This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/9Vrbw_O4xKekP96wP7Th2eNuRYI.roa
File:                     9Vrbw_O4xKekP96wP7Th2eNuRYI.roa (raw, json)
Hash identifier:          IV5izac1mW6bg49QkQffAoeLf5HNafZtYdLzjJd/NaY=
Subject key identifier:   F5:5A:DB:C3:F3:B8:C4:A7:A4:3F:DE:B0:3F:B4:E1:D9:E3:6E:45:82
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       019B7BA3D725E30E611875E0CCEB7118B696
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/9Vrbw_O4xKekP96wP7Th2eNuRYI.roa
Signing time:             Thu 01 Jan 2026 22:18:13 +0000
ROA not before:           Thu 01 Jan 2026 22:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207805
IP address blocks:        212.100.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:d7:25:e3:0e:61:18:75:e0:cc:eb:71:18:b6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Jan  1 22:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f55adbc3f3b8c4a7a43fdeb03fb4e1d9e36e4582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f7:f8:4b:9f:d0:b9:58:15:8b:dc:29:0a:6e:
                    41:02:bc:06:20:17:2c:01:2f:b1:7b:12:93:04:58:
                    ad:c2:4f:d1:45:95:96:e3:a8:bb:c4:ea:f9:50:79:
                    6b:d8:47:c6:75:d8:5c:2f:fa:e4:00:b4:26:2a:73:
                    a3:ba:95:25:30:25:18:0a:5b:d6:2d:ce:1c:99:06:
                    39:54:e5:59:b3:5c:ce:1e:29:4d:0c:5d:34:71:1d:
                    e8:06:71:ed:01:5c:e5:e4:a4:77:31:3e:da:36:0e:
                    1c:e9:01:e5:83:bd:0b:dd:eb:3c:2e:9f:24:b3:07:
                    97:36:8c:7d:ef:2b:27:6f:8f:51:b3:ca:9b:c2:c7:
                    14:54:ee:f2:29:28:c3:fa:b0:9c:37:d1:a1:57:da:
                    9d:77:d3:fb:8c:17:e3:77:bc:3b:2c:3e:0d:d3:a2:
                    10:ea:63:7e:88:f3:af:33:d9:22:1f:07:49:27:9f:
                    1f:9c:d3:52:fe:a2:13:c9:05:4e:df:a1:95:54:a1:
                    22:d7:d7:ad:f3:b4:27:b1:88:8f:33:76:3a:1f:a7:
                    c2:c8:01:00:01:b5:9c:c3:1e:50:bc:a2:d4:8d:c3:
                    98:91:0e:45:cb:73:bc:7e:41:68:a0:e0:6d:60:bb:
                    b4:0a:e1:28:38:e6:5e:1c:1b:9a:7b:94:ca:5d:b8:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5A:DB:C3:F3:B8:C4:A7:A4:3F:DE:B0:3F:B4:E1:D9:E3:6E:45:82
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/9Vrbw_O4xKekP96wP7Th2eNuRYI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.100.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e5:be:60:78:e9:05:c5:04:86:1f:b3:f2:95:34:0b:d2:0c:
         94:5a:34:2b:f8:c8:43:cb:00:f7:af:5a:14:4a:25:0b:c1:28:
         16:7a:33:86:44:c4:f4:ce:ab:46:b7:f0:e4:fa:ad:25:70:fd:
         3a:f1:ac:37:99:4d:12:47:a6:c3:b3:55:ab:ed:1a:f0:f2:2a:
         ad:1c:c3:2d:23:c1:25:c5:27:e3:09:07:b8:c5:a3:3e:3b:3b:
         85:42:69:94:52:a6:e8:cb:51:c0:0d:83:9c:ff:94:60:a6:7b:
         fc:6c:aa:9e:27:7b:9e:8e:d1:6f:11:6d:69:85:8e:55:98:47:
         a2:0e:b2:34:b6:d7:d6:5a:3d:fa:04:4c:fc:b3:54:fd:93:62:
         b3:43:f7:de:7f:d3:e7:55:12:36:46:80:ba:fd:8f:1b:83:90:
         b4:c0:3f:42:e9:4f:a3:08:c1:31:ad:d1:d4:65:03:7b:47:47:
         c6:fd:53:53:15:90:7f:5d:e5:db:7a:b3:62:72:0d:9e:6b:9a:
         8d:eb:f1:c3:a1:b2:04:3b:01:97:ad:f7:0d:3d:2e:4d:f3:31:
         2d:cb:10:bd:c7:6a:a7:e6:0d:ad:b0:08:3c:90:f4:0e:3b:f2:
         08:69:61:61:c9:19:11:4b:72:7d:99:2b:5f:0c:cc:2b:9f:80:
         6e:54:7e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:34:41 2026 by rpki-client