This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/3E9T9RFa1PZkIhLi3ry8IootMJg.roa
File:                     3E9T9RFa1PZkIhLi3ry8IootMJg.roa (raw, json)
Hash identifier:          bckLvV/Gm52OLV1kFd90y/TjObd2VP8TIpXKSHLQWz4=
Subject key identifier:   DC:4F:53:F5:11:5A:D4:F6:64:22:12:E2:DE:BC:BC:22:8A:2D:30:98
Certificate issuer:       /CN=b795582c73302eb0a974477603049850833bd210
Certificate serial:       019B76EB241131E7E166A4684CEC3730A172
Authority key identifier: B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/3E9T9RFa1PZkIhLi3ry8IootMJg.roa
Signing time:             Thu 01 Jan 2026 00:18:00 +0000
ROA not before:           Thu 01 Jan 2026 00:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206640
IP address blocks:        185.180.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:24:11:31:e7:e1:66:a4:68:4c:ec:37:30:a1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b795582c73302eb0a974477603049850833bd210
        Validity
            Not Before: Jan  1 00:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dc4f53f5115ad4f6642212e2debcbc228a2d3098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:b7:43:25:aa:d5:b1:24:0d:6c:18:6e:96:
                    c0:1c:4b:37:95:f4:5e:03:95:a6:e0:54:41:23:9d:
                    25:30:2c:f8:e1:d1:7c:49:51:59:ec:0b:22:ce:a2:
                    4d:9a:88:4c:9b:46:ff:76:8c:ef:10:31:fb:de:07:
                    f1:00:62:5d:a0:92:2f:36:1f:7b:72:1c:65:a3:fb:
                    0c:17:2f:5f:9b:4c:e1:3a:79:38:be:7e:f4:37:ec:
                    ed:76:31:19:d3:a3:f2:17:61:08:f1:db:b8:10:7e:
                    c6:87:ac:48:04:5f:49:01:c9:b8:17:10:b3:04:1e:
                    df:83:61:58:01:ab:d6:29:2c:a4:69:c1:a9:a6:dc:
                    4c:83:b1:ea:26:e8:a9:8b:3f:ce:e1:34:80:f5:c3:
                    02:37:39:95:a5:f6:a1:20:84:38:48:42:be:b2:df:
                    73:e5:3d:df:8d:fd:8b:1f:77:f9:ce:75:cc:20:92:
                    69:f7:ce:0b:39:c9:06:d2:c8:ef:b2:8b:0f:43:8d:
                    63:d6:d9:37:00:85:a9:8b:0c:83:20:e2:bd:0b:e6:
                    55:5e:e8:cc:cd:bd:66:8c:32:f7:ed:2d:f4:0d:3c:
                    3c:35:7d:e9:02:a4:0f:6c:bb:10:9a:2b:91:87:03:
                    6f:06:5f:c9:9a:ab:b8:0f:67:b1:e8:2c:93:6c:fa:
                    6a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4F:53:F5:11:5A:D4:F6:64:22:12:E2:DE:BC:BC:22:8A:2D:30:98
            X509v3 Authority Key Identifier:
                keyid:B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/3E9T9RFa1PZkIhLi3ry8IootMJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.180.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:b4:27:3e:61:44:6b:a8:f9:ff:44:13:f1:87:57:92:d5:20:
         46:08:ba:7a:97:81:ee:12:b1:fa:de:b4:eb:24:4b:fe:72:c3:
         be:a2:83:7c:59:fc:e6:4d:68:44:9b:22:a3:2e:e6:fc:98:5e:
         0b:dc:ac:2a:32:37:9c:a6:02:fa:49:40:a6:c2:e0:1b:64:f2:
         b3:21:67:37:51:78:ed:0e:91:d5:53:87:e2:f6:98:0e:b1:31:
         11:8c:24:ef:dd:18:86:b9:0d:37:f9:d7:d1:09:39:d4:45:d2:
         a6:1c:c2:0a:dc:bb:fe:d4:d7:5e:a8:cd:6e:17:bb:bc:56:2e:
         6b:4e:f7:aa:a8:f3:aa:92:a5:3a:7d:11:df:52:d3:7c:93:00:
         6e:d4:a1:58:ee:12:ef:49:9b:9f:99:b7:3c:ca:0e:21:92:70:
         13:36:c2:38:33:0c:90:03:84:40:d0:11:36:42:5f:70:15:bb:
         c6:ef:c6:3f:cb:e6:0f:25:16:d8:1b:d0:ba:5e:60:37:f6:d0:
         08:5b:15:9c:13:25:bc:d7:fc:80:77:2f:45:26:ac:66:1b:74:
         c8:74:1b:db:66:43:1a:fb:38:c6:98:99:f8:73:5a:a0:a1:49:
         b8:a6:41:59:26:06:fc:55:8f:d9:02:03:aa:1b:12:47:bd:07:
         5a:c9:7f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:49:17 2026 by rpki-client