This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/TKAcyjW-K2fMWFteP_AgVE5Sf58.roa
File:                     TKAcyjW-K2fMWFteP_AgVE5Sf58.roa (raw, json)
Hash identifier:          EQ/0GqnYlDDezTnOJGpjIfUWvXw1RICNNg5+3Mf+uqg=
Subject key identifier:   4C:A0:1C:CA:35:BE:2B:67:CC:58:5B:5E:3F:F0:20:54:4E:52:7F:9F
Certificate issuer:       /CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Certificate serial:       019B797EFCFCC6AEE1318C480A45F30DE4C5
Authority key identifier: 27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/TKAcyjW-K2fMWFteP_AgVE5Sf58.roa
Signing time:             Thu 01 Jan 2026 12:18:44 +0000
ROA not before:           Thu 01 Jan 2026 12:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212983
IP address blocks:        2001:67c:1308::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:fc:fc:c6:ae:e1:31:8c:48:0a:45:f3:0d:e4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
        Validity
            Not Before: Jan  1 12:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4ca01cca35be2b67cc585b5e3ff020544e527f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d0:14:fb:7c:1b:a0:0a:67:1e:41:bf:60:3a:
                    46:6c:0f:60:56:8c:8b:1c:22:eb:db:0a:de:04:19:
                    c3:28:7e:b3:5c:c6:cf:02:85:7d:1e:25:f9:a8:21:
                    54:5b:30:74:0e:5b:84:92:30:c4:a7:9d:94:99:b7:
                    e2:eb:60:e3:1c:e5:c2:73:41:2d:37:91:f4:0c:1a:
                    7f:6c:61:18:00:9d:69:f1:1d:c9:66:18:e1:fb:9d:
                    99:a6:ce:48:36:4e:ed:4a:5e:72:23:cc:49:f8:27:
                    54:7b:4a:ff:12:ea:51:3e:06:98:2b:94:43:82:51:
                    8b:8a:14:8f:2e:ee:80:91:4c:f3:74:5c:95:25:49:
                    4a:d8:dd:c4:75:68:de:32:6b:17:7f:a2:16:73:97:
                    76:93:8c:30:3a:5b:75:03:4d:36:d3:37:9f:bf:a2:
                    7a:da:ae:98:8e:51:c8:8f:ba:f9:ab:2b:f4:33:ae:
                    95:b4:f6:ba:99:10:1e:c5:b5:09:f7:da:1f:d3:e6:
                    69:fa:1d:25:85:15:31:72:24:f8:21:27:64:e2:2e:
                    e7:bc:55:76:e0:5a:f8:06:9b:af:f0:1b:76:2a:e0:
                    d6:35:83:23:0c:a3:37:0c:9d:08:8f:66:fb:5d:c1:
                    c0:4b:a2:58:37:ec:72:62:44:1c:ad:f4:9a:42:5f:
                    4b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A0:1C:CA:35:BE:2B:67:CC:58:5B:5E:3F:F0:20:54:4E:52:7F:9F
            X509v3 Authority Key Identifier:
                keyid:27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/TKAcyjW-K2fMWFteP_AgVE5Sf58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1308::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:f8:3b:2d:ae:40:a2:1e:57:82:bb:af:e1:14:af:47:16:e8:
         12:94:46:95:f5:ff:10:7a:82:f9:c4:09:82:22:4c:36:40:68:
         56:e4:39:e4:9d:12:87:01:f8:5c:88:f1:b7:03:bd:f2:07:7a:
         cd:f6:e9:65:80:a9:55:07:36:76:ba:53:ad:f9:1a:94:79:d0:
         62:c7:ba:3e:58:6d:4b:3e:0e:e3:b5:49:d0:e0:42:ba:58:d9:
         2a:86:0e:56:7e:f1:1e:17:82:15:f1:3d:4f:ec:55:83:31:a0:
         4d:e2:74:09:31:d9:cd:64:ad:01:57:4c:c8:2e:51:76:bd:cd:
         9d:c9:bb:be:3f:52:03:6f:9a:8d:6a:15:3b:51:08:18:32:45:
         ea:7b:9f:87:6c:7d:10:ed:1d:5a:6e:d0:d1:3e:bf:4a:17:07:
         20:5d:b7:2d:0c:c4:17:9b:2e:db:f5:7c:96:a3:77:a8:17:3a:
         f2:a7:b5:08:12:0c:05:38:ff:84:bb:5d:86:1d:52:e0:20:7c:
         37:6f:27:ba:28:69:16:8b:bc:75:58:5d:bd:bc:96:98:af:1a:
         be:43:66:bc:a7:48:dd:63:4c:d9:55:dc:d3:20:2a:47:31:ce:
         47:1c:cb:9a:c2:c5:68:11:7b:87:a8:d4:68:75:5a:df:1a:a5:
         82:42:2a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 12:27:27 2026 by rpki-client