This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/S3c1kJbk90AG-TvEYnQ3FInajlA.roa
File:                     S3c1kJbk90AG-TvEYnQ3FInajlA.roa (raw, json)
Hash identifier:          qf58vrU6QtyjdTNpb5V9EiRabiFulA8d1+PfNRFARrI=
Subject key identifier:   4B:77:35:90:96:E4:F7:40:06:F9:3B:C4:62:74:37:14:89:DA:8E:50
Certificate issuer:       /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial:       019B7FF22EA54E631FA91763ED6BE2BFAC9A
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/S3c1kJbk90AG-TvEYnQ3FInajlA.roa
Signing time:             Fri 02 Jan 2026 18:22:16 +0000
ROA not before:           Fri 02 Jan 2026 18:22:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     21430
IP address blocks:        96.9.126.0/24 maxlen: 24
                          2a14:a480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:2e:a5:4e:63:1f:a9:17:63:ed:6b:e2:bf:ac:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
        Validity
            Not Before: Jan  2 18:22:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4b77359096e4f74006f93bc46274371489da8e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:35:16:b8:43:21:53:5a:aa:46:be:e4:d4:cc:
                    a8:89:ae:23:f8:2e:1c:23:f5:56:3e:a8:cf:cb:7e:
                    1e:bd:2b:52:a0:e5:d0:85:85:59:e1:4d:0a:9d:bf:
                    d8:24:60:17:af:d7:ae:e1:4f:da:e1:84:79:0f:c6:
                    a3:10:a9:2f:f7:42:dc:4c:88:48:65:bd:dd:33:5e:
                    f7:0a:e5:25:a9:4f:09:8d:51:88:fc:59:0d:a9:f2:
                    0e:74:ff:cb:cc:32:bb:65:d7:97:70:42:36:b5:f3:
                    93:48:36:03:4c:65:2c:12:39:d4:ad:99:9f:52:9f:
                    3f:d7:f8:c1:27:fa:25:e3:1e:8d:4e:e8:2e:e0:fc:
                    21:40:16:28:bb:31:ef:88:17:78:76:0b:50:09:3e:
                    fe:95:65:a4:90:a6:e2:2c:a0:e9:e3:e6:e8:4f:46:
                    68:f8:af:bc:49:60:0c:33:20:71:be:70:ee:1e:3c:
                    a3:2e:cc:15:ff:86:96:33:64:b7:d7:91:45:59:51:
                    92:10:33:5d:26:f5:d0:e6:d9:a8:4d:27:13:af:81:
                    36:9c:1a:5c:0f:8c:2b:eb:0c:c3:4a:af:ad:ee:fe:
                    e9:26:d6:5e:0e:33:eb:2c:1b:e4:5f:b4:74:8f:19:
                    a9:92:bb:e7:ac:ac:d4:62:f1:56:57:cc:2c:90:21:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:77:35:90:96:E4:F7:40:06:F9:3B:C4:62:74:37:14:89:DA:8E:50
            X509v3 Authority Key Identifier:
                keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/S3c1kJbk90AG-TvEYnQ3FInajlA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.9.126.0/24
                IPv6:
                  2a14:a480::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:7e:36:75:c1:be:c2:91:ce:11:2b:f0:50:43:d9:7c:7f:f1:
         83:66:05:50:63:57:6a:e6:3b:58:06:cd:09:5f:71:e4:32:0a:
         2e:58:49:f2:2c:4f:27:c4:bb:59:cb:5b:26:cf:5f:a6:e1:40:
         15:e0:a4:81:54:d4:35:82:c7:1d:98:5d:2e:d4:e1:7e:57:55:
         09:e6:ae:32:7f:11:e6:60:01:2f:0a:d3:4b:c6:45:93:d5:82:
         85:a8:5c:22:74:f0:18:ee:ae:fa:3b:a8:4f:e7:bd:f7:88:69:
         01:e2:44:b9:dd:12:8a:93:52:a0:58:39:f3:4d:88:5b:5a:5d:
         2d:43:f6:a0:85:ad:69:21:99:e8:8a:5a:4d:08:99:6d:f8:ba:
         0f:40:94:10:86:b3:a5:21:19:9d:3c:6e:24:75:c6:81:42:b6:
         d5:a0:9c:5c:34:d1:55:a7:d9:00:69:33:65:fd:a0:04:c0:75:
         51:57:15:1c:98:33:3c:8c:18:b2:b2:ca:80:86:c0:00:cd:cf:
         c9:9f:8a:1b:a5:d3:9b:d5:05:68:32:b3:58:8f:2b:1a:e5:4f:
         be:15:f6:ec:38:b7:18:cf:83:e8:71:95:e1:38:2c:72:62:df:
         5f:26:73:31:f5:9d:0a:6f:8e:89:75:bc:15:21:29:42:22:04:
         0d:39:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:23:43 2026 by rpki-client