This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/_3UhzExQEW793JDsh27iQiX2gzM.roa
File:                     _3UhzExQEW793JDsh27iQiX2gzM.roa (raw, json)
Hash identifier:          nUWtF1fCDoH/Q/BMxd3xXb0PCP4p5vb9AuqBRhyl6Ic=
Subject key identifier:   FF:75:21:CC:4C:50:11:6E:FD:DC:90:EC:87:6E:E2:42:25:F6:83:33
Certificate issuer:       /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial:       019B7D5C8F2D3EDE00D0129B21AF0630A66E
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/_3UhzExQEW793JDsh27iQiX2gzM.roa
Signing time:             Fri 02 Jan 2026 06:19:36 +0000
ROA not before:           Fri 02 Jan 2026 06:19:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31369
IP address blocks:        193.25.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:8f:2d:3e:de:00:d0:12:9b:21:af:06:30:a6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
        Validity
            Not Before: Jan  2 06:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ff7521cc4c50116efddc90ec876ee24225f68333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:85:73:44:e3:51:a3:63:df:d7:4c:4e:c8:b2:
                    08:09:21:7a:03:46:82:74:b1:52:0a:b3:73:94:3b:
                    c7:68:eb:51:08:0e:19:6d:59:5a:22:a4:07:49:13:
                    eb:10:f2:0e:25:aa:8e:3c:81:00:81:c7:e9:f0:84:
                    98:33:9e:71:4d:eb:64:c9:b2:b8:5c:bb:ec:b6:5e:
                    20:22:a6:79:db:88:e6:73:92:cf:d3:1b:cc:95:0f:
                    1c:42:d9:95:08:00:27:b4:58:df:56:3b:a3:ab:64:
                    10:29:23:0d:03:4e:23:cf:bc:22:16:e3:b8:27:4b:
                    c1:69:59:32:78:cd:6e:f1:ec:65:9b:1c:7e:e1:8b:
                    73:73:30:f0:0f:45:34:3e:07:4f:60:ce:ae:92:91:
                    3c:66:3e:91:e6:67:7d:6a:a4:67:e0:92:46:74:09:
                    84:92:d9:2e:8a:4f:c7:b7:f6:1b:52:7a:f6:48:56:
                    38:29:96:34:d4:ef:85:97:66:fa:c0:9b:b8:6a:c1:
                    4f:3d:d4:66:25:97:48:29:38:f8:9d:ca:3a:b6:42:
                    40:26:de:db:de:1f:ab:99:a4:06:89:35:01:43:84:
                    89:df:d0:1a:39:e8:eb:40:4b:6d:52:53:55:96:55:
                    ed:b7:0e:64:ee:06:7e:16:0e:f3:94:0b:c3:1a:80:
                    13:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:75:21:CC:4C:50:11:6E:FD:DC:90:EC:87:6E:E2:42:25:F6:83:33
            X509v3 Authority Key Identifier:
                keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/_3UhzExQEW793JDsh27iQiX2gzM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.25.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:ca:7b:6a:64:96:2c:7d:61:34:f4:31:70:c9:69:1b:5c:63:
         00:6a:a2:59:8d:a1:52:52:83:b1:13:70:cc:d4:56:57:33:06:
         31:de:37:88:3b:6c:25:f2:81:67:97:0f:60:ef:e1:13:30:7a:
         ea:cf:9e:1f:07:be:e8:2b:a6:ba:6d:eb:9c:e1:07:03:5a:63:
         36:7b:51:e0:9a:50:48:ce:3e:de:d3:77:b2:68:8f:47:c5:31:
         96:92:26:61:07:e9:48:03:6d:83:37:42:e6:62:09:39:1f:74:
         b1:ae:e6:eb:d6:89:7f:ad:dc:61:60:6d:2e:3d:92:ea:c7:c8:
         38:32:d2:f2:7c:da:ae:6d:92:34:5f:12:a0:22:69:25:52:14:
         8a:5f:cf:af:07:c6:cc:73:1c:2c:01:67:1a:51:70:7e:39:51:
         aa:9f:5c:93:d4:05:19:d2:f1:00:91:9f:e2:08:2f:a2:c2:f9:
         40:1f:51:a3:1f:bf:86:ac:a2:51:89:c6:2d:b5:e2:5e:25:1c:
         bf:66:58:96:cf:b6:1e:3b:14:b8:48:63:25:1c:dd:6a:c6:11:
         a8:e0:12:a5:58:88:2f:8c:af:3d:9f:81:cb:19:b4:02:a6:8a:
         a2:42:5b:35:bb:94:98:02:85:aa:f9:ee:9f:77:64:0f:be:e7:
         3d:85:fa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:30:08 2026 by rpki-client