This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/14hIFUW6vS2lRrFhhTcqnw5Y0_U.roa
File:                     14hIFUW6vS2lRrFhhTcqnw5Y0_U.roa (raw, json)
Hash identifier:          weE6FiUWFJlgjSn45t8SYEOqGWgUP2W1fkEVmJ8kNgo=
Subject key identifier:   D7:88:48:15:45:BA:BD:2D:A5:46:B1:61:85:37:2A:9F:0E:58:D3:F5
Certificate issuer:       /CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
Certificate serial:       019B7F81F49E5390BC83BD737CF38D6130AC
Authority key identifier: 19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/14hIFUW6vS2lRrFhhTcqnw5Y0_U.roa
Signing time:             Fri 02 Jan 2026 16:19:41 +0000
ROA not before:           Fri 02 Jan 2026 16:19:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62161
IP address blocks:        2a00:f5a0::/29 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:81:f4:9e:53:90:bc:83:bd:73:7c:f3:8d:61:30:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19cc63f3b34f170189d073c88b7d652f7033a1fc
        Validity
            Not Before: Jan  2 16:19:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d788481545babd2da546b16185372a9f0e58d3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:92:7c:09:78:dc:52:8c:63:04:82:a8:f5:
                    67:85:41:04:80:0b:9c:0d:68:7a:7a:36:1f:1c:02:
                    a1:1a:b6:e1:3c:b3:57:9c:84:2d:61:d5:0f:75:ed:
                    c9:fd:30:e7:47:90:d5:f7:7e:c4:0d:71:94:bc:f0:
                    69:e8:24:3f:63:cf:80:ca:6b:49:b7:94:81:d3:8f:
                    48:d3:2c:4e:c8:2d:ec:bf:2b:8d:bd:ff:c3:9b:c1:
                    20:d8:8d:dd:94:c2:95:6b:c3:1a:4b:1b:d0:9d:25:
                    a6:60:cf:c2:5f:54:25:dd:b8:cf:22:d1:4a:a8:64:
                    4c:c5:41:19:c8:b6:9d:dc:64:c7:b7:2e:69:07:f5:
                    51:03:cf:a7:ef:a4:a8:f6:ab:3c:82:f4:ce:02:9f:
                    27:21:af:38:2b:dc:a7:df:66:96:38:9c:59:02:c3:
                    03:52:30:3e:fc:ff:d2:e5:33:d4:7c:c3:56:fc:8c:
                    a1:82:05:6e:3b:b0:d7:cf:53:ed:65:91:fe:1a:4c:
                    dc:87:27:a1:1a:a2:f8:6b:1e:e2:ea:91:67:09:d2:
                    b2:34:e0:9f:f3:7c:82:1f:76:71:a9:f2:a2:65:ff:
                    1f:d0:fe:a8:6b:af:a2:ba:51:68:2f:db:4a:88:fb:
                    40:9c:0f:cf:ac:ce:1b:cc:e4:fd:e4:a4:11:c7:c7:
                    7e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:88:48:15:45:BA:BD:2D:A5:46:B1:61:85:37:2A:9F:0E:58:D3:F5
            X509v3 Authority Key Identifier:
                keyid:19:CC:63:F3:B3:4F:17:01:89:D0:73:C8:8B:7D:65:2F:70:33:A1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gcxj87NPFwGJ0HPIi31lL3Azofw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/14hIFUW6vS2lRrFhhTcqnw5Y0_U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6bde9e-6ed8-47d5-9d9c-54d784efbb7a/1/Gcxj87NPFwGJ0HPIi31lL3Azofw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:f5a0::/29

    Signature Algorithm: sha256WithRSAEncryption
         46:ae:c1:1e:e6:b5:3f:e3:e8:5c:e6:af:01:d0:76:19:46:5e:
         2f:30:04:0a:84:8d:26:bf:9c:31:c2:fa:28:06:de:2c:2c:71:
         6d:47:19:92:17:ca:ff:16:56:5c:8d:60:aa:e5:89:8a:bd:a9:
         c8:10:c2:94:9f:10:d2:8b:b3:39:13:ca:0b:67:25:ab:8e:b0:
         0a:b8:10:64:79:83:43:54:1e:f6:14:84:f6:bd:29:e1:9b:4b:
         1d:38:ef:6d:fb:4b:ab:21:eb:25:73:3d:4f:b3:94:ca:75:59:
         4c:de:94:d5:4c:4b:67:c7:ac:0a:2c:6c:d0:37:c2:81:11:18:
         bd:fa:dd:77:3d:27:c2:21:7b:fb:01:fc:59:97:ea:6c:5b:ac:
         a7:2a:54:4f:8f:c6:42:4d:db:75:fd:91:81:b1:06:17:79:ab:
         8c:69:59:8e:b7:cb:60:ce:4c:0a:8f:28:f6:5e:33:90:db:3f:
         b8:e2:c3:7c:62:91:c4:3e:ba:91:db:fa:a1:37:05:49:2c:99:
         8e:07:32:77:bd:81:8b:89:f5:fa:96:d1:b2:3d:bd:a3:3b:77:
         77:22:48:97:d0:a5:0c:6f:c9:5f:b8:36:d0:b8:d6:b5:f1:f3:
         72:7a:73:63:c2:3f:43:30:c9:22:39:69:d5:df:d5:7c:af:fc:
         32:20:8a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:27:42 2026 by rpki-client