This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/n29c-eqwdShZtcEOhZv3Ign1VGo.roa
File:                     n29c-eqwdShZtcEOhZv3Ign1VGo.roa (raw, json)
Hash identifier:          uxh/IP+egHWNQsX3vB68RQ/0/wzosXKCxI7jga5PL14=
Subject key identifier:   9F:6F:5C:F9:EA:B0:75:28:59:B5:C1:0E:85:9B:F7:22:09:F5:54:6A
Certificate issuer:       /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial:       019B78A3762D49A5ED67FE2E20A6A4ADDBE0
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/n29c-eqwdShZtcEOhZv3Ign1VGo.roa
Signing time:             Thu 01 Jan 2026 08:18:56 +0000
ROA not before:           Thu 01 Jan 2026 08:18:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61047
IP address blocks:        91.220.197.0/24 maxlen: 24
                          185.43.44.0/22 maxlen: 24
                          185.71.224.0/22 maxlen: 24
                          185.83.96.0/22 maxlen: 24
                          185.124.200.0/22 maxlen: 24
                          185.189.188.0/22 maxlen: 24
                          194.150.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:76:2d:49:a5:ed:67:fe:2e:20:a6:a4:ad:db:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
        Validity
            Not Before: Jan  1 08:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9f6f5cf9eab0752859b5c10e859bf72209f5546a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:69:e0:a5:2a:ff:38:ce:8c:a1:9a:b1:10:d1:
                    2e:03:f1:0d:3d:3e:62:8d:3d:e6:ee:06:a1:4f:3d:
                    c7:f4:d3:24:bd:b4:91:c4:83:38:d8:58:77:27:13:
                    7a:0f:4d:a3:c6:8e:24:55:6e:9f:58:28:a8:03:ba:
                    3b:2f:d2:6c:46:2c:33:f5:d3:ca:09:d9:d1:2c:30:
                    d0:3d:05:1b:90:e5:52:b1:02:70:12:f6:87:a3:37:
                    b9:16:bc:a1:e9:a0:58:b7:6a:d3:47:98:8a:d6:07:
                    b7:59:c2:6c:83:56:83:ff:94:f2:8a:88:87:d7:76:
                    a1:01:f2:16:ef:5b:ae:d3:a8:df:5a:a2:f9:2d:9f:
                    61:7a:99:1d:73:dc:79:ce:87:b8:96:6a:e2:d3:f3:
                    d7:ff:85:a9:f9:9b:9b:e4:b8:f9:f4:21:62:bc:96:
                    a8:61:c6:a0:69:d2:d2:f2:79:4d:7d:82:92:1f:f8:
                    05:a8:4d:52:c2:55:51:0f:fa:d8:3f:03:a3:fb:63:
                    3a:ee:b4:93:fd:50:8c:15:49:05:d6:e7:ce:36:43:
                    c9:c6:5a:ec:87:91:aa:d2:7b:d9:c8:d0:06:98:0e:
                    64:c2:9c:85:c3:15:a9:3f:b3:28:c3:9d:67:8c:63:
                    9b:fa:82:44:aa:1c:4a:8d:47:d2:0b:4f:93:07:06:
                    2c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6F:5C:F9:EA:B0:75:28:59:B5:C1:0E:85:9B:F7:22:09:F5:54:6A
            X509v3 Authority Key Identifier:
                keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/n29c-eqwdShZtcEOhZv3Ign1VGo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.220.197.0/24
                  185.43.44.0/22
                  185.71.224.0/22
                  185.83.96.0/22
                  185.124.200.0/22
                  185.189.188.0/22
                  194.150.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b7:7e:36:44:86:d4:23:c0:6d:7f:5b:e9:32:01:d5:5f:55:
         09:92:49:a1:57:e9:d7:c3:dc:e9:b7:99:23:94:bd:58:fc:ee:
         5f:56:1b:83:7a:80:0b:d2:e7:47:6b:f8:64:1d:e1:3a:de:b3:
         d9:97:2f:b8:aa:1b:71:17:3d:a5:f5:c0:40:bb:a8:6b:54:94:
         a2:94:79:40:00:51:25:b7:3c:a9:5e:bf:54:53:b1:d0:7b:53:
         08:97:71:b4:31:95:7b:a8:ba:19:96:13:7b:99:df:08:52:10:
         65:99:84:14:a5:4a:d9:7f:95:6f:b0:37:a0:0e:81:28:0a:19:
         9a:4c:10:fd:a1:36:e5:06:b1:d9:f1:32:ed:20:7b:80:b6:33:
         a7:0a:ed:af:01:e5:12:2c:92:1a:0f:36:e1:10:d4:fd:47:09:
         bf:2b:04:37:3f:52:e6:3d:e1:19:45:d5:a5:fc:68:eb:9f:d3:
         52:fa:c9:0a:45:94:39:2c:50:0b:d7:71:a7:7e:69:96:02:98:
         55:17:88:1c:71:6b:01:1a:3b:22:bb:2f:71:2c:b1:1e:36:a2:
         9b:b1:46:34:48:a8:97:25:99:06:60:e9:3c:1b:5f:f9:7e:be:
         22:88:d7:99:76:5c:80:01:54:5d:36:f2:3b:a7:b2:56:fc:12:
         02:d0:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:58 2026 by rpki-client