This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/aS1ACilZRTqrbOcoV0BzU5rsa0s.roa
File:                     aS1ACilZRTqrbOcoV0BzU5rsa0s.roa (raw, json)
Hash identifier:          9Yo0a2cgZRu9PRv1j6tfX41H+k9FzWqSbGbTCe992JA=
Subject key identifier:   69:2D:40:0A:29:59:45:3A:AB:6C:E7:28:57:40:73:53:9A:EC:6B:4B
Certificate issuer:       /CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458
Certificate serial:       019B78A21D49EC46088DB14B369EDECCB596
Authority key identifier: 96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/aS1ACilZRTqrbOcoV0BzU5rsa0s.roa
Signing time:             Thu 01 Jan 2026 08:17:28 +0000
ROA not before:           Thu 01 Jan 2026 08:17:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29641
IP address blocks:        193.8.106.0/23 maxlen: 23
                          193.8.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:1d:49:ec:46:08:8d:b1:4b:36:9e:de:cc:b5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960c6d787e6b5eb64248dd9a7a1065b1053f7458
        Validity
            Not Before: Jan  1 08:17:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=692d400a2959453aab6ce728574073539aec6b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f1:54:dc:39:97:16:90:1d:51:9a:5a:44:98:
                    fa:50:18:c9:d7:0d:77:ef:f7:79:56:11:49:81:fb:
                    05:e6:35:55:dd:83:5f:56:14:a4:eb:ad:a6:fb:60:
                    a0:d6:46:4e:80:e7:99:2c:d4:f3:f2:9e:ac:82:2d:
                    11:49:01:a1:0f:55:60:75:04:63:f5:54:87:2b:22:
                    72:03:c4:96:b4:a8:fe:27:94:64:ff:2f:8f:9c:55:
                    2d:e6:1d:47:48:8b:e1:df:aa:47:63:7b:a9:00:8f:
                    dd:74:6d:f3:5a:0d:d7:be:98:96:4f:bc:80:6c:49:
                    d4:a7:57:e4:fa:2c:d8:db:3c:1f:d0:4f:92:1b:5a:
                    83:54:2a:07:ef:b2:0e:f3:d8:3e:b8:40:c9:fd:cf:
                    98:d5:82:d4:c9:a1:ed:8d:ec:a5:44:0b:2f:56:6b:
                    30:b4:6e:8d:df:f2:8b:7f:4a:67:64:75:7c:6f:37:
                    05:df:64:34:6a:24:b7:f3:44:7a:2b:50:01:ce:03:
                    38:a1:22:97:7f:29:24:8e:04:79:59:0a:a9:c2:e4:
                    49:22:80:dd:81:fc:85:e1:18:d5:84:33:c3:b5:6f:
                    60:b7:3e:e3:26:d0:ab:2f:ef:0c:44:b3:f3:8c:3e:
                    84:76:a5:b2:4b:5c:3f:a6:07:13:1d:26:6e:b5:f6:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2D:40:0A:29:59:45:3A:AB:6C:E7:28:57:40:73:53:9A:EC:6B:4B
            X509v3 Authority Key Identifier:
                keyid:96:0C:6D:78:7E:6B:5E:B6:42:48:DD:9A:7A:10:65:B1:05:3F:74:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgxteH5rXrZCSN2aehBlsQU_dFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/aS1ACilZRTqrbOcoV0BzU5rsa0s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/05ab16-2228-488e-b152-eb0921895714/1/lgxteH5rXrZCSN2aehBlsQU_dFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.106.0-193.8.109.255

    Signature Algorithm: sha256WithRSAEncryption
         88:ae:f6:34:a1:6e:6f:90:05:f3:4e:cb:49:b8:19:ce:aa:1c:
         c8:ef:e2:34:8f:11:e9:6f:09:df:76:14:f6:72:35:2a:43:a5:
         b2:ed:b2:1a:cd:11:03:b6:c3:b5:62:70:e7:d0:b0:a5:be:94:
         19:ac:0d:f8:31:27:7d:8b:54:b5:75:5d:04:f7:d5:80:cf:82:
         48:7d:3d:43:7b:4b:89:1a:87:53:5e:15:20:8c:c2:f0:16:43:
         d7:99:35:6b:d6:74:7b:0b:11:6d:c6:9e:ad:1e:21:df:d8:06:
         99:61:b8:b5:cf:9a:ac:1a:95:63:9f:11:da:fd:b0:ac:49:24:
         81:24:23:c2:2e:c7:90:64:ed:32:5b:c6:ff:68:32:c0:a0:7f:
         73:7e:04:c6:b8:18:c0:78:bc:3f:22:c7:39:19:ed:40:3b:70:
         a7:2b:f1:ef:5f:b5:38:d6:52:10:92:f4:c8:07:e1:97:e3:19:
         c3:64:8f:52:68:c9:da:08:aa:dd:b0:2a:c4:dd:d4:43:d1:22:
         e4:73:e0:6b:08:10:b7:ed:67:10:34:db:05:e5:9c:84:2f:1f:
         fe:36:e8:0d:bb:e7:59:3b:0c:39:8e:61:c2:e2:e9:f3:15:4f:
         da:d7:3e:60:ea:2f:be:8c:fc:69:24:b8:be:db:54:1c:7e:d6:
         aa:ba:c5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:43:01 2026 by rpki-client