This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/IWYrbXuJb7rdaqwraiq_apy6AMA.roa
File:                     IWYrbXuJb7rdaqwraiq_apy6AMA.roa (raw, json)
Hash identifier:          abrxD3L91b+QPLIZVyKImnAT+E+aScHR2G4289W+U4I=
Subject key identifier:   21:66:2B:6D:7B:89:6F:BA:DD:6A:AC:2B:6A:2A:BF:6A:9C:BA:00:C0
Certificate issuer:       /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial:       019B7C12A74B9AB74086C10E3739001E72EA
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/IWYrbXuJb7rdaqwraiq_apy6AMA.roa
Signing time:             Fri 02 Jan 2026 00:19:15 +0000
ROA not before:           Fri 02 Jan 2026 00:19:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42876
IP address blocks:        193.47.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:a7:4b:9a:b7:40:86:c1:0e:37:39:00:1e:72:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
        Validity
            Not Before: Jan  2 00:19:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=21662b6d7b896fbadd6aac2b6a2abf6a9cba00c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:10:1a:ca:18:39:96:de:1a:14:bb:8b:a8:ac:
                    23:8e:e3:e3:37:d8:1e:0b:4f:64:4e:3b:bb:86:04:
                    1f:c8:b4:ec:77:28:53:3a:a7:e4:7d:6a:8f:60:84:
                    b2:63:8b:de:4c:ff:35:e6:16:ac:db:5f:5f:b0:cd:
                    68:7d:14:a4:28:a3:e7:61:68:af:fe:b8:a6:de:b5:
                    49:4d:dc:94:84:33:2a:4a:6a:75:f4:8c:db:0b:1a:
                    09:66:2b:6c:99:e2:31:65:7f:d4:e3:5a:73:74:c2:
                    f7:91:b0:e4:0e:fd:c6:db:f2:c6:92:43:bb:32:19:
                    91:ea:d1:c1:77:19:51:33:b7:8d:cb:bf:38:e1:fe:
                    20:bf:72:12:38:18:ac:20:8b:8d:e8:5e:4f:3d:ed:
                    9f:12:d4:1f:9b:4a:4e:9c:5a:12:3a:8c:dc:13:5d:
                    99:27:30:72:e0:b1:9f:f9:b6:ca:37:72:0c:99:19:
                    27:57:73:fa:28:e3:12:d3:72:17:5d:ac:54:f3:2a:
                    47:0f:4a:15:ea:f8:08:81:cf:d3:22:7d:3b:6f:bd:
                    9a:94:d0:9d:ea:4e:a3:c4:f1:65:7e:63:c0:05:5f:
                    9a:b5:ff:f3:0a:70:4d:51:d3:be:a3:05:26:a8:ad:
                    9c:fd:14:30:a9:61:3c:6f:67:a6:7e:46:45:d2:9c:
                    15:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:66:2B:6D:7B:89:6F:BA:DD:6A:AC:2B:6A:2A:BF:6A:9C:BA:00:C0
            X509v3 Authority Key Identifier:
                keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/IWYrbXuJb7rdaqwraiq_apy6AMA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.47.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:e4:49:0d:d5:4f:1d:76:1a:65:71:1d:64:28:74:48:7f:70:
         65:39:de:1d:70:c0:7f:a8:67:52:5e:24:3a:21:33:b3:30:b1:
         7f:45:1b:68:6e:9f:48:6e:7a:7e:19:34:9c:29:b1:8b:f7:72:
         3b:d1:04:a2:b9:a7:c8:1f:d5:32:56:9d:80:b4:8f:2b:3a:10:
         74:ec:24:7e:8d:ae:7e:7f:c2:16:a2:8f:be:47:07:b5:47:6b:
         d2:94:ce:eb:96:ee:d8:cb:14:8d:7c:92:4a:cb:fd:28:a1:51:
         27:5b:bb:20:81:4a:ee:ea:e4:b2:16:2e:06:32:b1:1e:2e:c4:
         bd:a4:6b:00:b1:7d:78:d3:bf:a3:b2:54:b1:ee:6b:4a:bd:58:
         2a:54:6f:37:b3:41:a8:71:55:9b:df:fc:42:59:f8:95:2a:9e:
         d3:73:a9:88:52:1e:00:ca:30:ed:66:db:a0:6e:ec:2b:b4:a9:
         58:00:21:b5:b5:2a:dd:7b:7f:86:65:3b:d7:50:2e:43:02:e4:
         b9:31:84:fe:f4:d9:9b:f5:eb:28:85:88:56:32:4e:6d:7b:1a:
         90:87:40:10:4c:5b:f2:fe:9e:d9:e1:82:68:c4:16:78:9a:6f:
         25:e8:9c:a6:ab:2a:e3:f6:00:b0:f0:f7:1a:c8:bd:cd:e1:84:
         be:3e:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:41:43 2026 by rpki-client