This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/f1xxhacm7jnvbldN6spjT65Vwn8.roa
File:                     f1xxhacm7jnvbldN6spjT65Vwn8.roa (raw, json)
Hash identifier:          rqkDD8hNvJtlHHJ4fiGoQKM/oQxgw1TdOWMEVdkAPbI=
Subject key identifier:   7F:5C:71:85:A7:26:EE:39:EF:6E:57:4D:EA:CA:63:4F:AE:55:C2:7F
Certificate issuer:       /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial:       019B7D5C8054AAD1B3A7E7B4E1D029BB286D
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/f1xxhacm7jnvbldN6spjT65Vwn8.roa
Signing time:             Fri 02 Jan 2026 06:19:32 +0000
ROA not before:           Fri 02 Jan 2026 06:19:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137
IP address blocks:        193.43.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:80:54:aa:d1:b3:a7:e7:b4:e1:d0:29:bb:28:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
        Validity
            Not Before: Jan  2 06:19:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f5c7185a726ee39ef6e574deaca634fae55c27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:9d:af:65:13:be:62:e6:6d:5c:39:7f:6d:
                    27:f5:fc:58:bc:f2:11:23:3b:ee:db:71:47:68:57:
                    a6:93:3f:14:cd:ec:c9:ea:28:60:9f:14:16:1c:66:
                    32:ab:98:89:4a:5c:64:c4:83:8c:23:52:c2:9a:e8:
                    7f:78:a9:1c:42:d1:f5:ba:54:6b:f2:19:7c:2a:63:
                    66:73:e3:a6:3e:ec:73:8f:ea:17:d0:6b:a2:ca:c1:
                    40:4f:5e:43:e5:dd:02:b1:94:a5:8b:24:67:8d:f6:
                    a9:b1:07:a7:8d:36:50:49:14:5e:64:fd:8a:b2:be:
                    a5:97:39:2f:c2:c6:49:67:5f:11:22:4e:7e:20:c2:
                    a9:20:bc:d0:75:13:a9:73:c9:1f:93:7d:99:14:d5:
                    2b:a9:96:5a:b8:75:65:79:d4:b0:43:bc:96:cc:5f:
                    95:1d:22:08:4e:38:63:b8:ca:df:d6:cf:af:80:6e:
                    6a:81:57:28:40:0c:24:70:fa:86:87:19:fc:b2:01:
                    0f:8f:4d:03:20:93:30:06:4b:c3:d4:3d:2e:84:06:
                    c6:79:6c:a0:fd:0d:93:50:f6:2b:3f:3f:69:18:ab:
                    d6:e7:d2:81:fc:40:58:7b:2b:6e:91:ac:82:62:c1:
                    25:e2:1e:04:6e:8f:39:37:97:44:04:bd:3f:6b:27:
                    ef:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5C:71:85:A7:26:EE:39:EF:6E:57:4D:EA:CA:63:4F:AE:55:C2:7F
            X509v3 Authority Key Identifier:
                keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/f1xxhacm7jnvbldN6spjT65Vwn8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.43.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:00:d8:d3:94:86:3f:6d:41:ac:82:c8:87:54:18:79:de:72:
         6f:ce:b7:f2:c1:04:3a:5b:56:39:87:c2:37:12:86:8f:11:c5:
         fe:da:f6:ce:11:4b:c1:c3:f5:bc:67:98:2e:b8:09:5a:70:08:
         0b:3b:82:1b:03:b0:38:21:e0:6f:0f:11:fe:a8:ba:0e:a7:ba:
         c3:93:54:92:3f:c0:67:8b:23:f8:16:80:65:cc:8b:cf:e4:c2:
         b5:73:89:e2:12:de:7c:10:fa:db:7b:58:2a:53:fb:22:15:35:
         df:00:da:93:c5:a7:01:42:05:f1:ed:9e:d4:8f:a5:5f:4f:9c:
         66:4a:54:5a:5b:ea:e2:ea:13:51:08:71:e7:bb:59:d3:39:e4:
         20:ec:3b:65:28:50:9f:4f:49:7e:bf:59:79:df:61:08:ce:3d:
         c0:15:d5:be:b7:c9:c7:31:c3:2e:85:d4:f9:92:94:bf:6f:24:
         79:9a:69:77:72:a8:b5:2b:fe:21:58:78:8b:e6:8b:c2:5c:e5:
         8d:76:2d:55:1a:92:20:ea:95:d4:28:b8:2d:4b:98:62:62:4c:
         b3:35:7b:96:35:27:4d:e6:1a:0a:90:a5:3c:5c:ee:65:8d:47:
         b4:45:ac:76:fa:6c:b9:ba:6e:75:15:6d:3c:b8:7b:3b:56:19:
         1c:8c:41:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:15 2026 by rpki-client