This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/96d6ctMX_g4ONOX-V119IuFLbcQ.roa
File:                     96d6ctMX_g4ONOX-V119IuFLbcQ.roa (raw, json)
Hash identifier:          p56ITbnJXhBydcF7z+SEtTfhLoTMh1wjVprKGq7AA5g=
Subject key identifier:   F7:A7:7A:72:D3:17:FE:0E:0E:34:E5:FE:57:5D:7D:22:E1:4B:6D:C4
Certificate issuer:       /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial:       019B78A3692D4D8E4BFE9B5D1144548CF82D
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/96d6ctMX_g4ONOX-V119IuFLbcQ.roa
Signing time:             Thu 01 Jan 2026 08:18:53 +0000
ROA not before:           Thu 01 Jan 2026 08:18:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205276
IP address blocks:        185.48.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:69:2d:4d:8e:4b:fe:9b:5d:11:44:54:8c:f8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
        Validity
            Not Before: Jan  1 08:18:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f7a77a72d317fe0e0e34e5fe575d7d22e14b6dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:50:18:6a:09:85:43:28:a5:46:47:27:68:
                    4f:be:53:83:5b:e2:f3:a6:27:10:a8:41:7d:e8:00:
                    42:00:1a:67:6d:5f:d7:38:56:3b:e0:5b:52:bc:d1:
                    5d:77:98:b1:d7:49:0f:86:0e:c6:a4:be:8a:85:16:
                    ff:6f:12:08:0c:23:40:00:8b:b3:ab:44:e5:8e:91:
                    80:ea:48:63:2b:72:ea:a2:78:a1:ec:85:ef:1f:30:
                    18:00:b1:d9:03:67:8b:f8:92:49:38:64:91:80:ee:
                    c6:96:db:13:71:3b:4a:ca:88:4c:e6:a1:db:66:40:
                    47:12:63:43:7d:8b:7e:f4:c8:a9:b9:f3:7e:c0:43:
                    d1:aa:b9:54:f8:0e:59:f2:08:0c:d9:d6:cb:9c:01:
                    64:e5:40:65:bc:cc:42:9f:8f:82:a5:6a:19:dd:97:
                    fb:74:75:71:ff:63:4a:1e:ea:ae:7c:92:b1:62:be:
                    2b:e2:a1:54:25:3c:40:e1:f0:33:ce:50:a2:60:fc:
                    9c:b0:3f:fb:ee:81:ea:03:78:8d:24:78:da:09:24:
                    25:f7:87:eb:8c:4a:9d:a2:69:de:a3:fd:37:f3:2f:
                    78:07:74:48:18:c2:2d:98:10:18:2d:6b:94:3f:78:
                    5e:79:83:fc:82:7e:24:6f:97:3a:65:3a:b4:38:4c:
                    54:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A7:7A:72:D3:17:FE:0E:0E:34:E5:FE:57:5D:7D:22:E1:4B:6D:C4
            X509v3 Authority Key Identifier:
                keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/96d6ctMX_g4ONOX-V119IuFLbcQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.48.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:0b:31:54:81:e7:05:45:97:0f:aa:38:44:48:37:76:de:
         61:16:c8:0f:9d:2c:0a:e5:0e:0a:43:bf:85:3f:ff:fb:73:bf:
         b4:41:d8:a3:1a:d0:b8:55:c9:cd:88:7d:f4:28:69:ce:fa:0d:
         ca:f2:d0:1f:46:b2:0a:36:da:0b:59:57:5b:1c:d0:71:d9:9c:
         ae:df:94:b0:4b:65:6a:0b:10:96:d8:be:4b:3d:cb:cb:14:97:
         ae:08:a1:33:fc:dc:4e:a6:8c:60:66:ac:b3:5f:43:e5:87:5e:
         07:74:1a:56:b1:17:78:b3:1b:cb:a4:41:7a:0e:f4:dc:f0:1e:
         f3:07:33:1f:50:e8:da:4a:f3:f4:10:69:71:8a:97:4d:de:e3:
         60:51:79:d3:34:9f:91:14:4d:38:19:64:96:4e:32:10:42:60:
         39:37:ae:0e:36:7a:e2:45:4e:0d:ed:08:20:a6:c2:cf:7f:ae:
         61:d3:33:42:75:5e:c1:88:dc:54:03:b2:1b:54:d2:f6:e3:9d:
         c9:ce:a4:19:98:b9:2a:0a:1d:2d:f8:ac:3e:18:de:a8:a0:13:
         40:d4:8e:52:ab:da:40:ff:e6:14:0c:4b:07:3c:12:fd:0e:a0:
         16:c8:cd:23:a5:35:17:54:30:a5:ac:bb:86:e4:79:7e:6f:10:
         3b:cf:78:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:22 2026 by rpki-client