This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/dCiOeRkpSuZVBvBHJ0Lxc8zRp5g.roa
File:                     dCiOeRkpSuZVBvBHJ0Lxc8zRp5g.roa (raw, json)
Hash identifier:          x8CtoyQL2Hjjdaplub12VkRqDXEO1pw4zhwQndzYIcQ=
Subject key identifier:   74:28:8E:79:19:29:4A:E6:55:06:F0:47:27:42:F1:73:CC:D1:A7:98
Certificate issuer:       /CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Certificate serial:       019B77596963811D31E11DAC75690EDDFC20
Authority key identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/dCiOeRkpSuZVBvBHJ0Lxc8zRp5g.roa
Signing time:             Thu 01 Jan 2026 02:18:26 +0000
ROA not before:           Thu 01 Jan 2026 02:18:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211045
IP address blocks:        194.31.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:69:63:81:1d:31:e1:1d:ac:75:69:0e:dd:fc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0039f741686da11e79ae7c5e486aa290808cb1b7
        Validity
            Not Before: Jan  1 02:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=74288e7919294ae65506f0472742f173ccd1a798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:5f:3c:33:a4:7a:1e:36:b2:f3:26:b1:c3:
                    a8:1b:28:a2:6c:47:70:cc:49:a4:97:b9:3b:64:2e:
                    ae:6c:d6:74:6f:da:49:b5:46:58:7e:0d:28:29:c1:
                    c1:e7:1f:80:6f:8e:94:af:aa:94:bd:52:a1:80:08:
                    2f:07:61:c2:76:f5:db:25:a1:ff:96:5d:25:e5:ec:
                    c7:7d:c6:9c:e3:e2:b8:1e:6c:6a:4b:51:fd:96:d5:
                    6b:31:68:15:bd:d8:a2:73:92:2a:78:3d:ee:d3:4a:
                    1a:62:e6:7e:25:1a:5e:52:c7:87:fa:b5:93:f8:e8:
                    f8:e9:85:ef:75:a7:9e:b5:84:76:3a:fd:3a:c1:60:
                    43:35:f1:05:4c:65:31:b6:f7:31:f6:c9:88:83:bd:
                    9c:71:bc:39:f6:d8:81:de:1a:b8:a2:98:ad:57:13:
                    d4:fa:08:3d:48:25:4e:22:ea:10:79:75:49:3d:5f:
                    37:f5:6c:34:11:b7:1c:f4:bd:a6:59:59:dd:9c:98:
                    b8:3f:34:32:45:bd:19:2d:fb:7b:2f:c7:98:06:3c:
                    8f:d6:4f:4f:e6:dc:21:04:d6:95:01:2f:2f:95:73:
                    85:b4:54:2c:a2:70:2b:99:ba:0f:34:a8:02:06:89:
                    e9:0c:5a:6b:f3:ea:20:70:fa:a7:44:ac:6f:37:b0:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:28:8E:79:19:29:4A:E6:55:06:F0:47:27:42:F1:73:CC:D1:A7:98
            X509v3 Authority Key Identifier:
                keyid:00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/dCiOeRkpSuZVBvBHJ0Lxc8zRp5g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.31.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:ee:34:9b:2d:f8:f5:99:4c:14:23:55:b8:16:5e:59:c0:3b:
         61:ab:ce:e2:e2:1d:46:1c:46:30:e5:3c:6c:76:f5:ec:5e:ec:
         ab:e7:38:7e:36:59:85:83:31:b1:4b:72:9c:76:58:26:66:f6:
         b3:57:cd:ca:1e:6f:94:52:78:a9:18:be:5b:82:68:2e:45:36:
         17:cc:6b:23:34:47:e6:9d:15:32:57:19:e7:bc:43:42:25:7a:
         24:e2:8b:6c:74:53:a8:40:33:8a:fc:23:58:e6:eb:9f:47:a5:
         5e:5a:fe:b8:97:db:87:61:2f:6c:fa:ac:f8:79:a6:18:73:99:
         fe:17:f5:85:00:5f:86:44:a6:7d:8e:03:b1:d7:f4:e5:8c:56:
         89:7d:d6:b5:71:29:fa:e1:e6:7f:c1:d8:f9:6e:a0:15:f7:48:
         59:ee:5d:77:b5:ef:96:61:c9:d6:e3:43:60:92:44:34:cf:c9:
         29:52:50:c9:5c:ac:c1:c6:24:a5:6e:3a:92:22:54:40:b9:68:
         0f:2c:d8:f8:f2:de:0e:21:f9:ec:19:e1:17:62:be:2a:66:32:
         68:9e:79:96:b5:6f:ce:5b:5f:00:14:07:94:7e:70:a4:45:30:
         63:2d:f6:f7:4c:d9:3a:d5:4f:e2:2c:51:08:91:0c:76:24:e1:
         70:fc:21:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:30:39 2026 by rpki-client