This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/OFptjkhuAwnfpoG-xdeEpSFSkSk.roa
File:                     OFptjkhuAwnfpoG-xdeEpSFSkSk.roa (raw, json)
Hash identifier:          6I2xymsY2TCct0aRUnTx8wlYXR4RX1DMF26nGce7+SI=
Subject key identifier:   38:5A:6D:8E:48:6E:03:09:DF:A6:81:BE:C5:D7:84:A5:21:52:91:29
Certificate issuer:       /CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
Certificate serial:       019B7C1200FC432AE15E2B73B34EC9AAEF5F
Authority key identifier: 4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/OFptjkhuAwnfpoG-xdeEpSFSkSk.roa
Signing time:             Fri 02 Jan 2026 00:18:33 +0000
ROA not before:           Fri 02 Jan 2026 00:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199279
IP address blocks:        83.230.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:00:fc:43:2a:e1:5e:2b:73:b3:4e:c9:aa:ef:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b405caab34bbfde6b8ee66c600860c6ce96f32b
        Validity
            Not Before: Jan  2 00:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=385a6d8e486e0309dfa681bec5d784a521529129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:9f:77:70:6b:7b:13:5b:b6:4b:7f:ce:70:
                    0a:f2:e4:c3:90:3b:7f:1e:bc:ca:7a:72:39:9d:11:
                    38:97:ce:69:4e:1e:93:9a:0b:dd:95:47:83:a8:d8:
                    a1:99:f7:30:6a:31:f0:0a:3b:8b:32:a9:1c:50:20:
                    a8:45:21:9e:92:8b:56:0c:4f:0f:b9:c4:a0:37:a9:
                    a1:8f:7c:d5:a9:9c:87:45:9f:b8:4a:2f:09:46:1a:
                    4e:93:01:7d:bc:d0:81:d1:04:9b:51:ed:8a:b4:ae:
                    f0:e2:1e:cf:6c:e6:3b:24:8c:8e:d9:ef:d4:e7:80:
                    6e:02:41:c1:ab:0f:3e:bd:90:5c:56:e9:5e:ad:4e:
                    5c:18:f7:ed:fb:66:3a:8c:04:88:50:a5:41:81:6b:
                    6a:23:99:34:72:d5:39:d3:7a:e8:ff:f7:37:6c:00:
                    09:f5:59:05:c7:16:99:8a:5e:d7:85:05:69:4a:9d:
                    b4:75:1a:af:17:90:9d:16:fd:a5:f5:2b:ef:44:00:
                    f8:74:94:10:42:b0:7c:a7:dc:61:5c:cb:f6:eb:3d:
                    84:d3:32:6c:d8:0b:6c:a5:dd:b8:aa:45:06:ce:89:
                    a0:4a:9b:7f:8e:96:19:75:b5:20:e1:e2:80:32:81:
                    8a:9d:ea:c4:09:61:63:e9:09:39:d8:a6:f2:bb:8b:
                    52:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5A:6D:8E:48:6E:03:09:DF:A6:81:BE:C5:D7:84:A5:21:52:91:29
            X509v3 Authority Key Identifier:
                keyid:4B:40:5C:AA:B3:4B:BF:DE:6B:8E:E6:6C:60:08:60:C6:CE:96:F3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0BcqrNLv95rjuZsYAhgxs6W8ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/OFptjkhuAwnfpoG-xdeEpSFSkSk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/914d39-3020-4b79-ad26-d87affb8bc61/1/S0BcqrNLv95rjuZsYAhgxs6W8ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.230.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:aa:3b:67:f5:a2:fd:78:a1:2c:47:47:f4:45:53:92:d7:a6:
         35:5e:96:b9:ff:1e:bc:7d:6a:99:de:07:48:e6:12:b5:9e:59:
         d5:a9:ee:ec:93:55:9f:3c:0e:8d:6f:0e:f7:5d:8a:d0:d1:68:
         57:4a:db:73:f0:55:d0:56:e5:c0:28:e5:4b:cc:6a:9d:a4:8a:
         81:96:a9:a7:41:43:e6:1a:41:da:fe:6a:7d:c1:37:48:b3:ef:
         23:36:a3:d0:e0:a6:5b:a5:bd:ed:9a:4a:32:df:f3:98:d6:f7:
         dc:cd:93:a7:4e:19:e1:93:39:29:2c:97:b8:f3:4d:99:5f:43:
         69:f0:11:dc:46:c7:b4:6f:b5:1b:4e:bf:71:71:d7:72:3e:ab:
         17:14:ad:12:75:78:a7:b6:33:d1:61:12:fb:37:c8:d9:f8:08:
         6a:b0:90:2b:b0:06:14:f8:e4:d6:71:83:8b:e5:6f:0b:d6:e1:
         a6:b0:51:f5:d8:5a:90:32:43:e6:5f:7b:dd:6d:43:83:f7:51:
         14:0d:43:43:2b:17:b9:37:65:00:2e:cc:4d:a7:b4:b5:a3:5d:
         68:9c:d1:bc:66:0c:7b:df:d2:60:1c:b2:62:03:1b:26:5a:b4:
         8c:5c:ea:3b:ef:25:23:c5:8d:eb:fd:bf:7f:8e:29:f5:bc:63:
         ac:11:4b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:25:29 2026 by rpki-client