This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/72N0dkwUgjGVHphNAQq7md_94OE.roa
File:                     72N0dkwUgjGVHphNAQq7md_94OE.roa (raw, json)
Hash identifier:          XaokY6173zIZDVP/yZcYF9yQR4ieUzqq/yfy/SCY/g8=
Subject key identifier:   EF:63:74:76:4C:14:82:31:95:1E:98:4D:01:0A:BB:99:DF:FD:E0:E1
Certificate issuer:       /CN=269dcdcae3583110e326c5ec18e9dd578febacaf
Certificate serial:       019B7F82F01AD49DB5FF3DCBB5130ECB60FE
Authority key identifier: 26:9D:CD:CA:E3:58:31:10:E3:26:C5:EC:18:E9:DD:57:8F:EB:AC:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/72N0dkwUgjGVHphNAQq7md_94OE.roa
Signing time:             Fri 02 Jan 2026 16:20:46 +0000
ROA not before:           Fri 02 Jan 2026 16:20:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215057
IP address blocks:        193.24.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:f0:1a:d4:9d:b5:ff:3d:cb:b5:13:0e:cb:60:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269dcdcae3583110e326c5ec18e9dd578febacaf
        Validity
            Not Before: Jan  2 16:20:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef6374764c148231951e984d010abb99dffde0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:d4:0e:6a:73:4f:77:41:40:21:11:86:d1:
                    e2:a4:d9:ca:c4:3f:13:fb:28:e1:35:38:f6:e0:af:
                    5e:9e:e2:16:a3:83:f3:af:cd:fd:fc:6b:9f:be:fa:
                    16:e4:42:d3:56:00:b5:c2:15:da:db:6b:bf:ce:dc:
                    2a:0b:24:14:05:43:96:d1:15:63:ce:70:ca:40:df:
                    ff:ac:7a:e7:e7:d0:79:18:c2:67:2d:10:1a:66:c5:
                    17:42:bc:57:00:fa:cb:10:96:ee:9c:1b:d9:21:a8:
                    a4:b5:28:57:af:40:8a:34:9b:cb:fc:50:58:0d:7c:
                    fa:87:f4:46:d8:25:0d:06:6a:07:ff:32:6d:18:8d:
                    f6:27:e9:f5:22:bf:97:cf:ef:e6:18:5e:17:ec:7f:
                    f8:ba:85:30:16:d9:b7:00:cd:17:2f:65:1a:80:a5:
                    61:28:57:87:b4:36:78:85:e2:33:8b:ee:e0:1c:13:
                    62:34:bf:c8:13:d5:c1:6a:6e:5e:a5:06:fd:bb:5b:
                    c0:3b:2e:27:41:23:ef:a6:da:18:0f:3b:ae:74:90:
                    b2:dd:33:17:9b:1d:65:7f:25:d5:b7:03:d9:45:10:
                    50:10:18:eb:51:a2:91:dc:79:98:67:84:76:90:66:
                    1a:a3:17:28:ea:49:d7:92:c0:3f:bf:91:bf:39:0d:
                    60:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:63:74:76:4C:14:82:31:95:1E:98:4D:01:0A:BB:99:DF:FD:E0:E1
            X509v3 Authority Key Identifier:
                keyid:26:9D:CD:CA:E3:58:31:10:E3:26:C5:EC:18:E9:DD:57:8F:EB:AC:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/72N0dkwUgjGVHphNAQq7md_94OE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.24.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:46:b1:cf:36:57:b2:ef:a4:74:65:ce:0e:49:38:9e:15:70:
         55:f5:d9:40:38:8b:56:af:8e:39:fb:99:9c:7e:a6:ec:9c:69:
         78:e7:b3:82:f2:19:0d:d0:a1:2c:6a:5e:5b:e7:19:a4:ed:1e:
         51:bb:54:19:0e:60:3a:34:be:e1:33:bc:db:74:91:88:74:93:
         56:5e:c6:89:3a:98:4e:d5:60:f6:c4:6a:81:23:fd:9b:85:bd:
         61:32:b1:c8:1e:02:df:53:71:07:1d:5e:fa:89:52:42:e0:f9:
         fb:8a:65:f1:e9:e5:a1:34:54:bb:2d:f0:ba:53:f9:a2:87:43:
         29:9f:5d:42:e3:7b:03:c7:a8:1b:99:37:c6:17:4c:89:81:34:
         05:b1:63:47:74:e6:ef:02:1e:2e:c3:5f:f6:4c:4d:3f:d6:50:
         3e:54:91:bb:96:56:f4:2b:81:5e:9b:49:86:0e:33:2a:bd:ac:
         19:53:0a:04:e5:eb:b3:2c:02:2e:79:96:3b:d1:8a:25:b1:c7:
         99:ff:2b:91:80:b5:b3:2a:d1:82:9e:73:56:a6:4c:21:64:42:
         6c:6e:1f:7e:70:e9:39:b5:9d:89:c8:90:52:50:33:29:06:a3:
         0c:91:25:7a:4c:cc:82:94:05:c3:ad:32:70:80:7d:2c:25:64:
         5d:ee:f2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:07:38 2026 by rpki-client