This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/oXioQd61dHXxrQktudDX7mhO5jM.roa
File:                     oXioQd61dHXxrQktudDX7mhO5jM.roa (raw, json)
Hash identifier:          WotYCxCvc5bTkZKJ4SaRQI3ZLywSWPDXJlcekc+/TXw=
Subject key identifier:   A1:78:A8:41:DE:B5:74:75:F1:AD:09:2D:B9:D0:D7:EE:68:4E:E6:33
Certificate issuer:       /CN=efdaeac6f8a0374839730fc856795709e18ed916
Certificate serial:       019B7C7FB06ECD46649DBB5440E02A5A7C83
Authority key identifier: EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/oXioQd61dHXxrQktudDX7mhO5jM.roa
Signing time:             Fri 02 Jan 2026 02:18:21 +0000
ROA not before:           Fri 02 Jan 2026 02:18:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     1930
IP address blocks:        192.92.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:b0:6e:cd:46:64:9d:bb:54:40:e0:2a:5a:7c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdaeac6f8a0374839730fc856795709e18ed916
        Validity
            Not Before: Jan  2 02:18:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a178a841deb57475f1ad092db9d0d7ee684ee633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2c:8a:03:ca:de:8a:3b:d3:aa:1c:1e:3f:42:
                    f6:a6:7a:e1:c9:50:8e:c5:99:70:fd:c1:f9:a6:98:
                    d9:da:a5:8e:ca:5a:b9:71:e4:f0:16:5c:92:ca:fe:
                    bd:b6:7a:fc:d0:da:37:98:03:47:27:15:e3:bc:bb:
                    f6:0e:d2:f7:8b:61:db:eb:61:0e:1e:80:67:70:da:
                    0c:17:40:84:35:6c:fe:5d:a3:ae:3f:a8:58:35:ad:
                    60:ee:ec:00:71:3c:1b:16:fc:f3:08:10:fa:4f:56:
                    d1:f1:6c:89:4a:41:19:6c:ee:60:9b:be:1b:16:ac:
                    9e:42:b4:0b:8e:38:5d:67:f1:3c:a7:d5:94:00:f8:
                    6d:92:d3:44:b0:55:bc:51:cb:eb:9d:e1:22:a3:0c:
                    80:22:55:e6:bf:0c:59:52:54:de:a0:3f:d7:88:f6:
                    57:63:07:ca:cd:7f:f6:33:93:47:f7:6b:26:83:f1:
                    68:49:99:ed:a9:b0:e6:a8:44:f3:79:89:37:69:e6:
                    7d:68:d9:aa:24:aa:83:f7:79:9a:3e:be:46:03:ad:
                    c8:c0:c9:36:44:d3:d6:72:60:79:e4:a3:56:6e:a0:
                    d2:3f:09:d9:39:b9:b1:4d:90:e1:ac:37:11:a3:90:
                    e5:1d:e7:0b:e6:06:b3:91:a0:71:80:35:31:07:b2:
                    c4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:78:A8:41:DE:B5:74:75:F1:AD:09:2D:B9:D0:D7:EE:68:4E:E6:33
            X509v3 Authority Key Identifier:
                keyid:EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/oXioQd61dHXxrQktudDX7mhO5jM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.92.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:f7:cd:34:45:1f:30:68:99:12:76:55:4d:3f:60:1d:71:be:
         fc:ec:6f:fc:ef:24:b3:22:b8:dc:1b:1f:48:60:da:8c:80:11:
         0b:a7:85:2b:59:0d:49:1d:17:69:0b:96:dd:48:a5:65:b6:16:
         04:ac:4b:d5:a4:42:2f:8a:b7:2f:45:85:59:22:24:06:c4:34:
         63:2e:93:22:25:0e:76:dd:da:d2:5b:ff:4e:57:3d:23:1b:f0:
         cf:7d:c4:a4:e9:a5:82:8e:b9:35:81:fa:ac:5f:dc:97:5f:c5:
         35:51:58:59:87:5c:a6:f7:6a:00:93:89:3d:d6:39:da:4c:9f:
         ec:e3:9f:a1:83:8e:1e:b7:4b:28:50:f3:5b:0c:aa:5b:48:06:
         16:78:fc:35:6b:ab:b4:29:89:43:f0:b7:f6:83:b4:0b:7f:f9:
         90:7a:af:59:35:1b:6a:9c:0e:0e:a9:ac:bb:b1:b9:bc:44:54:
         3d:22:a8:bf:f3:77:4b:bc:fe:bd:53:04:a4:95:5b:77:07:6c:
         cb:3a:26:73:c2:4e:0e:7d:eb:40:da:b7:2c:b8:f8:c8:88:da:
         05:eb:cb:e6:4d:04:6c:f1:d8:44:46:84:04:76:f3:b5:c7:99:
         92:39:f2:90:31:6b:86:fb:a1:83:e9:3a:81:ba:c1:17:b7:0a:
         c8:b6:74:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:32:41 2026 by rpki-client