This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/PSue4eiiw2nCVw1drjwPSALcgXg.roa
File:                     PSue4eiiw2nCVw1drjwPSALcgXg.roa (raw, json)
Hash identifier:          1oP3e5TROxxn5gXpmfRVqjhOwGv4slj/HbiqgPw4q/Y=
Subject key identifier:   3D:2B:9E:E1:E8:A2:C3:69:C2:57:0D:5D:AE:3C:0F:48:02:DC:81:78
Certificate issuer:       /CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Certificate serial:       019B7C80531C6898C4081B7A041AF6B90979
Authority key identifier: 2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/PSue4eiiw2nCVw1drjwPSALcgXg.roa
Signing time:             Fri 02 Jan 2026 02:19:03 +0000
ROA not before:           Fri 02 Jan 2026 02:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197569
IP address blocks:        2001:67c:2f8c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:53:1c:68:98:c4:08:1b:7a:04:1a:f6:b9:09:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
        Validity
            Not Before: Jan  2 02:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3d2b9ee1e8a2c369c2570d5dae3c0f4802dc8178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5f:df:a3:f6:05:e3:0b:95:dd:8c:6a:cd:b1:
                    fa:b4:be:5d:fe:ce:94:1b:d1:28:2e:e5:10:8d:82:
                    a7:d1:46:62:c6:ec:92:39:bf:66:59:c5:05:0c:44:
                    d6:36:f7:c9:b4:3a:9f:51:73:a2:42:5c:bc:97:82:
                    54:4c:4c:4d:89:15:15:68:73:38:46:78:5a:fe:31:
                    56:74:ef:58:39:76:61:4b:07:e6:d7:1e:53:91:bc:
                    f3:ca:96:a9:d9:fa:bc:32:96:37:37:61:19:a4:b9:
                    77:ee:62:3e:5f:c1:b8:61:eb:69:62:79:ba:93:44:
                    2d:0c:84:48:e1:ca:e3:87:6b:c8:42:ec:df:c0:18:
                    5c:30:ba:8f:cf:36:a7:5c:76:fa:dd:80:42:6f:b9:
                    4b:3f:0c:9d:54:df:58:b6:f4:29:1d:86:6f:e5:7e:
                    b1:1d:10:90:75:1b:70:2c:fd:0c:a6:ac:8c:d5:d1:
                    51:4a:20:09:c7:af:53:a5:85:57:c7:fe:82:ff:9c:
                    6f:ea:9f:0b:21:47:bc:6b:1d:e5:7d:8c:a3:da:57:
                    9c:cc:73:70:6e:0d:b2:b3:9f:03:39:72:73:50:b7:
                    8c:44:50:fb:4c:0f:f7:e7:1a:d3:9f:df:57:67:1e:
                    06:72:e9:5d:9f:a5:6d:44:36:ed:54:5e:40:d4:d0:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2B:9E:E1:E8:A2:C3:69:C2:57:0D:5D:AE:3C:0F:48:02:DC:81:78
            X509v3 Authority Key Identifier:
                keyid:2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/PSue4eiiw2nCVw1drjwPSALcgXg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2f8c::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:f2:dc:d8:49:a7:0a:dd:91:56:b4:0b:d0:86:3b:cb:d9:dd:
         b9:f8:0a:29:2f:08:1e:99:c4:42:33:05:a7:e3:85:02:a9:cb:
         a2:b1:f1:4c:21:b3:b7:c5:87:f4:49:05:13:ab:b2:b8:9e:3f:
         65:12:6f:f0:c2:90:d9:03:88:08:ea:0d:90:7e:1a:0c:d0:d1:
         82:32:fc:8e:ff:fc:b4:99:01:0c:18:1e:a8:7c:29:c4:15:47:
         c5:d9:dd:68:7c:93:09:69:5b:cb:48:8a:9c:20:91:e7:e2:c3:
         e4:d2:3b:35:85:d6:e8:0e:60:7c:9f:b0:e9:04:1e:bb:e4:51:
         36:50:86:87:d5:f2:e0:3f:39:4a:12:9a:fa:61:5c:f3:a8:14:
         a2:7e:53:86:bb:f4:e1:dd:a3:1d:af:df:2e:c5:8d:65:72:2b:
         cc:07:f1:35:2e:b4:f2:b3:87:47:ac:ab:02:49:d7:75:b5:4c:
         f5:0f:87:0e:b8:41:51:b5:68:29:e3:a2:23:4f:17:67:be:28:
         ba:2c:e1:3c:ae:ce:e1:43:8a:67:d3:eb:bd:4d:99:e4:05:a3:
         54:51:c3:43:11:c5:eb:23:05:01:8b:18:54:76:a2:4c:0e:f8:
         ae:8d:80:f1:d7:73:fa:08:bd:79:07:2a:46:9d:ef:81:47:d3:
         34:60:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:59:31 2026 by rpki-client