This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/9X0nqUKArhus_YUqfdP3WTiMnG8.roa
File:                     9X0nqUKArhus_YUqfdP3WTiMnG8.roa (raw, json)
Hash identifier:          c1biU22O73yr/MYC9AlC9fUEO9WNlunWbEG9QDYb8AA=
Subject key identifier:   F5:7D:27:A9:42:80:AE:1B:AC:FD:85:2A:7D:D3:F7:59:38:8C:9C:6F
Certificate issuer:       /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial:       019B7F83CC5F9817A120D3BA0C8375FFEF98
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/9X0nqUKArhus_YUqfdP3WTiMnG8.roa
Signing time:             Fri 02 Jan 2026 16:21:42 +0000
ROA not before:           Fri 02 Jan 2026 16:21:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48557
IP address blocks:        185.138.230.0/23 maxlen: 23
                          185.138.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:cc:5f:98:17:a1:20:d3:ba:0c:83:75:ff:ef:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
        Validity
            Not Before: Jan  2 16:21:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f57d27a94280ae1bacfd852a7dd3f759388c9c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:64:16:a5:8f:5f:99:a8:0f:2e:19:a7:a6:
                    7e:07:21:24:41:82:70:f8:77:f0:d9:1e:3a:1c:13:
                    b2:36:90:2b:69:33:ec:99:f4:83:dc:fd:7c:51:c8:
                    51:f2:be:92:aa:34:08:94:a0:7a:37:a6:f6:10:ae:
                    fd:37:07:70:45:01:a9:6f:62:e4:0f:a2:39:d0:38:
                    1f:40:21:f2:ba:e8:9f:bd:9f:c2:79:24:99:5d:a6:
                    2f:27:88:4a:ae:1e:31:b7:ec:ea:70:17:5b:aa:69:
                    76:4b:7e:b4:6e:6e:9a:25:9c:c8:8c:0b:a1:af:7f:
                    be:8d:ab:31:2c:f3:ac:e4:7b:6a:75:ec:d3:72:c6:
                    bd:21:aa:3f:1d:b4:cd:00:e9:bc:95:17:57:ca:07:
                    b7:d6:c7:68:c8:62:c7:b6:77:42:d8:fd:2d:ce:d0:
                    0a:31:0d:cb:9d:80:83:f7:a5:ef:10:1e:7d:ea:37:
                    1d:86:1c:69:30:bd:5b:d7:13:8b:a9:bb:5c:50:8d:
                    31:39:d3:c9:e9:68:96:90:d9:80:a9:85:73:2a:8a:
                    8a:26:a0:a4:d1:3b:95:07:55:53:10:db:a5:2b:60:
                    52:8f:aa:34:28:37:57:2e:0c:23:5c:c9:52:8e:a8:
                    1c:12:4d:5b:92:bc:f9:c2:6a:1c:81:23:09:f7:e9:
                    b3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7D:27:A9:42:80:AE:1B:AC:FD:85:2A:7D:D3:F7:59:38:8C:9C:6F
            X509v3 Authority Key Identifier:
                keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/9X0nqUKArhus_YUqfdP3WTiMnG8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.138.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:05:03:2e:c7:f3:c6:a4:56:98:5a:3c:ff:f9:34:4f:de:ae:
         c3:23:96:f6:4b:47:92:38:40:8d:f9:9f:89:1a:7f:da:3c:11:
         80:7f:bf:d2:93:e2:68:a8:ce:ce:74:42:33:47:26:a4:4c:c1:
         9c:20:af:30:52:a5:2e:5b:a6:b4:5b:3b:66:76:16:b2:8c:0e:
         6e:b0:fb:98:76:5d:de:66:5e:d1:e4:fb:77:2b:e9:b1:e7:5a:
         ed:62:56:b1:6e:42:1b:0b:a4:32:bc:40:d1:18:c9:2b:9b:74:
         a0:08:b7:52:20:26:24:73:d2:72:b1:2b:8e:32:6b:03:a3:27:
         5b:6f:c9:57:9d:40:df:54:9b:d2:53:03:f8:f8:8f:cf:f5:c0:
         31:90:fb:72:31:5e:27:9b:bd:d0:51:77:c1:05:54:bf:db:8e:
         58:44:4d:4a:87:c5:bb:27:24:60:f8:7b:8f:a3:79:fc:c7:74:
         b5:18:cb:cc:ff:31:7b:2a:aa:6d:b4:4a:f5:b7:84:c6:2f:17:
         22:96:bd:b6:fa:33:2a:44:a9:84:4e:1b:23:3f:e0:79:39:55:
         e8:8f:8c:7d:f4:aa:6c:94:dd:38:4d:2b:2e:ee:8d:0a:43:8e:
         45:7e:9b:66:2b:a7:c4:7c:8b:b7:f6:7c:f4:d6:1b:b8:c0:1e:
         8a:d3:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:26:31 2026 by rpki-client