This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/DCtq5rpTweL4CTROUxWHYxhxK3g.roa
File:                     DCtq5rpTweL4CTROUxWHYxhxK3g.roa (raw, json)
Hash identifier:          CfkL0Qyeh/E+bj/dw2PrSDYV9CbtcLVOF4kKZjE5gXk=
Subject key identifier:   0C:2B:6A:E6:BA:53:C1:E2:F8:09:34:4E:53:15:87:63:18:71:2B:78
Certificate issuer:       /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial:       019B7A5AFD4134D8C525B0B09EDDB9924619
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/DCtq5rpTweL4CTROUxWHYxhxK3g.roa
Signing time:             Thu 01 Jan 2026 16:19:02 +0000
ROA not before:           Thu 01 Jan 2026 16:19:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216012
IP address blocks:        31.202.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:fd:41:34:d8:c5:25:b0:b0:9e:dd:b9:92:46:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
        Validity
            Not Before: Jan  1 16:19:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0c2b6ae6ba53c1e2f809344e5315876318712b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ea:b4:89:ed:17:80:57:02:08:5c:33:66:a4:
                    28:d5:2f:bd:fb:a9:15:ef:ce:8f:7b:9c:6b:b3:a0:
                    94:73:f8:63:d7:de:dd:6b:07:ca:2f:9f:ef:4f:17:
                    53:04:92:af:c9:e1:2a:91:fb:5a:32:26:3b:80:d8:
                    86:bf:95:07:c9:f5:ff:bf:e1:76:bf:c0:90:e4:7c:
                    83:f6:ec:d8:c9:36:e3:1a:c2:38:f2:46:0d:1c:e1:
                    7b:00:76:7b:ec:13:56:7c:47:db:91:82:80:84:e6:
                    56:b4:4e:be:0b:93:60:ee:3b:62:fb:01:7e:f5:a5:
                    ce:b5:28:f8:fb:f1:cd:90:e8:f3:3c:25:00:70:91:
                    90:c2:8a:28:39:e2:4c:fa:65:a3:10:a3:63:f6:0a:
                    67:96:7b:32:aa:3c:17:54:7e:62:e1:04:40:86:e2:
                    7d:49:96:49:be:c1:34:3a:53:66:4f:6c:b2:0b:31:
                    0c:eb:20:ef:ed:a7:d5:a7:e8:a3:70:5e:3f:07:24:
                    f5:c9:b8:c8:53:6c:cc:ed:c0:d5:c9:0c:bc:fd:15:
                    35:6a:e7:c1:cc:0c:27:7a:46:64:d5:2e:1b:c7:6a:
                    92:31:a1:36:79:af:f9:4d:e8:a5:a3:4d:45:85:7e:
                    07:ba:c9:b1:ec:08:3c:49:d4:fc:40:79:3a:9f:e0:
                    0d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2B:6A:E6:BA:53:C1:E2:F8:09:34:4E:53:15:87:63:18:71:2B:78
            X509v3 Authority Key Identifier:
                keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/DCtq5rpTweL4CTROUxWHYxhxK3g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.202.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:f2:5a:4d:c8:09:2f:21:33:73:3a:b3:a4:95:f6:5b:41:53:
         c7:b4:01:86:45:48:0c:f1:ad:0f:72:9a:10:3f:8c:af:52:e8:
         f5:ff:e6:f2:1d:b3:80:e2:11:00:02:7e:23:39:e6:a7:f7:ca:
         ea:0b:b6:65:82:b8:4a:52:2e:82:83:d4:3d:51:79:bd:20:7a:
         56:e8:fe:8c:ba:14:b9:1d:e9:c4:35:76:36:96:dc:0c:83:76:
         53:1b:9a:1e:72:2b:f1:2a:52:13:68:02:d4:a0:cf:42:23:ba:
         d7:bc:42:63:64:a4:12:5e:73:bc:eb:5d:df:27:66:d6:78:20:
         48:cb:ef:95:0a:6f:09:49:54:5a:17:41:95:2c:52:53:84:de:
         79:aa:03:ec:52:c7:fa:00:53:2f:e5:e3:64:f4:4b:0b:6b:6a:
         b1:a7:e4:92:cd:53:f4:9c:e8:e5:4c:7b:80:c5:43:7d:40:04:
         59:39:eb:bc:75:88:b3:9d:e5:4d:da:a7:8a:de:81:cc:21:ba:
         6a:33:a1:29:88:df:6a:6e:d9:d5:8d:20:2e:7a:82:21:cc:77:
         8f:c2:b8:c6:0c:06:77:12:07:c5:c8:c6:58:20:d1:51:3e:6e:
         59:91:0d:76:48:e2:ea:93:25:b3:01:32:7b:ef:f7:43:2d:29:
         6f:94:46:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:39:51 2026 by rpki-client