This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/co3NoaTZrfbmxDfWvZVyzSF9zs4.roa
File:                     co3NoaTZrfbmxDfWvZVyzSF9zs4.roa (raw, json)
Hash identifier:          W81jUWTx5An2ltxr3EmUDv1Bxve3EzM58yjJRH0amGk=
Subject key identifier:   72:8D:CD:A1:A4:D9:AD:F6:E6:C4:37:D6:BD:95:72:CD:21:7D:CE:CE
Certificate issuer:       /CN=45be271d6495293347465c69b97d7380e4bbb46d
Certificate serial:       019B797E1616581ADA15F035B826552A3095
Authority key identifier: 45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/co3NoaTZrfbmxDfWvZVyzSF9zs4.roa
Signing time:             Thu 01 Jan 2026 12:17:44 +0000
ROA not before:           Thu 01 Jan 2026 12:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31113
IP address blocks:        193.23.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:16:16:58:1a:da:15:f0:35:b8:26:55:2a:30:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45be271d6495293347465c69b97d7380e4bbb46d
        Validity
            Not Before: Jan  1 12:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=728dcda1a4d9adf6e6c437d6bd9572cd217dcece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:85:60:2e:59:da:d9:c9:a2:40:04:7d:cf:
                    b6:04:e8:12:e5:58:5e:62:7f:8d:b8:9d:62:53:b0:
                    b2:38:97:fc:61:bc:a4:e2:fc:a6:47:6c:87:50:27:
                    74:0e:78:18:66:eb:98:be:18:90:56:92:8b:06:60:
                    c5:ce:bf:e3:62:03:89:35:c2:39:1c:15:99:b6:f6:
                    a2:14:d9:ab:6c:9a:79:86:9f:14:ba:a2:52:3d:0a:
                    11:7d:52:54:df:27:3a:c5:41:de:04:b9:0f:cb:6d:
                    1c:87:b0:33:4f:6f:df:0c:f5:e7:ad:80:99:76:0e:
                    b8:e9:13:dd:7b:81:98:c2:32:28:ae:92:29:b0:1a:
                    cf:fd:01:56:44:9f:59:5c:19:32:59:98:b1:c2:06:
                    e8:4b:33:c3:30:13:2b:e5:98:6b:b8:44:38:f3:eb:
                    6d:46:f1:1f:3f:81:be:02:57:58:2f:a0:3c:88:98:
                    c7:c5:08:12:f7:d2:d4:a3:f0:30:3a:4c:f8:81:27:
                    7a:08:5a:bf:f7:b3:5c:78:0d:55:73:ea:34:02:9f:
                    a4:fd:8a:9f:5c:6c:f4:14:2c:3f:68:20:c9:33:2e:
                    dc:6e:eb:4f:85:6e:80:42:68:9e:47:54:18:5e:47:
                    ec:ca:0c:c9:f4:91:3e:17:e6:26:a2:44:f8:4a:5d:
                    33:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8D:CD:A1:A4:D9:AD:F6:E6:C4:37:D6:BD:95:72:CD:21:7D:CE:CE
            X509v3 Authority Key Identifier:
                keyid:45:BE:27:1D:64:95:29:33:47:46:5C:69:B9:7D:73:80:E4:BB:B4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/co3NoaTZrfbmxDfWvZVyzSF9zs4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb9f65-49d8-41e3-9ebc-c82e158c012d/1/Rb4nHWSVKTNHRlxpuX1zgOS7tG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.23.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:74:4c:36:df:49:83:b8:ba:4c:8c:99:70:48:76:cf:68:fb:
         89:a5:b0:6d:27:bb:82:84:6f:4a:78:97:5d:f0:6b:b1:4d:a9:
         d4:bd:2a:a2:c2:50:b4:46:ff:00:36:94:65:f1:ea:6e:3a:4c:
         61:8b:b8:6b:da:54:d3:ab:fc:53:e2:4b:51:17:26:14:2a:09:
         e8:e6:88:f7:3d:24:69:0c:6b:2d:c3:31:38:bc:16:9d:a3:5b:
         5f:f6:31:62:73:10:e9:73:a9:c3:7d:db:b6:c0:d6:e2:01:8f:
         fa:7e:63:2c:1d:e9:04:e0:3d:d0:5d:75:cf:b3:ff:77:80:31:
         5b:d6:23:6c:63:1d:12:11:da:79:fc:82:da:3c:dc:0b:40:e6:
         7e:e7:27:17:25:8e:f2:80:ea:8e:e9:42:2b:93:c8:31:f0:af:
         63:d6:8c:15:1b:d2:9d:37:67:fd:50:04:c7:2e:3f:71:f6:45:
         d3:e7:5a:98:60:f3:7a:e6:98:28:25:4f:c8:e0:e5:0c:84:ef:
         42:41:1e:1d:b3:64:a3:62:37:bb:d1:0c:4f:f0:ab:22:c6:63:
         c8:3c:f3:14:61:cf:84:88:5a:7d:b7:c6:86:31:88:c1:e8:8b:
         1f:fb:e0:f5:2e:c3:c9:86:08:57:19:52:ca:b1:8f:c4:61:42:
         5b:fc:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:22 2026 by rpki-client