This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/9_TVXot_dyIkEe9KiLsuyW2oktk.roa
File:                     9_TVXot_dyIkEe9KiLsuyW2oktk.roa (raw, json)
Hash identifier:          AY0ZbEX8AuKpfJf3mMe1LHPcHhetoh8C291fNwOvGkw=
Subject key identifier:   F7:F4:D5:5E:8B:7F:77:22:24:11:EF:4A:88:BB:2E:C9:6D:A8:92:D9
Certificate issuer:       /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial:       019B7EA6771E24D10BBF2F21AA9DFBE64B0F
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/9_TVXot_dyIkEe9KiLsuyW2oktk.roa
Signing time:             Fri 02 Jan 2026 12:19:57 +0000
ROA not before:           Fri 02 Jan 2026 12:19:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209103
IP address blocks:        62.169.136.0/24 maxlen: 24
                          62.169.137.0/24 maxlen: 24
                          194.126.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 20:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:77:1e:24:d1:0b:bf:2f:21:aa:9d:fb:e6:4b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
        Validity
            Not Before: Jan  2 12:19:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f7f4d55e8b7f77222411ef4a88bb2ec96da892d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f5:37:d5:54:bf:1b:f5:96:9a:78:c0:d2:50:
                    bc:ec:45:29:49:d8:1c:b3:b6:39:ac:9f:88:ec:6d:
                    7e:68:d6:6f:ad:f9:50:92:1f:b0:c6:77:e4:80:4c:
                    7e:51:2e:27:d4:16:ec:72:03:bc:bd:c4:ce:03:57:
                    18:58:6a:3d:ac:53:2e:3e:6a:de:a1:f3:fa:04:49:
                    ef:cc:13:51:8e:ed:91:e7:17:48:8a:71:57:59:c4:
                    cd:10:23:8e:e0:a5:17:a2:c2:81:b6:5a:ea:48:b0:
                    21:98:c1:97:ba:c4:1c:02:ca:f0:ce:8c:cc:ed:dd:
                    d4:de:96:62:8f:a5:96:b0:ec:e5:7e:c4:37:73:9b:
                    c6:a2:03:29:e7:8a:08:57:85:f5:b7:cd:f5:5e:14:
                    4e:be:ff:6c:3f:2b:0a:47:85:26:bc:b5:0a:84:6b:
                    b7:81:89:8b:69:d3:58:4f:e2:4d:91:70:b1:d0:ea:
                    48:8c:d8:6d:cf:14:46:fd:f0:ac:c7:89:57:64:21:
                    93:7d:1c:a2:22:92:da:7a:02:28:9c:22:7d:aa:8b:
                    23:5b:36:63:5b:46:43:8d:f5:cb:d9:3d:6d:a8:6f:
                    e8:37:98:e8:e3:bf:aa:fd:ec:b7:26:03:2a:48:c2:
                    78:4e:37:8a:aa:a0:e0:76:ba:58:5b:83:2f:8a:04:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F4:D5:5E:8B:7F:77:22:24:11:EF:4A:88:BB:2E:C9:6D:A8:92:D9
            X509v3 Authority Key Identifier:
                keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/9_TVXot_dyIkEe9KiLsuyW2oktk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.169.136.0/23
                  194.126.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:0e:1b:df:96:64:9f:92:2c:a2:46:a7:32:cc:a9:ad:d4:48:
         b2:59:f3:e9:02:ae:19:8d:01:f6:f6:33:f9:38:aa:99:87:9b:
         ba:ca:98:30:de:23:a8:50:9b:12:42:c0:ee:55:5f:8b:59:9e:
         84:16:86:4c:9d:5c:fb:d6:03:28:64:09:65:18:9f:a4:27:51:
         c8:8f:bf:66:0b:d1:6b:ca:d0:30:ce:be:2b:b8:e3:47:b6:bb:
         0d:c8:1a:f9:63:75:dd:85:7f:6a:e7:c3:fe:0d:37:ba:a8:90:
         f4:44:32:9b:3b:6a:ac:15:a9:78:76:b3:f8:70:56:0f:46:a2:
         77:45:f2:fa:32:42:bc:d9:7e:73:dd:0d:b3:4e:30:d7:26:82:
         0f:a9:04:45:fd:da:6d:96:ab:31:7f:20:60:f3:d8:42:5f:f2:
         12:17:06:86:40:66:13:e1:cc:3f:26:16:79:cd:ce:a2:b6:07:
         ef:62:6a:0c:13:83:96:25:0d:f3:a5:01:38:62:50:e9:d8:a2:
         df:ee:dc:9a:8e:3f:1f:c9:d1:68:0f:1c:67:c4:3a:ed:d1:9a:
         c7:89:fe:57:66:61:44:8e:da:ff:d7:06:86:ce:ad:c6:4c:73:
         fe:15:2c:6c:36:ca:f3:70:4d:2f:27:88:bd:8c:6b:7c:32:a8:
         a0:cd:3c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 06:57:51 2026 by rpki-client