This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/fy5Vxpj8Cp8uUIkOIqYsyPIJp9o.roa
File:                     fy5Vxpj8Cp8uUIkOIqYsyPIJp9o.roa (raw, json)
Hash identifier:          dPwdrijrUmXn5KvoJ9i354gs58IETiu1sAxzaL3DK6c=
Subject key identifier:   7F:2E:55:C6:98:FC:0A:9F:2E:50:89:0E:22:A6:2C:C8:F2:09:A7:DA
Certificate issuer:       /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial:       019B7DCB1D1F993799B387C10938EB27500B
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/fy5Vxpj8Cp8uUIkOIqYsyPIJp9o.roa
Signing time:             Fri 02 Jan 2026 08:20:21 +0000
ROA not before:           Fri 02 Jan 2026 08:20:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31497
IP address blocks:        193.16.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:1d:1f:99:37:99:b3:87:c1:09:38:eb:27:50:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
        Validity
            Not Before: Jan  2 08:20:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f2e55c698fc0a9f2e50890e22a62cc8f209a7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9c:b4:f2:75:f3:e2:e0:21:98:04:c6:75:49:
                    cd:b7:a9:70:9b:d8:57:a3:89:20:09:9c:58:99:4e:
                    64:ea:88:43:37:e7:e2:a1:c7:1e:8b:0f:e2:6e:16:
                    ac:47:0c:b7:f0:88:81:3d:05:80:45:60:ba:7c:89:
                    cc:f6:f3:df:51:17:07:5f:d5:bf:da:15:35:8f:c9:
                    03:d5:9f:f0:85:04:1f:00:00:44:84:28:3b:fb:6b:
                    d9:22:c7:21:2a:45:0a:f3:9f:07:e4:2c:7b:cf:50:
                    4a:f1:2a:b7:c4:66:43:f4:0f:18:5c:53:d7:1d:98:
                    e8:0a:1e:f8:2f:21:91:11:0c:86:22:e4:85:60:ec:
                    ff:5f:a9:3b:f0:9b:1c:5d:d1:c6:16:19:e5:ca:d2:
                    e1:3c:70:d2:1f:5e:58:1c:40:43:70:97:12:29:e9:
                    a5:93:3d:67:cb:c0:bc:56:10:dd:34:ec:53:a9:6e:
                    3b:61:ca:f9:83:20:fa:90:31:5a:d4:36:62:79:e7:
                    f0:cd:14:57:2d:15:5a:7f:32:ba:46:a5:e3:13:80:
                    23:7a:14:f2:33:bd:3b:9c:1b:93:61:73:f4:a0:7e:
                    0c:b8:95:d6:54:c0:e3:95:8f:98:c7:ce:7d:1c:2b:
                    f2:4f:70:61:98:49:ad:38:0c:dc:cd:79:93:89:09:
                    ae:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2E:55:C6:98:FC:0A:9F:2E:50:89:0E:22:A6:2C:C8:F2:09:A7:DA
            X509v3 Authority Key Identifier:
                keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/fy5Vxpj8Cp8uUIkOIqYsyPIJp9o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.16.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:08:75:0d:43:1b:8e:ae:df:a6:f9:3a:cb:b9:bd:c2:3c:27:
         a0:9a:64:80:d8:6e:de:36:91:e5:fa:13:17:e2:4f:0c:fd:19:
         5e:a6:4b:18:5b:71:de:21:31:21:5c:55:18:4c:2b:08:3b:a9:
         85:35:8d:a1:a6:29:9a:9e:a7:d8:b0:89:45:fc:68:78:9b:c0:
         79:93:28:fe:c4:bd:a6:ac:e4:d2:47:5b:92:dc:29:93:d9:c8:
         89:85:9f:f6:0b:e2:10:a2:98:88:39:57:fc:1d:f4:3a:72:b0:
         d1:a6:02:ba:7d:2b:32:98:a8:29:f8:84:44:19:2d:44:b4:06:
         cc:b2:d8:3b:78:91:0d:5c:46:7b:93:fd:62:a8:41:4a:06:32:
         7f:58:30:51:ec:77:1d:10:1d:a8:c9:35:d6:d3:2f:ab:fc:67:
         99:8a:0c:75:05:36:03:91:1e:b7:e8:4e:3a:3c:33:4d:fd:d1:
         6a:93:ae:f4:47:ca:a3:16:29:77:99:15:80:25:05:6b:3c:56:
         92:2d:6a:45:d9:ec:33:87:cd:ea:a4:ed:ec:64:c1:1c:5a:e6:
         53:4b:78:19:d5:72:e8:62:46:da:32:dc:65:cd:32:8a:1d:00:
         bc:70:2f:c0:81:6b:f6:a7:fb:9d:b3:78:23:fe:ee:6f:61:d8:
         16:c3:42:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9yx0fmTeZs4fBCTjrJ1ALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGY5YTY3MWJjZjE3ODljMWI1YWMzNjMwYzc0MWJlNTYw
ZGFkYTAwHhcNMjYwMTAyMDgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjJlNTVjNjk4ZmMwYTlmMmU1MDg5MGUyMmE2MmNjOGYyMDlhN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZy08nXz4uAhmATGdUnNt6lwm9hX
o4kgCZxYmU5k6ohDN+fiocceiw/ibhasRwy38IiBPQWARWC6fInM9vPfURcHX9W/
2hU1j8kD1Z/whQQfAABEhCg7+2vZIschKkUK858H5Cx7z1BK8Sq3xGZD9A8YXFPX
HZjoCh74LyGREQyGIuSFYOz/X6k78JscXdHGFhnlytLhPHDSH15YHEBDcJcSKeml
kz1ny8C8VhDdNOxTqW47Ycr5gyD6kDFa1DZieefwzRRXLRVafzK6RqXjE4AjehTy
M707nBuTYXP0oH4MuJXWVMDjlY+Yx859HCvyT3BhmEmtOAzczXmTiQmu0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH8uVcaY/AqfLlCJDiKmLMjyCafaMB8GA1UdIwQY
MBaAFN7fmmcbzxeJwbWsNjDHQb5WDa2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUt
Nzc2NjA1MDFjNDc4LzEvZnk1VnhwajhDcDh1VUlrT0lxWXN5UElKcDlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUtNzc2NjA1MDFjNDc4
LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRBnMA0G
CSqGSIb3DQEBCwUAA4IBAQB1CHUNQxuOrt+m+TrLub3CPCegmmSA2G7eNpHl+hMX
4k8M/RlepksYW3HeITEhXFUYTCsIO6mFNY2hpimanqfYsIlF/Gh4m8B5kyj+xL2m
rOTSR1uS3CmT2ciJhZ/2C+IQopiIOVf8HfQ6crDRpgK6fSsymKgp+IREGS1EtAbM
stg7eJENXEZ7k/1iqEFKBjJ/WDBR7HcdEB2oyTXW0y+r/GeZigx1BTYDkR636E46
PDNN/dFqk670R8qjFil3mRWAJQVrPFaSLWpF2ewzh83qpO3sZMEcWuZTS3gZ1XLo
YkbaMtxlzTKKHQC8cC/AgWv2p/uds3gj/u5vYdgWw0J+
-----END CERTIFICATE-----
Generated at Tue Feb 10 05:55:06 2026 by rpki-client