This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/xXSGrl92krsM_urkQdlEmjIAToI.roa
File:                     xXSGrl92krsM_urkQdlEmjIAToI.roa (raw, json)
Hash identifier:          wQLg7nZor+SidlIxB4lToP07634dxcVXfhFUBua4qFw=
Subject key identifier:   C5:74:86:AE:5F:76:92:BB:0C:FE:EA:E4:41:D9:44:9A:32:00:4E:82
Certificate issuer:       /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial:       019B797F2AD081FC8DC26A704AE3ACC0456F
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/xXSGrl92krsM_urkQdlEmjIAToI.roa
Signing time:             Thu 01 Jan 2026 12:18:55 +0000
ROA not before:           Thu 01 Jan 2026 12:18:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39082
IP address blocks:        195.60.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:2a:d0:81:fc:8d:c2:6a:70:4a:e3:ac:c0:45:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
        Validity
            Not Before: Jan  1 12:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c57486ae5f7692bb0cfeeae441d9449a32004e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:2d:36:86:37:45:bc:f2:41:7e:9e:59:88:
                    b0:ba:b0:ed:b8:77:1f:00:98:f5:51:1a:c9:02:35:
                    7c:ce:b6:32:57:1c:88:32:74:32:e8:a9:64:cd:e1:
                    76:34:59:86:4d:af:ec:09:fa:b9:a6:97:3a:53:10:
                    8e:31:7e:89:2d:8a:c9:2d:a0:ad:3f:e3:80:f1:2e:
                    28:ca:00:92:74:51:ff:4b:56:28:dc:23:5a:22:99:
                    ed:ea:a8:a9:c1:5f:01:58:e3:b5:06:d5:38:3a:14:
                    fc:74:6b:2d:10:3b:5c:e3:e4:bf:b3:08:41:b4:3d:
                    31:f1:91:e7:d9:70:d9:34:af:ba:0c:b8:d0:33:80:
                    5b:bd:f0:09:87:c9:be:75:9e:af:eb:9c:ea:99:77:
                    4f:f1:00:ba:dd:fd:ee:a0:65:97:6b:cd:4c:31:6d:
                    13:4e:5c:be:44:5f:5c:cf:ac:be:22:76:c2:09:99:
                    95:32:2a:64:ea:a1:71:f6:91:fb:9e:87:a1:85:c5:
                    0d:82:eb:b1:ed:af:ce:5f:d5:c4:86:6e:c6:65:ff:
                    21:cf:d8:bf:76:5a:be:c8:2c:51:f1:cd:20:1e:e9:
                    63:58:ee:7f:b5:19:51:a1:73:51:69:43:6a:79:2c:
                    50:93:0a:f8:84:68:a0:7a:62:39:ac:a0:c8:92:da:
                    8b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:74:86:AE:5F:76:92:BB:0C:FE:EA:E4:41:D9:44:9A:32:00:4E:82
            X509v3 Authority Key Identifier:
                keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/xXSGrl92krsM_urkQdlEmjIAToI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.60.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:04:74:b7:81:e9:5f:b4:8d:09:ed:62:9f:bc:79:ce:e6:76:
         39:7b:4a:bb:ca:46:5f:18:93:5b:21:69:0e:21:0e:ef:1e:27:
         59:83:79:03:b4:a7:d5:00:72:17:1d:a0:a9:7e:8c:98:3c:dd:
         a7:71:e4:d1:01:27:da:be:ba:7b:fc:15:54:b4:ad:dd:5f:8e:
         27:0f:be:f2:b1:19:ea:9b:ac:92:78:a5:e6:2c:00:9f:5d:8f:
         c4:63:23:cf:e9:bf:47:74:8e:77:7e:82:33:de:7b:f7:b4:d3:
         56:c3:72:e9:c3:f2:f2:ce:c4:49:2c:5f:b2:d6:e4:9f:b0:1d:
         ac:80:c7:6c:e0:3e:c6:5a:48:d6:d2:54:5a:5b:5e:21:4a:f1:
         b7:75:e3:11:6f:8f:55:ae:17:2c:86:fd:92:7b:72:10:65:12:
         1a:ce:bc:82:46:b8:de:63:00:fc:19:e3:19:50:7d:52:59:cb:
         83:58:09:71:c6:bc:bf:eb:93:5b:0c:72:40:36:ff:73:4f:fe:
         7d:f9:b7:7d:a8:07:8c:31:f3:d5:38:ca:b5:e8:da:50:ae:64:
         e7:36:40:c2:08:14:70:af:f5:04:56:7b:49:f6:fe:fc:8a:9f:
         7e:ad:7d:77:23:d6:91:ff:03:24:e4:a5:07:95:06:df:e0:9c:
         b4:c7:da:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:20 2026 by rpki-client