This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/_gW6_ATArxZNHvgaWQ05KuNKBX0.roa
File:                     _gW6_ATArxZNHvgaWQ05KuNKBX0.roa (raw, json)
Hash identifier:          dFaWNsbS79y0+AVBCBe7DvN6VorOmUFS6jQbSvd7JW4=
Subject key identifier:   FE:05:BA:FC:04:C0:AF:16:4D:1E:F8:1A:59:0D:39:2A:E3:4A:05:7D
Certificate issuer:       /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial:       019B7B36684CEF975DD0AB31771AD437C23B
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/_gW6_ATArxZNHvgaWQ05KuNKBX0.roa
Signing time:             Thu 01 Jan 2026 20:18:41 +0000
ROA not before:           Thu 01 Jan 2026 20:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44127
IP address blocks:        195.93.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:68:4c:ef:97:5d:d0:ab:31:77:1a:d4:37:c2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
        Validity
            Not Before: Jan  1 20:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fe05bafc04c0af164d1ef81a590d392ae34a057d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:20:5d:ea:db:9a:8a:56:3a:a7:c6:ff:0a:51:
                    51:7f:37:c6:db:20:30:02:c9:57:58:07:28:63:53:
                    60:06:7b:2b:4f:58:2e:16:32:83:3f:92:91:a2:dd:
                    9c:d9:ee:4d:df:f6:ab:33:61:77:e9:82:ad:7b:b1:
                    d6:d6:00:9b:14:9f:ec:b6:5f:42:0d:77:0d:0c:11:
                    f9:ba:17:24:eb:ba:a3:cb:65:94:14:9f:97:99:b5:
                    49:35:57:96:0a:4e:1e:97:fc:62:a0:ab:ad:28:5c:
                    05:ad:9a:bb:1b:4b:e6:65:d2:64:61:26:53:6c:22:
                    e0:2a:d7:53:3e:39:f9:7a:15:8c:22:af:ce:c2:c6:
                    9b:5f:53:b0:c8:c0:28:16:3e:bb:ca:bd:12:3d:47:
                    6f:6b:79:6f:d7:bf:d8:33:94:f3:ce:01:ad:52:85:
                    7b:21:a9:c3:57:4d:fc:55:c1:8e:31:e9:cb:a6:c2:
                    0a:04:e6:91:81:4d:52:1b:1b:df:6b:d8:ce:f7:57:
                    c8:f6:39:a1:8d:27:47:84:d6:bf:2f:1a:67:f0:8a:
                    fe:5a:40:c1:ae:2f:7e:28:40:96:eb:b6:31:2b:31:
                    bc:8a:d9:a9:21:70:0a:c6:e7:0e:ca:53:cc:25:1c:
                    72:c4:56:3c:ae:34:2d:e2:c8:b1:3b:e7:f7:7b:e5:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:05:BA:FC:04:C0:AF:16:4D:1E:F8:1A:59:0D:39:2A:E3:4A:05:7D
            X509v3 Authority Key Identifier:
                keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/_gW6_ATArxZNHvgaWQ05KuNKBX0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.93.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:2c:a1:d6:6f:76:ab:07:a5:12:b9:27:c2:08:09:2e:e2:ca:
         5d:4b:1b:27:d6:88:e9:3b:5c:fa:98:bf:9a:57:92:a7:02:93:
         26:94:87:15:40:f4:8e:3d:ee:14:9b:96:dd:ae:9c:28:ae:bc:
         75:30:8b:ef:9c:96:d1:f9:ff:f7:c8:2b:06:53:8d:e2:2e:b4:
         2c:96:f9:8f:9b:68:d7:7f:37:21:dc:ea:3b:65:bf:3a:49:79:
         35:f5:cc:6b:27:17:ff:7b:a3:aa:6c:ad:16:8c:c1:9f:ca:7e:
         eb:28:ba:72:5e:48:76:64:6b:6c:95:33:55:5e:52:1c:49:f5:
         69:2f:9d:12:a9:d1:22:6c:c4:a2:3e:9c:b2:68:4d:7b:ac:5f:
         78:d1:f2:ec:3e:84:28:d0:af:77:21:16:5f:8f:7d:17:a9:3b:
         4f:61:fe:39:77:ed:79:15:54:bd:89:77:b4:ef:22:81:08:19:
         47:db:9c:ab:e4:84:ae:4b:77:40:b7:fa:10:27:44:a4:8a:0a:
         d9:2a:1d:e3:3a:09:f9:3a:ff:4d:ca:c3:5b:ba:a6:6d:da:2b:
         c0:1f:a3:67:7f:83:83:75:1e:a5:18:49:73:6e:69:bf:6c:97:
         e3:d9:f7:21:d4:a5:f2:d8:65:ff:da:6f:16:c4:27:3c:f5:c7:
         51:d4:84:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:09 2026 by rpki-client