This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9DJshHuamQ3bgb5z1m1LfJNX_ww.roa
File:                     9DJshHuamQ3bgb5z1m1LfJNX_ww.roa (raw, json)
Hash identifier:          7svYIoYfPlfMyBkpS9n34AdZclfd41c9DZvPrcryylI=
Subject key identifier:   F4:32:6C:84:7B:9A:99:0D:DB:81:BE:73:D6:6D:4B:7C:93:57:FF:0C
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019B78A25D7157CD1DA518704DAF66130BDF
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9DJshHuamQ3bgb5z1m1LfJNX_ww.roa
Signing time:             Thu 01 Jan 2026 08:17:45 +0000
ROA not before:           Thu 01 Jan 2026 08:17:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211813
IP address blocks:        212.134.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:5d:71:57:cd:1d:a5:18:70:4d:af:66:13:0b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Jan  1 08:17:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f4326c847b9a990ddb81be73d66d4b7c9357ff0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:59:1a:ed:64:d0:7f:31:43:63:70:b9:b9:
                    93:1c:78:69:7f:ff:c1:96:d0:b0:c5:17:74:ad:46:
                    ba:17:64:ba:77:6d:7c:2c:fe:86:44:40:c3:13:33:
                    c4:9a:3a:40:01:75:04:02:7a:b5:e9:0c:de:59:72:
                    aa:f0:79:0d:ed:72:9c:e1:09:3b:ce:a1:61:4f:0b:
                    79:8c:c3:77:cd:60:fc:54:2e:c0:16:58:1a:85:8a:
                    c4:92:8d:9b:90:92:3a:53:fe:09:3d:27:f7:0b:db:
                    35:8b:43:14:f1:48:8f:ef:f1:59:86:c9:18:10:de:
                    bf:de:43:ba:7c:6c:65:b0:bc:b7:bc:24:5c:5c:6d:
                    56:bd:e6:16:30:d5:67:30:d4:59:7b:da:2b:54:56:
                    05:b3:b8:4d:9c:20:43:42:91:84:51:35:07:3f:86:
                    bb:8e:23:97:51:33:f4:2a:c1:44:33:4e:44:22:bb:
                    f4:9e:6e:dd:e8:67:a2:6a:16:c7:2c:cd:79:2c:35:
                    c4:e0:8f:2a:a5:0a:1a:fa:1a:43:50:07:00:f4:0c:
                    1b:be:fd:fa:59:08:58:f4:f3:c6:82:3e:b7:04:68:
                    31:d7:6a:59:ff:06:50:a4:bf:bf:da:64:fc:e3:ac:
                    d4:c6:03:68:e6:68:09:0c:44:e7:d0:90:b1:26:da:
                    d9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:32:6C:84:7B:9A:99:0D:DB:81:BE:73:D6:6D:4B:7C:93:57:FF:0C
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/9DJshHuamQ3bgb5z1m1LfJNX_ww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.134.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:17:e2:9b:6b:7b:f0:3d:8c:a6:f0:05:99:4d:16:32:92:bb:
         db:70:94:37:44:02:fd:28:a8:c8:fc:93:61:ac:a9:06:27:00:
         ee:6e:b5:33:fb:c9:7c:68:c3:1b:aa:68:f9:d6:5e:0d:68:ad:
         3a:dd:1d:3f:d0:67:78:c3:98:e8:e2:34:fc:28:05:be:8a:17:
         07:a3:48:fc:e4:d1:42:ae:68:af:3c:59:42:a8:3b:fe:7a:ad:
         76:68:0f:14:fd:ed:7b:cc:91:5f:93:da:27:60:0e:e7:58:9a:
         92:09:53:36:8d:9b:1b:a0:53:88:24:0d:21:ad:cf:58:b5:21:
         f1:74:a4:a2:01:b7:d3:2a:1e:c7:d5:4d:ae:14:e3:f5:8f:c7:
         32:4d:1c:9d:a5:cc:04:54:8f:f3:ce:0d:9a:6e:fd:e4:03:1e:
         cf:40:06:2c:8d:76:1e:43:6d:1f:7f:75:16:50:5f:98:6e:b4:
         55:95:7b:c4:ae:98:25:af:f9:3e:cf:b3:83:6a:c3:9b:2f:81:
         44:27:76:56:7b:33:6c:9c:a4:14:30:b1:cb:b8:6b:1b:10:c0:
         2a:55:c7:c4:7e:dc:65:61:a4:74:d4:44:b6:f5:d9:7a:73:08:
         5a:76:de:e8:6d:e4:b2:18:01:f1:95:f9:0e:7e:15:2e:06:af:
         42:b3:5c:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4ol1xV80dpRhwTa9mEwvfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwMTAxMDgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDMyNmM4NDdiOWE5OTBkZGI4MWJlNzNkNjZkNGI3YzkzNTdmZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr9ZGu1k0H8xQ2NwubmTHHhpf//B
ltCwxRd0rUa6F2S6d218LP6GREDDEzPEmjpAAXUEAnq16QzeWXKq8HkN7XKc4Qk7
zqFhTwt5jMN3zWD8VC7AFlgahYrEko2bkJI6U/4JPSf3C9s1i0MU8UiP7/FZhskY
EN6/3kO6fGxlsLy3vCRcXG1WveYWMNVnMNRZe9orVFYFs7hNnCBDQpGEUTUHP4a7
jiOXUTP0KsFEM05EIrv0nm7d6GeiahbHLM15LDXE4I8qpQoa+hpDUAcA9Awbvv36
WQhY9PPGgj63BGgx12pZ/wZQpL+/2mT846zUxgNo5mgJDETn0JCxJtrZ3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPQybIR7mpkN24G+c9ZtS3yTV/8MMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvOURKc2hIdWFtUTNiZ2I1ejFtMUxmSk5YX3d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IZgMA0G
CSqGSIb3DQEBCwUAA4IBAQBxF+Kba3vwPYym8AWZTRYykrvbcJQ3RAL9KKjI/JNh
rKkGJwDubrUz+8l8aMMbqmj51l4NaK063R0/0Gd4w5jo4jT8KAW+ihcHo0j85NFC
rmivPFlCqDv+eq12aA8U/e17zJFfk9onYA7nWJqSCVM2jZsboFOIJA0hrc9YtSHx
dKSiAbfTKh7H1U2uFOP1j8cyTRydpcwEVI/zzg2abv3kAx7PQAYsjXYeQ20ff3UW
UF+YbrRVlXvErpglr/k+z7ODasObL4FEJ3ZWezNsnKQUMLHLuGsbEMAqVcfEftxl
YaR01ES29dl6cwhadt7obeSyGAHxlfkOfhUuBq9Cs1zW
-----END CERTIFICATE-----
Generated at Sun Jan 18 10:47:52 2026 by rpki-client