This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/bPyQY6SXWWwE0kxuCGK65w1wEbQ.roa
File:                     bPyQY6SXWWwE0kxuCGK65w1wEbQ.roa (raw, json)
Hash identifier:          HBq1ZxOHL2v4vjCZS/Tly78qQg5nD5KUf65a7gSUtF4=
Subject key identifier:   6C:FC:90:63:A4:97:59:6C:04:D2:4C:6E:08:62:BA:E7:0D:70:11:B4
Certificate issuer:       /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Certificate serial:       019B7B35C5AAC948B9F6CE8A67DC8EF05324
Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/bPyQY6SXWWwE0kxuCGK65w1wEbQ.roa
Signing time:             Thu 01 Jan 2026 20:18:00 +0000
ROA not before:           Thu 01 Jan 2026 20:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47432
IP address blocks:        195.182.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:c5:aa:c9:48:b9:f6:ce:8a:67:dc:8e:f0:53:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
        Validity
            Not Before: Jan  1 20:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6cfc9063a497596c04d24c6e0862bae70d7011b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:96:d3:10:5c:5c:ce:d3:a3:b9:0a:69:58:
                    11:e6:2b:62:d2:7b:b7:9c:e1:ac:c3:16:86:c6:c4:
                    71:a7:c1:72:d8:72:b3:e7:0f:20:2f:50:45:dc:ec:
                    75:96:97:3a:82:ff:37:64:c8:d6:0a:bc:fb:49:8a:
                    25:c2:10:42:80:c2:68:6a:61:19:c0:ec:28:86:5a:
                    b8:c6:b5:f0:9b:af:aa:c7:c1:a0:04:dc:b1:88:33:
                    df:52:30:f1:22:f8:51:e0:aa:7c:a8:fd:bf:55:80:
                    3b:ee:93:d2:d3:a5:34:91:cc:db:24:0a:6d:b1:ba:
                    e4:85:a1:2b:d9:36:d0:1a:fc:47:11:c2:1f:93:b1:
                    3b:44:f2:59:41:8b:2b:de:54:be:84:36:df:6e:af:
                    16:fd:f7:89:54:f6:c5:3d:87:93:07:b4:33:3e:3b:
                    fb:cc:ab:01:2a:c2:33:22:f6:79:4b:05:fb:9b:ee:
                    a5:d8:00:be:8b:48:29:e5:19:26:77:53:dd:43:3d:
                    f1:9d:be:ec:39:b9:1a:60:18:d1:3c:03:b7:c6:81:
                    e2:f2:d0:04:34:92:77:fe:56:4c:9e:55:66:a4:15:
                    93:8e:89:9c:d2:99:a1:b3:7a:a5:9c:a1:f3:bf:2c:
                    9c:3b:9f:64:4e:d6:70:25:8e:1a:81:f8:1a:1e:da:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FC:90:63:A4:97:59:6C:04:D2:4C:6E:08:62:BA:E7:0D:70:11:B4
            X509v3 Authority Key Identifier:
                keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/bPyQY6SXWWwE0kxuCGK65w1wEbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.182.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:7f:d1:23:94:1b:75:44:b8:6e:af:f5:c1:87:86:d5:16:00:
         bd:2e:70:dc:63:4c:a9:9f:2b:b3:0a:2a:56:76:b1:f4:f1:64:
         81:51:db:8a:9e:87:9d:fb:8b:b3:d1:c6:0b:2f:e1:bc:d4:e9:
         31:25:2e:0d:49:b5:4f:ef:72:b5:59:cb:83:48:81:5e:15:0f:
         bf:64:27:b9:56:97:a8:ad:93:e6:eb:3b:0e:18:e0:7f:77:81:
         7d:0b:65:d0:44:42:75:e8:d4:e3:d6:dd:08:49:7a:ec:bb:36:
         ef:fc:46:48:c8:4f:c7:81:25:3b:7b:59:fb:be:b8:95:29:db:
         de:8d:01:3f:e8:fe:eb:79:c2:23:19:a0:20:69:ed:85:8c:d7:
         0d:39:69:a6:06:28:cb:1d:ad:43:80:3d:d7:85:58:4e:79:86:
         5b:b7:fb:7d:8f:f0:7e:d6:50:a2:66:b5:a5:aa:29:f3:5a:4d:
         7b:2b:8c:38:e1:13:95:ee:96:dd:f4:f2:b2:3c:40:54:e7:4f:
         6c:e6:6e:a0:05:e8:0a:40:2d:67:2a:b8:25:00:0d:a2:fa:14:
         50:d2:3f:b3:0e:d9:bc:83:bf:5c:90:81:52:d8:74:2e:92:02:
         9d:30:98:ea:84:dc:c4:40:8f:9c:85:a2:ab:5c:ff:30:77:63:
         79:68:46:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:44:18 2026 by rpki-client