:13:dd:61:01:aa:24:66:b1:fd:93:e5:d5:84:8f:2c:8b:
         3d:5c:71:b1:6a:6f:2e:36:53:a7:67:59:4a:c1:3c:82:70:aa:
         1a:02:64:fb:a5:e1:27:66:79:f4:f1:14:49:37:b3:d5:5c:22:
         81:be:b0:a3:5f:25:66:be:de:72:d3:b2:95:18:42:ab:99:60:
         92:97:aa:bf:fc:0f:54:2b:70:3c:58:70:e4:93:ae:11:0d:42:
         33:c7:5d:a9:bb:ac:39:00:95:b2:7a:98:b0:31:6b:de:b5:dd:
         dc:7a:0e:dd:ba:32:b0:26:a1:80:7c:53:f5:bc:24:3b:56:be:
         ca:98:dc:7a:71:c3:94:60:a1:dd:a3:97:30:cb:58:28:52:6e:
         ac:78:64:98:3c:5c:5a:2a:e3:2f:21:6d:5d:66:b3:72:d3:d6:
         76:af:3b:22:89:43:f8:2c:88:88:a7:87:93:7a:88:76:84:6c:
         d0:e5:8d:2f:2d:60:92:da:87:de:01:2d:b8:dd:e0:5c:ca:be:
         f8:84:b3:3d:22:89:ef:c0:1a:9f:ea:8e:f5:fa:86:39:a1:c7:
         4b:2e:e1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:37:35 2026 by rpki-client