This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0C5s6fMBeg2w1rGBwHMCEld3Mz8.roa
File:                     0C5s6fMBeg2w1rGBwHMCEld3Mz8.roa (raw, json)
Hash identifier:          g9BZvqnSneXb+HSdu88/qez88DNGVCobn8fHwlNJ/Zs=
Subject key identifier:   D0:2E:6C:E9:F3:01:7A:0D:B0:D6:B1:81:C0:73:02:12:57:77:33:3F
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       019BF61E2CD23AFE8B15EE06F5BAA103282C
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0C5s6fMBeg2w1rGBwHMCEld3Mz8.roa
Signing time:             Sun 25 Jan 2026 17:05:31 +0000
ROA not before:           Sun 25 Jan 2026 17:05:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216169
IP address blocks:        217.60.240.0/24 maxlen: 24
                          217.60.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 17:07:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1e:2c:d2:3a:fe:8b:15:ee:06:f5:ba:a1:03:28:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Jan 25 17:05:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d02e6ce9f3017a0db0d6b181c07302125777333f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ad:f7:29:cf:40:ff:91:58:13:4a:df:b2:05:
                    3b:00:e8:2d:22:21:91:9e:4b:fb:90:7e:ca:c0:67:
                    54:ea:2b:9c:13:42:b8:0e:eb:c7:c4:e9:80:61:d9:
                    93:a0:d0:0b:7f:b0:77:4d:23:30:8e:9c:4e:c5:e2:
                    88:cc:e8:83:29:8d:4e:d0:8e:1a:11:d0:e1:db:06:
                    25:ae:c4:d9:b9:66:2c:77:c1:0b:5b:44:47:73:0d:
                    60:18:21:73:76:4d:da:25:76:09:71:e6:39:b9:6c:
                    ad:93:b3:b6:25:99:c8:81:cc:d3:3c:55:fb:32:f2:
                    cb:ef:c9:76:85:ab:8b:9f:ac:8a:c1:3a:f1:b2:fa:
                    bf:04:34:05:74:89:d8:af:3c:9f:9e:1a:9d:ee:ec:
                    d7:d2:e7:9e:bc:06:69:e2:0e:51:aa:36:f8:68:d1:
                    f3:6a:f6:4b:a4:b3:07:d7:de:e6:5d:61:f7:95:38:
                    9c:21:64:d9:c3:38:9e:b5:09:86:1e:92:06:92:f4:
                    22:bb:86:bb:42:65:76:5f:e7:3e:d9:d9:35:89:0c:
                    13:80:1f:01:86:e2:ac:2b:cd:a9:6b:a7:c8:8a:04:
                    d9:be:b3:8c:05:f9:9a:d5:5e:98:34:a3:28:e6:ad:
                    09:48:96:cd:96:b1:f0:78:7e:64:ff:42:8a:30:b2:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2E:6C:E9:F3:01:7A:0D:B0:D6:B1:81:C0:73:02:12:57:77:33:3F
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/0C5s6fMBeg2w1rGBwHMCEld3Mz8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.60.240.0/24
                  217.60.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:92:bc:39:f4:5d:f8:79:ad:09:4b:b1:a2:67:bf:90:ed:64:
         ae:6a:cf:6a:5f:fb:9c:89:85:6c:db:64:c1:01:3f:18:e6:0d:
         49:d2:18:a0:81:3c:22:e0:86:82:58:5d:0f:55:84:cc:82:d4:
         4b:dc:2a:fa:ef:4c:00:3c:f2:67:69:72:2f:be:8a:24:2e:39:
         58:66:3c:db:8f:e4:db:9d:28:63:27:52:19:c6:1c:fa:39:ab:
         35:bb:8a:83:df:ad:9b:d8:72:e1:95:2b:9c:24:ac:5b:f9:d7:
         e8:2c:a3:a7:06:c0:fe:ec:1a:c9:42:72:51:f0:36:23:34:57:
         d0:bf:01:f9:e5:a7:a0:ce:db:45:36:09:2a:ca:22:d1:ae:13:
         45:e2:6c:ec:6b:92:28:b5:31:3a:40:50:ae:df:e4:39:02:a1:
         f2:2e:69:15:80:f5:f3:a3:0a:00:09:2c:34:a7:05:44:18:98:
         d6:8e:cf:72:87:15:b8:e3:45:33:90:9e:5c:5b:bb:67:59:f1:
         68:bf:1c:cb:25:c8:2d:b7:4e:a1:17:59:29:c2:6c:d4:9e:c3:
         ed:08:20:02:d8:dd:5c:81:bc:f5:09:cc:c0:2a:88:d6:02:27:
         9f:4e:cf:bd:f0:dd:cd:fa:2c:01:dd:18:f5:a9:3c:4f:f2:00:
         93:78:23:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:03:30 2026 by rpki-client