This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1-Ww2Ze2sq2v2pM_L6mAte2W3rVs.roa
File:                     1-Ww2Ze2sq2v2pM_L6mAte2W3rVs.roa (raw, json)
Hash identifier:          vmqxvrLFyXQ3PPH8g1YNS786D0Yd2y9W7lv4XmkCJp4=
Subject key identifier:   F9:6C:36:65:ED:AC:AB:6B:F6:A4:CF:CB:EA:60:2D:7B:65:B7:AD:5B
Certificate issuer:       /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial:       019B77C75024598806B4EC4886A3E0B48865
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1-Ww2Ze2sq2v2pM_L6mAte2W3rVs.roa
Signing time:             Thu 01 Jan 2026 04:18:29 +0000
ROA not before:           Thu 01 Jan 2026 04:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216127
IP address blocks:        195.19.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:50:24:59:88:06:b4:ec:48:86:a3:e0:b4:88:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
        Validity
            Not Before: Jan  1 04:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f96c3665edacab6bf6a4cfcbea602d7b65b7ad5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c2:e6:3c:39:1d:0e:9d:e9:16:42:f8:14:a9:
                    d9:25:e9:bd:ee:8f:82:41:cb:30:39:53:b0:63:cc:
                    1f:97:d0:3c:58:57:d9:75:de:ce:f0:d3:42:64:7a:
                    41:da:93:95:2e:27:7c:dd:56:79:3b:c2:dd:c2:10:
                    f2:11:dd:d1:53:65:2f:f5:3d:fe:54:de:1f:fe:fe:
                    07:db:4a:53:60:96:71:d6:c2:e8:ca:cd:df:59:7d:
                    b1:dc:8e:3e:6f:3b:82:d4:e4:9e:75:4d:41:b3:43:
                    9a:9f:36:a3:65:2f:da:62:7c:72:f8:98:e8:93:25:
                    fc:fd:3e:c2:87:c2:a8:e8:ce:4c:a8:a7:db:df:43:
                    9c:95:66:d8:6e:f5:fd:ba:82:d6:15:0e:8f:eb:ce:
                    3b:01:7f:2c:48:df:ad:62:76:ff:22:ac:b8:25:45:
                    24:df:28:22:4f:56:48:08:e6:8e:c8:8b:cc:63:17:
                    8e:8c:da:f1:14:6d:cb:22:75:66:d5:69:f2:29:1b:
                    07:e2:6f:27:a0:f7:23:ff:e3:0c:a0:cb:b9:c1:c8:
                    9a:ea:da:34:f7:86:6c:9e:64:57:9b:0a:2c:bc:54:
                    c8:7b:e8:37:2b:9a:4e:bb:fa:11:68:3f:e6:20:46:
                    2b:39:b3:00:c3:44:17:bd:d9:74:bf:f0:23:5e:20:
                    8f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6C:36:65:ED:AC:AB:6B:F6:A4:CF:CB:EA:60:2D:7B:65:B7:AD:5B
            X509v3 Authority Key Identifier:
                keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1-Ww2Ze2sq2v2pM_L6mAte2W3rVs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.19.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:a4:39:73:40:46:c4:4c:4a:ae:a3:7d:38:5e:d3:9e:11:a8:
         8a:2d:09:f9:35:f9:6d:fd:b5:87:28:0b:9b:b5:ac:d0:ad:6c:
         5f:d5:cb:83:bd:82:01:4e:52:91:f9:60:51:5f:fd:ca:95:e4:
         81:8c:8a:36:0f:51:f6:48:85:04:a7:4a:c0:15:54:9d:e3:70:
         c6:88:88:66:e0:c5:8d:71:80:6c:26:6e:8c:ae:22:0d:d0:f6:
         a1:ee:e8:0c:fb:b4:de:ae:11:35:e7:54:a7:f7:75:b6:29:7d:
         e5:f5:c1:49:b6:44:17:11:7b:c7:95:1e:9c:91:b4:c6:0f:72:
         3a:de:7e:fe:fc:2c:de:eb:dd:84:58:18:4c:47:b8:4e:6f:1a:
         93:ac:9e:4c:b8:c9:f6:4c:0b:f5:10:81:7f:f8:27:06:3b:68:
         23:4e:12:59:92:02:f4:3d:a8:58:fa:d3:a6:4e:78:b7:0f:3d:
         bc:d9:fd:5e:81:45:b7:68:6f:ca:d2:e0:d3:66:73:09:ba:34:
         39:f7:b7:f3:55:c3:4e:8c:2f:0c:ee:ec:0d:42:7d:44:38:a6:
         2b:ee:1e:41:fb:5b:cb:3f:b2:30:91:33:99:7d:30:f1:7c:d3:
         b1:62:65:45:10:68:55:26:31:ed:0b:05:7c:94:5f:88:4a:d3:
         9b:81:08:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:12:10 2026 by rpki-client