This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/phJ6M8N_zrI_IBZJHi5JECkFqfg.roa
File:                     phJ6M8N_zrI_IBZJHi5JECkFqfg.roa (raw, json)
Hash identifier:          uo9pYnUB/RDMAdAyJLZVD99p6FFm8bpqEEb9g4ygjVw=
Subject key identifier:   A6:12:7A:33:C3:7F:CE:B2:3F:20:16:49:1E:2E:49:10:29:05:A9:F8
Certificate issuer:       /CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Certificate serial:       019B7CED2980E0595C1E43CF025F59B144EC
Authority key identifier: D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/phJ6M8N_zrI_IBZJHi5JECkFqfg.roa
Signing time:             Fri 02 Jan 2026 04:17:55 +0000
ROA not before:           Fri 02 Jan 2026 04:17:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15847
IP address blocks:        195.20.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:29:80:e0:59:5c:1e:43:cf:02:5f:59:b1:44:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
        Validity
            Not Before: Jan  2 04:17:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a6127a33c37fceb23f2016491e2e49102905a9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:31:19:f7:3d:77:19:66:9b:12:aa:ba:bf:
                    30:66:b7:9c:23:71:14:96:dc:7e:ac:65:d6:3a:ee:
                    73:a4:fe:3d:73:57:2b:0a:5c:04:ac:a6:a2:6a:7a:
                    8e:af:0e:46:3d:f3:00:6b:12:62:57:ec:98:db:eb:
                    33:fe:5e:03:f8:db:f9:62:f7:b4:d9:b2:2c:0c:ae:
                    9d:08:de:a9:fb:60:b4:d1:f1:bd:4d:89:e6:22:cc:
                    5d:1e:13:10:23:57:fe:63:29:0f:63:2b:3a:f1:07:
                    12:59:93:60:6f:66:c8:98:60:75:bc:cd:97:f1:d6:
                    77:59:7a:e8:67:d8:5b:b2:46:fe:f3:ba:3e:b8:f3:
                    90:b1:fb:07:fe:c3:e7:a1:73:ab:3a:b2:da:aa:91:
                    14:25:49:6e:fc:8d:8b:b2:57:9b:77:1b:6d:f3:55:
                    7b:49:23:ad:b9:f5:61:3f:13:70:00:2d:77:18:f0:
                    aa:0d:a3:22:1c:a9:19:69:59:f0:3f:18:63:a3:c3:
                    40:c6:51:73:11:0d:fe:6a:c2:13:ee:8b:69:c2:25:
                    83:3d:89:c9:55:5a:fe:8f:ce:b9:e6:5b:a7:a6:64:
                    45:4c:82:ff:b5:b0:af:1b:f9:dd:0b:9b:6b:f2:9c:
                    68:33:72:50:00:33:0d:3d:8d:2b:a3:2d:6e:79:0b:
                    d1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:12:7A:33:C3:7F:CE:B2:3F:20:16:49:1E:2E:49:10:29:05:A9:F8
            X509v3 Authority Key Identifier:
                keyid:D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/phJ6M8N_zrI_IBZJHi5JECkFqfg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.20.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:44:32:3c:51:90:1e:48:70:93:8e:80:43:c5:fd:a9:41:61:
         6d:01:e8:04:01:90:4e:24:4d:e1:bf:2e:c4:d6:4c:5c:54:36:
         6c:20:59:3f:14:6d:69:76:ad:f6:0f:22:b7:0e:94:b4:cc:7f:
         1e:e7:72:ed:8e:4b:93:0c:36:f4:1d:1e:dc:90:58:12:c9:32:
         42:de:5a:d8:95:76:36:6f:d4:2d:b0:0c:2f:12:55:7a:ff:c6:
         84:10:df:4c:62:15:96:fb:1d:ae:dc:c3:06:c9:52:aa:b9:28:
         e9:5c:a8:3f:d8:66:f4:b2:dc:68:02:c6:a1:52:ea:e0:72:32:
         49:f8:9f:ad:ff:d3:2e:7b:7a:27:95:d6:33:36:66:9a:b5:23:
         e2:70:a4:10:c6:37:07:e4:a4:a4:6b:5b:94:60:8e:f0:bc:c6:
         df:c6:fe:e4:04:b4:b7:18:2e:76:07:c1:39:41:de:13:b8:48:
         66:89:15:22:7c:77:04:20:b4:50:84:08:03:f4:91:c0:0c:42:
         ad:55:86:08:6c:a6:3d:bc:bb:29:20:de:26:1b:32:df:ae:07:
         91:0b:09:9a:f5:56:8e:38:b9:97:d5:65:96:04:73:91:1a:7a:
         09:9c:4c:f0:10:6a:83:29:d4:2f:5c:c1:22:fa:10:0e:92:4a:
         3b:5b:62:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:33 2026 by rpki-client