This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/bin4sOPD5OKGfACXCfj3DQEIKBY.roa
File:                     bin4sOPD5OKGfACXCfj3DQEIKBY.roa (raw, json)
Hash identifier:          VnhSf12ZJGOlUh0T6+7Mdxo6I0H2lB8E2bDRpPDL8BU=
Subject key identifier:   6E:29:F8:B0:E3:C3:E4:E2:86:7C:00:97:09:F8:F7:0D:01:08:28:16
Certificate issuer:       /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial:       019B7834CE34CB28255881A1C16E0E4D62AB
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/bin4sOPD5OKGfACXCfj3DQEIKBY.roa
Signing time:             Thu 01 Jan 2026 06:18:05 +0000
ROA not before:           Thu 01 Jan 2026 06:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198838
IP address blocks:        193.109.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:ce:34:cb:28:25:58:81:a1:c1:6e:0e:4d:62:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
        Validity
            Not Before: Jan  1 06:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6e29f8b0e3c3e4e2867c009709f8f70d01082816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:07:63:92:fc:a4:9e:6b:d2:6d:3e:c1:7f:
                    de:d2:21:0e:c9:cb:55:f1:b9:82:01:3f:05:89:59:
                    d4:ac:d8:29:fe:c7:cc:7d:70:f5:05:5e:38:4a:ad:
                    5a:d6:80:aa:d7:b5:f8:84:f2:7f:40:c9:4a:f2:7c:
                    3f:d7:2a:63:19:db:20:ea:63:47:6d:15:a4:f8:24:
                    35:ca:a4:9c:37:3a:c5:3f:83:61:00:42:89:e7:40:
                    2b:a0:e6:a9:56:35:9f:0d:c0:12:d6:fa:e6:fc:2c:
                    e9:b0:09:9f:53:49:cf:f3:b2:e3:54:bb:96:6f:5a:
                    23:c2:d9:6f:ad:d9:ea:f7:72:f8:d8:e1:29:66:20:
                    dd:67:db:a1:b8:0f:e3:65:34:0f:82:ae:35:16:3a:
                    7b:2f:3a:bf:57:55:b3:70:3f:9d:55:11:9e:36:19:
                    76:67:31:0d:32:fd:48:44:93:54:ec:90:de:37:dc:
                    ae:af:4a:ce:bd:0d:23:14:ff:c1:6a:5e:24:06:5a:
                    7f:47:37:30:84:a9:13:75:f0:f5:1c:49:f2:20:dc:
                    5d:10:4b:c9:fa:5a:4e:d8:56:df:64:a2:04:58:45:
                    76:9c:94:b4:7a:76:43:b6:f5:a0:23:4a:f7:9f:08:
                    8f:d5:7c:c9:56:6b:76:b3:51:07:06:21:a1:a2:73:
                    f0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:29:F8:B0:E3:C3:E4:E2:86:7C:00:97:09:F8:F7:0D:01:08:28:16
            X509v3 Authority Key Identifier:
                keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/bin4sOPD5OKGfACXCfj3DQEIKBY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:43:72:b9:d0:66:e9:1e:16:b0:c3:b9:92:b4:d4:44:db:43:
         d8:06:54:03:b8:f5:60:6e:6b:10:5a:7b:f2:68:e3:fe:e1:e3:
         24:0c:54:25:60:92:9d:91:8b:23:9a:18:27:22:0a:6e:ae:3b:
         ba:8a:b0:82:1b:07:d1:02:7e:9a:04:c3:a1:e6:4a:ab:99:2c:
         fc:87:a2:38:2a:1b:48:7a:bf:8b:28:d9:83:28:f2:0f:ff:07:
         ef:16:95:ff:6a:54:bf:b0:7b:62:f6:23:1f:95:04:23:bc:eb:
         7c:86:7b:ab:d5:66:d4:7a:9d:df:bd:47:77:e3:06:28:be:8d:
         01:87:ef:cd:5e:0e:31:38:92:31:59:de:e6:73:31:3e:dc:5d:
         d7:ef:b3:4d:e5:7e:4f:a9:1c:4b:74:ec:3b:3d:c3:70:2a:f7:
         0f:87:6b:1d:e8:94:f3:4b:0c:a9:ea:df:78:30:c8:57:d7:f6:
         44:13:b4:0a:3d:c0:6c:b6:83:5a:26:9d:bc:49:d5:0f:72:7a:
         a2:f2:63:fb:71:7f:4a:56:0d:74:82:85:20:3e:6f:fa:00:83:
         6a:3c:e1:6b:47:c2:cf:85:1e:53:fa:10:d0:b0:01:dc:36:51:
         5c:d8:89:62:49:6a:d9:7e:f6:9a:a5:ec:98:f5:bc:ee:77:b9:
         77:65:42:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:33 2026 by rpki-client