This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/39TW_rteZEmG2yqgCNBCF7PjZJA.roa
File:                     39TW_rteZEmG2yqgCNBCF7PjZJA.roa (raw, json)
Hash identifier:          QiC1evAcCRcezlzRHbRvqDU6mKjNFQuGOEOLFGB1NnM=
Subject key identifier:   DF:D4:D6:FE:BB:5E:64:49:86:DB:2A:A0:08:D0:42:17:B3:E3:64:90
Certificate issuer:       /CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
Certificate serial:       019B7C1220FCC8D71A22DD439B4E8DC20076
Authority key identifier: CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/39TW_rteZEmG2yqgCNBCF7PjZJA.roa
Signing time:             Fri 02 Jan 2026 00:18:41 +0000
ROA not before:           Fri 02 Jan 2026 00:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137
IP address blocks:        193.43.18.0/23 maxlen: 23
                          193.43.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:20:fc:c8:d7:1a:22:dd:43:9b:4e:8d:c2:00:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad79c126b82f77cc63b5a6b6cd8bdae6e0f5a3c
        Validity
            Not Before: Jan  2 00:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dfd4d6febb5e644986db2aa008d04217b3e36490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:a9:3e:73:df:b9:84:0f:4d:11:7e:b5:49:
                    47:2c:c0:e2:c7:5d:9c:a9:19:fa:11:aa:a9:b2:9f:
                    33:f0:a3:1e:3e:eb:8d:7b:ca:fb:97:76:b5:87:44:
                    ca:b8:6b:3c:f0:cf:c8:30:fb:ba:5b:8d:73:6c:7f:
                    47:67:21:05:67:b1:fd:29:c7:25:16:1a:fc:9a:52:
                    cc:f4:50:f2:b9:30:a8:1c:39:94:33:09:47:1b:fe:
                    3a:43:b5:80:9e:6d:88:75:55:eb:b6:27:2a:2b:21:
                    39:90:34:8d:37:cf:0c:68:ec:be:05:9e:c5:28:58:
                    07:21:e5:79:8b:c4:51:97:d2:30:61:71:f7:14:6a:
                    f4:d0:3e:b2:57:bd:09:b8:03:f8:bc:6d:37:34:86:
                    90:36:76:df:cc:60:c2:1c:9a:fd:48:59:af:66:52:
                    07:89:f7:ab:00:79:92:08:3e:6e:03:3d:96:01:01:
                    f0:a0:23:47:6f:6a:3f:2f:ef:96:0d:5c:76:08:62:
                    28:ba:f7:af:b3:d4:8b:42:24:ce:ba:d5:56:22:ef:
                    c0:08:6d:9b:08:8a:b7:eb:35:9a:2e:04:59:c0:0a:
                    6a:61:6a:26:41:d8:eb:d6:ea:5b:3d:a7:3a:7b:70:
                    15:d9:2f:a9:f9:b2:43:34:7b:6f:5f:84:a2:bc:c2:
                    a0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D4:D6:FE:BB:5E:64:49:86:DB:2A:A0:08:D0:42:17:B3:E3:64:90
            X509v3 Authority Key Identifier:
                keyid:CA:D7:9C:12:6B:82:F7:7C:C6:3B:5A:6B:6C:D8:BD:AE:6E:0F:5A:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytecEmuC93zGO1prbNi9rm4PWjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/39TW_rteZEmG2yqgCNBCF7PjZJA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0f169c-6da7-4350-8d3c-4ca44802b563/1/ytecEmuC93zGO1prbNi9rm4PWjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.18.0/23
                  193.43.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:08:0e:59:a6:a3:01:cc:04:ef:8c:5e:33:06:c5:99:b6:84:
         61:5a:2e:13:72:b7:71:cb:b2:12:c6:d7:52:55:92:bc:7c:f0:
         1e:a8:28:68:23:47:28:2d:40:13:37:65:47:3d:44:14:1a:85:
         9c:02:bb:3d:ae:f4:1d:1d:55:69:5b:d3:c9:f8:e7:11:24:46:
         9f:2c:39:16:91:54:ed:ea:07:fd:75:02:1b:bb:fa:03:d4:03:
         8a:28:bd:7c:a5:18:df:d3:76:18:7f:3d:e2:5c:e3:c3:59:cd:
         bb:b5:5a:e9:52:d7:7d:7c:c9:fb:cd:02:7c:ba:df:1c:cd:47:
         89:81:a1:f8:fe:3b:5d:c4:e2:4d:f1:8d:00:7b:8c:b9:4b:11:
         33:ae:8b:54:fe:a5:34:04:32:5a:e4:09:c9:8a:96:67:80:97:
         e5:ff:d5:78:df:27:34:b6:23:a2:c0:1a:40:3f:90:10:70:4c:
         ce:6d:0d:7c:31:b1:3a:f9:31:a2:64:14:4b:0f:f4:bc:38:ab:
         71:ac:7f:cc:59:37:40:16:b2:03:45:39:c8:3a:98:ff:9c:ba:
         d4:5c:5b:52:87:b3:b2:d7:85:1a:3e:4c:e5:01:24:8c:72:f4:
         2e:14:a5:a6:a5:8a:be:65:35:b3:b5:58:c1:28:4e:c0:89:d2:
         32:d6:da:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:47:17 2026 by rpki-client