This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/X44UuuaUhAM50Kozh7XZVDvdF14.roa
File:                     X44UuuaUhAM50Kozh7XZVDvdF14.roa (raw, json)
Hash identifier:          kIvHQLjOEtZWEUfUCpYD6bbto6town5tHTLofDklsdI=
Subject key identifier:   5F:8E:14:BA:E6:94:84:03:39:D0:AA:33:87:B5:D9:54:3B:DD:17:5E
Certificate issuer:       /CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
Certificate serial:       019B7C7FD0CC9392DF1D0EC28EF5EC97307F
Authority key identifier: A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/X44UuuaUhAM50Kozh7XZVDvdF14.roa
Signing time:             Fri 02 Jan 2026 02:18:29 +0000
ROA not before:           Fri 02 Jan 2026 02:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35684
IP address blocks:        2001:67c:74::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:d0:cc:93:92:df:1d:0e:c2:8e:f5:ec:97:30:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ddfaf13b7dbe05daa32b5878b8b68024045971
        Validity
            Not Before: Jan  2 02:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5f8e14bae694840339d0aa3387b5d9543bdd175e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:0b:13:f4:08:db:8d:f1:51:15:60:c8:80:
                    b0:c6:ce:03:61:e7:ee:59:4e:48:e3:18:1f:08:de:
                    2a:56:59:22:22:25:47:3d:11:a8:44:01:e5:cc:ef:
                    59:82:b6:65:f8:3e:35:58:bd:80:6a:5b:99:f3:55:
                    59:b5:9e:3d:1f:b2:5e:41:d1:3b:ef:86:86:41:6b:
                    7f:16:4a:b6:fc:16:07:61:6a:90:c1:11:d4:09:7f:
                    ad:17:5c:46:05:53:8f:27:35:2a:e6:f6:6e:57:43:
                    84:c7:76:a6:b9:a5:55:7b:da:d5:08:39:01:ca:4f:
                    58:6a:eb:b9:b9:44:dc:bc:fc:35:98:03:33:26:35:
                    c6:d7:51:a4:c8:88:a6:7b:1a:3b:13:ab:15:e6:93:
                    73:85:10:7c:7f:51:37:41:3b:15:5b:77:79:88:e4:
                    16:64:26:81:7f:20:b8:f4:4c:6b:dd:20:19:c3:f3:
                    8a:1b:3b:9f:f6:22:e3:9c:ad:10:b9:35:8b:3d:e9:
                    ad:0b:a1:f8:8f:5c:af:22:52:03:d1:57:ab:8b:7c:
                    6c:3b:c8:c5:2c:00:fa:ef:c0:e6:87:bc:c1:ea:a6:
                    74:a0:c8:f9:72:a0:55:48:32:80:25:52:df:81:38:
                    32:33:78:d9:9c:72:29:1c:61:28:fb:72:c0:71:e1:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8E:14:BA:E6:94:84:03:39:D0:AA:33:87:B5:D9:54:3B:DD:17:5E
            X509v3 Authority Key Identifier:
                keyid:A7:DD:FA:F1:3B:7D:BE:05:DA:A3:2B:58:78:B8:B6:80:24:04:59:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9368Tt9vgXaoytYeLi2gCQEWXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/X44UuuaUhAM50Kozh7XZVDvdF14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f2b083-b3b9-4aa6-a149-fbb553b84641/1/p9368Tt9vgXaoytYeLi2gCQEWXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:74::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:c6:63:c9:f2:f1:6c:8b:a7:55:0e:d9:b5:57:cf:c8:3e:95:
         6b:2f:ae:54:c8:6b:63:6a:da:02:2c:9d:27:94:72:a9:06:63:
         61:71:1f:07:a4:d4:3c:ce:ae:51:98:75:47:99:ac:9f:bc:83:
         32:b5:ec:f8:30:08:af:b0:6b:88:31:2d:e3:d3:5d:4a:79:ae:
         3b:c0:de:20:c3:5b:ef:cd:cf:68:06:22:da:2b:d6:c8:b9:10:
         61:0a:d2:da:f3:80:01:a2:7f:f9:a6:32:ca:b0:5d:d3:a7:80:
         b6:e8:95:44:41:23:39:26:47:2d:20:47:3c:1f:29:9e:33:d9:
         2f:d6:75:bc:23:f1:08:65:99:d6:bf:18:b3:53:71:97:38:b2:
         0e:56:37:33:59:81:a0:92:3e:b0:a2:a5:cc:95:20:d0:c1:d4:
         d3:e1:b2:6a:22:95:94:53:9f:32:ae:92:50:71:f4:e4:99:fe:
         f3:28:8c:b0:14:47:45:01:35:16:04:da:e5:f2:2f:db:77:7d:
         5c:a9:6c:3a:b4:78:d1:55:06:89:1d:ef:be:5c:79:09:dd:0f:
         6f:df:73:82:30:77:b9:ef:15:e6:d6:f4:7c:6a:68:c7:8d:ef:
         ff:39:64:6c:5d:60:5b:cd:b0:a0:5a:c8:42:18:05:3b:15:74:
         8d:0c:8a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:54:36 2026 by rpki-client