This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1hwdhI4wn_A8zG2LNiZ6zmLQCi0.roa
File:                     1hwdhI4wn_A8zG2LNiZ6zmLQCi0.roa (raw, json)
Hash identifier:          8dNF0D1A5TaBy08KIjUwsN9qjUoqUpLIzLZWFTKpaF0=
Subject key identifier:   D6:1C:1D:84:8E:30:9F:F0:3C:CC:6D:8B:36:26:7A:CE:62:D0:0A:2D
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       019B7BA4A6F726A3D94DD1400992CD633A65
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1hwdhI4wn_A8zG2LNiZ6zmLQCi0.roa
Signing time:             Thu 01 Jan 2026 22:19:06 +0000
ROA not before:           Thu 01 Jan 2026 22:19:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214109
IP address blocks:        193.47.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:a6:f7:26:a3:d9:4d:d1:40:09:92:cd:63:3a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Jan  1 22:19:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d61c1d848e309ff03ccc6d8b36267ace62d00a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b3:99:f7:dd:4f:0c:f3:6f:81:85:3e:03:0e:
                    3d:f4:b0:16:83:ac:f9:51:01:1a:a5:2f:ec:3a:b2:
                    cf:14:44:da:42:af:be:30:26:9c:dd:74:4b:f8:16:
                    d4:48:de:4c:ba:81:d0:b1:76:fd:bf:5f:65:20:5c:
                    36:f4:84:12:f0:d6:a7:d7:67:cd:a5:0b:7e:7e:3a:
                    56:b3:11:c2:91:d3:0e:5b:22:ea:be:cb:f3:2b:40:
                    c8:59:5b:41:6e:78:af:91:91:3f:ba:5f:05:47:17:
                    13:22:b9:ed:5f:e1:49:a9:56:f5:a8:61:f2:5a:b6:
                    0d:bd:51:9b:2e:cf:3b:68:e3:d4:4d:55:f3:3c:a5:
                    88:9e:4e:58:f5:01:2c:35:0c:42:e4:54:5d:b5:cd:
                    ef:bf:75:18:ae:31:ea:16:f5:fa:0e:7e:9b:96:56:
                    12:3b:25:5e:5c:9e:b4:50:9c:c8:5c:38:77:21:79:
                    b8:be:24:1b:3c:4f:ad:26:5c:78:c8:8e:38:a6:91:
                    51:95:74:aa:fa:02:3e:0b:ea:64:c2:d1:28:4a:3a:
                    25:68:12:ab:8a:bd:b8:20:3c:5b:1b:55:4c:d2:af:
                    5e:45:a5:a4:4e:6c:61:82:ae:b1:57:f0:c6:dd:0a:
                    50:9b:8f:d8:c0:69:a3:5b:eb:fc:10:b7:ac:0c:5a:
                    5d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1C:1D:84:8E:30:9F:F0:3C:CC:6D:8B:36:26:7A:CE:62:D0:0A:2D
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1hwdhI4wn_A8zG2LNiZ6zmLQCi0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.47.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:94:be:88:68:7c:b9:97:3e:f4:42:62:5d:ca:60:c1:75:0c:
         56:5a:69:e7:ad:f1:48:d4:80:db:25:36:d1:48:8a:33:db:cb:
         fe:02:46:1a:6b:3f:c1:c6:2a:59:8e:0d:81:53:6c:f3:61:21:
         f0:8e:0a:c5:86:87:89:af:99:12:7c:00:e3:eb:f6:39:a0:d0:
         ce:a0:44:1e:55:c2:25:0a:97:b2:db:bd:ae:8f:e9:d4:41:ab:
         0c:f3:23:e8:3f:f8:8c:89:29:9e:2c:a5:a9:8c:01:1a:f1:56:
         0e:a8:12:91:a4:7f:99:60:a4:a1:02:99:e5:d1:83:f6:ce:88:
         54:ff:c5:51:92:3d:e6:3d:b0:f2:9c:51:45:00:24:35:b1:aa:
         05:60:09:74:cd:57:2d:dd:78:ef:d9:6b:7c:dd:ef:69:47:bf:
         07:1e:74:6b:b5:54:9b:cb:c7:1b:74:f4:c9:b0:0b:bd:22:e5:
         5d:88:ff:0f:76:51:25:90:77:fb:01:ec:01:c3:d2:8a:9a:e7:
         94:31:32:57:2a:e3:4b:dc:61:28:19:37:d7:55:87:51:d4:88:
         99:ad:2c:58:fe:7c:52:bc:e0:3d:bf:49:86:ff:07:44:ce:30:
         96:e5:56:bd:cd:59:b9:72:c4:59:cf:2b:a6:c6:d2:00:e2:81:
         69:97:08:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:06 2026 by rpki-client