This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/Hsna_TRszov1J0VZLOsHUlP-JlM.roa
File:                     Hsna_TRszov1J0VZLOsHUlP-JlM.roa (raw, json)
Hash identifier:          0oVhD+Hpu4+17JAWqPaWb9VuKSEGIj0vezDUmaIt7EQ=
Subject key identifier:   1E:C9:DA:FD:34:6C:CE:8B:F5:27:45:59:2C:EB:07:52:53:FE:26:53
Certificate issuer:       /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial:       019B7BA364E7C341D8023B50C5575F39EEC8
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/Hsna_TRszov1J0VZLOsHUlP-JlM.roa
Signing time:             Thu 01 Jan 2026 22:17:44 +0000
ROA not before:           Thu 01 Jan 2026 22:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     55154
IP address blocks:        2a14:1740::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:64:e7:c3:41:d8:02:3b:50:c5:57:5f:39:ee:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
        Validity
            Not Before: Jan  1 22:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1ec9dafd346cce8bf52745592ceb075253fe2653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:74:22:44:aa:6c:fa:10:28:64:7c:38:f1:fe:
                    2c:8f:c6:f3:9a:0c:f2:51:58:6b:9c:4a:17:5f:dc:
                    48:a4:e2:a7:89:a9:5f:42:06:fa:80:eb:96:20:e4:
                    9d:da:65:7a:f3:9a:2a:05:f4:f9:e1:72:d0:7b:3d:
                    ec:0c:bd:64:69:e3:78:e6:69:ea:79:f0:c1:a8:33:
                    59:f8:9d:5f:87:50:c3:4e:be:ee:a0:ad:29:b0:48:
                    a7:09:e4:06:5b:0b:65:d0:12:3e:c0:0b:28:27:24:
                    ba:f2:dd:a0:52:1c:6d:0e:66:b6:56:c3:2f:ea:13:
                    6d:c4:1d:c4:20:53:28:96:c9:43:ff:99:be:81:62:
                    a7:50:88:4e:d0:fd:c9:d9:dc:0a:54:53:d7:a8:35:
                    93:c9:47:8b:92:9c:fc:43:37:99:45:27:6b:8f:c7:
                    ff:45:40:3c:4f:8b:1b:1f:54:f7:d5:6d:9b:19:23:
                    90:38:96:f4:59:67:ee:24:05:44:be:2d:81:08:4a:
                    e5:6e:60:bb:05:98:69:91:d8:c5:83:7b:c5:73:e1:
                    ed:00:32:37:e3:e4:87:a5:fa:d4:6b:77:6e:b0:98:
                    1e:29:3d:90:3a:59:1a:98:c2:1a:c2:bc:83:db:de:
                    20:dc:3f:b9:39:13:1f:01:07:84:bf:e4:d7:a4:66:
                    e6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C9:DA:FD:34:6C:CE:8B:F5:27:45:59:2C:EB:07:52:53:FE:26:53
            X509v3 Authority Key Identifier:
                keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/Hsna_TRszov1J0VZLOsHUlP-JlM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:1740::/29

    Signature Algorithm: sha256WithRSAEncryption
         85:31:73:bf:ee:ec:53:02:bf:50:0a:31:a5:a2:6b:43:48:ac:
         92:e8:99:41:67:03:04:23:0e:a3:43:62:37:c1:a8:b2:ea:cc:
         de:1d:17:b5:22:96:b4:23:36:21:45:66:19:e1:76:75:67:8f:
         ef:7b:e9:ff:90:1d:58:4a:37:df:ae:fc:30:13:de:74:e3:b6:
         2e:33:48:c8:4c:93:af:eb:f6:d8:07:8f:90:a2:a7:ba:29:ef:
         39:57:36:20:56:0e:8b:ce:13:bc:73:40:32:64:8d:99:75:40:
         ad:63:58:da:12:d3:17:6f:c9:d2:9f:0d:87:6a:6d:c7:ed:6c:
         69:14:da:08:58:96:eb:58:79:e1:0c:5d:ff:a1:61:14:61:f9:
         7e:d0:3f:74:55:a4:32:e0:d6:7c:c7:bf:8f:48:78:db:93:c3:
         63:04:1a:e8:69:30:2a:95:6c:65:b4:b5:27:b2:ad:ee:42:5e:
         6d:8d:26:f0:77:2c:60:c0:72:4b:e8:ec:a0:c7:08:2c:52:07:
         87:13:72:40:11:87:b9:b0:ee:de:51:d7:39:c2:7a:44:8e:4e:
         89:7d:5b:7b:e3:36:2e:98:52:64:67:0c:3b:a4:d2:4a:91:b1:
         a7:f5:0f:10:6b:b8:4b:77:4d:58:d3:e3:60:9a:1d:7e:1d:f7:
         5a:8d:29:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:49:41 2026 by rpki-client