This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/Rm3DWdCGv6N3AGtlgwwUaBhNvo8.roa
File:                     Rm3DWdCGv6N3AGtlgwwUaBhNvo8.roa (raw, json)
Hash identifier:          mKMA8v5enBshub8zpH+FWCvpU25kENVUShbbazleOWE=
Subject key identifier:   46:6D:C3:59:D0:86:BF:A3:77:00:6B:65:83:0C:14:68:18:4D:BE:8F
Certificate issuer:       /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial:       019B7DCB2894304BAE2972B869B76C01FA42
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/Rm3DWdCGv6N3AGtlgwwUaBhNvo8.roa
Signing time:             Fri 02 Jan 2026 08:20:24 +0000
ROA not before:           Fri 02 Jan 2026 08:20:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47599
IP address blocks:        193.203.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 08:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:28:94:30:4b:ae:29:72:b8:69:b7:6c:01:fa:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
        Validity
            Not Before: Jan  2 08:20:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=466dc359d086bfa377006b65830c1468184dbe8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:46:b1:9a:45:a1:38:fd:5c:73:ff:9b:39:24:
                    10:58:eb:ef:aa:fa:4c:86:24:35:02:90:60:0f:ce:
                    d5:36:f2:82:fd:f3:e4:a7:b1:06:46:3d:5c:77:38:
                    b5:fa:db:36:28:db:aa:d2:50:da:fa:9c:da:d0:26:
                    ed:bd:30:3c:5a:81:73:57:63:3a:31:ce:b7:26:ca:
                    cd:cf:0c:40:58:2b:8a:fa:97:97:74:ac:34:17:62:
                    d2:d6:94:59:6f:30:d0:52:d2:56:7a:e1:18:85:c9:
                    d4:0e:f1:f8:64:a9:e0:b5:af:28:06:91:97:16:1d:
                    59:d7:ed:e0:fb:6e:2d:86:10:a9:28:4f:54:da:72:
                    da:f4:71:58:65:0d:e0:86:1e:14:7a:98:49:13:a5:
                    d2:c1:1e:e6:9d:cb:0a:70:96:3a:9c:2f:eb:c0:12:
                    d8:59:46:d3:46:12:72:6f:75:cd:af:53:10:a4:15:
                    3c:fe:71:09:bd:ab:22:b5:a7:ce:72:c4:f5:ed:9c:
                    aa:2b:24:46:57:50:bd:a9:35:54:5e:ca:02:f2:7e:
                    dd:a5:13:e9:42:32:c6:09:52:9c:78:4c:57:63:9f:
                    9f:1a:e2:d1:09:c2:ca:12:0e:51:ff:55:c4:f3:73:
                    50:69:44:89:e4:43:02:06:c0:91:ca:67:f6:b7:dd:
                    43:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6D:C3:59:D0:86:BF:A3:77:00:6B:65:83:0C:14:68:18:4D:BE:8F
            X509v3 Authority Key Identifier:
                keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/Rm3DWdCGv6N3AGtlgwwUaBhNvo8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:9f:a6:c7:c9:d9:9b:5c:e6:78:b5:43:3f:de:d6:63:28:33:
         18:0b:62:a2:7a:ec:ce:bf:83:e5:26:94:05:75:0e:32:3e:d1:
         da:97:92:dc:80:d5:ef:be:f9:82:c4:45:b2:14:b8:dd:bb:ab:
         78:40:e8:5d:e9:32:3a:c5:b6:2d:75:3b:33:07:f4:c3:30:57:
         fe:9b:a8:ca:20:4f:8c:8b:cc:a3:75:bb:f9:1b:4c:ea:d2:20:
         86:46:65:47:da:e2:25:59:47:ce:1b:2d:46:7f:24:d0:a3:45:
         d8:c8:2c:db:b8:c1:f1:6e:48:2f:1d:2f:a3:94:dd:92:a6:29:
         66:b1:0a:d2:df:76:8b:ae:85:1e:20:d2:7d:76:04:05:93:67:
         86:1e:b3:c7:b4:41:a3:60:6b:d4:5b:a3:ba:52:02:21:a1:9f:
         eb:df:82:72:c8:d4:bb:04:ec:32:aa:fc:d0:87:44:a1:05:e8:
         cb:6e:0b:16:7b:42:e5:8d:a5:ea:50:09:b5:e2:96:6c:5c:de:
         bf:48:d0:1e:33:25:14:8c:46:fc:af:71:bb:d0:59:c4:dc:37:
         02:81:d7:77:a3:93:b0:94:87:f0:71:84:62:6b:38:cb:b6:4c:
         e2:36:94:07:6c:1f:5c:35:7a:70:c9:83:d4:5e:97:c8:7c:c3:
         c2:b3:bc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 12:07:00 2026 by rpki-client