This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/IXySvGWwyIxI8nEtVddBkpUSzNs.roa
File:                     IXySvGWwyIxI8nEtVddBkpUSzNs.roa (raw, json)
Hash identifier:          PeXAtaHvOlNgD7t5U7ac8b5w1Raf72aXS6L9wTOS/m0=
Subject key identifier:   21:7C:92:BC:65:B0:C8:8C:48:F2:71:2D:55:D7:41:92:95:12:CC:DB
Certificate issuer:       /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial:       019B7B361D9C075902A91C81EEF20E244B42
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/IXySvGWwyIxI8nEtVddBkpUSzNs.roa
Signing time:             Thu 01 Jan 2026 20:18:22 +0000
ROA not before:           Thu 01 Jan 2026 20:18:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47174
IP address blocks:        195.216.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:1d:9c:07:59:02:a9:1c:81:ee:f2:0e:24:4b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
        Validity
            Not Before: Jan  1 20:18:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=217c92bc65b0c88c48f2712d55d741929512ccdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:f6:07:19:07:26:b0:af:49:52:3b:6c:fb:
                    7a:a0:58:aa:08:3c:f2:52:50:03:b8:a3:2c:89:94:
                    a7:e2:51:e2:34:24:66:be:d9:57:e8:5f:5d:4b:f0:
                    af:3f:a5:88:91:78:73:ba:5a:b3:dd:8b:09:25:06:
                    09:ab:05:bb:dd:31:6d:25:fa:51:d4:ce:62:5e:48:
                    08:a5:b9:10:3c:27:e8:fc:30:40:13:bf:3f:e1:59:
                    25:b2:d3:59:9a:6c:cf:f6:25:78:32:11:17:cf:39:
                    0f:34:6c:85:b9:8f:d6:e9:f9:1c:af:6b:b9:62:fe:
                    f1:c1:95:b7:2f:40:e0:2f:e4:3c:b4:c8:a8:77:f0:
                    2f:87:e3:8f:02:a0:f5:b4:05:5e:40:97:4f:f5:b3:
                    06:40:80:e2:f8:c7:f5:39:9e:45:0b:09:4b:5c:0d:
                    cf:6a:4c:fe:cc:7f:ee:e3:48:fb:e1:29:18:90:3c:
                    d5:00:df:48:aa:75:b0:fc:cb:2c:b3:f2:06:0d:4f:
                    0c:47:c3:f1:a6:0a:9d:6c:f6:b9:93:c2:27:6e:23:
                    1b:5a:7f:6c:15:b2:bd:61:56:1c:35:08:c4:dc:77:
                    06:dd:6d:91:27:ea:a2:14:92:4f:f9:ad:41:ad:05:
                    3c:d8:df:d3:53:32:5e:d5:c9:85:cd:7c:66:ef:5f:
                    c5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7C:92:BC:65:B0:C8:8C:48:F2:71:2D:55:D7:41:92:95:12:CC:DB
            X509v3 Authority Key Identifier:
                keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/IXySvGWwyIxI8nEtVddBkpUSzNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.216.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:75:37:d6:c1:1e:77:82:43:cc:ac:50:0e:e0:31:04:65:fd:
         6f:6b:58:e9:d4:c9:1d:19:fa:9e:ec:3e:5d:01:a4:92:b0:92:
         0d:44:23:39:55:e5:dc:e3:32:3f:23:cd:a0:f6:3d:58:b3:79:
         62:6d:37:7c:53:07:7b:78:a3:bf:15:bd:c0:a8:ab:73:d7:5f:
         fa:78:44:86:2a:62:f7:ba:03:67:8e:a3:2d:cd:20:d1:c3:35:
         6d:3a:ff:92:1d:f1:53:b0:6c:5e:f2:80:60:b6:d7:d1:f2:d7:
         2a:98:d4:4d:8c:04:4d:d4:7d:a6:ce:1f:d6:dd:a3:85:10:50:
         25:7f:58:a2:05:20:9c:1d:c5:bb:48:ab:a9:a4:6c:76:3d:1a:
         fb:3f:aa:3c:35:a4:3c:d8:f2:d7:91:e5:9f:9b:0e:e0:78:8a:
         8d:76:55:6d:72:79:78:3f:40:88:3f:39:b4:a4:e1:6c:29:3f:
         9b:c9:44:b4:40:0e:87:a8:6b:9b:39:a0:90:3c:e6:14:5e:44:
         72:c2:d5:87:e8:38:a9:a1:3d:0c:66:6a:25:88:ee:1a:bc:f4:
         f3:af:c9:79:af:02:d1:0d:6e:03:7d:ad:de:b8:3c:26:91:0b:
         67:c7:27:86:43:a7:52:2b:58:be:78:16:de:70:29:31:ce:89:
         32:cc:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:09 2026 by rpki-client