This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_xPl_VXmR6xVCZvOikIVp_6PWVc.roa
File:                     _xPl_VXmR6xVCZvOikIVp_6PWVc.roa (raw, json)
Hash identifier:          rQeiitKCeo/oVyL/XxlChVT/Tk4lOwm4mnq+EiETsvM=
Subject key identifier:   FF:13:E5:FD:55:E6:47:AC:55:09:9B:CE:8A:42:15:A7:FE:8F:59:57
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       019B7BA49AC0BC1DED76EE73D6A0711999C7
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_xPl_VXmR6xVCZvOikIVp_6PWVc.roa
Signing time:             Thu 01 Jan 2026 22:19:03 +0000
ROA not before:           Thu 01 Jan 2026 22:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57785
IP address blocks:        193.22.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:9a:c0:bc:1d:ed:76:ee:73:d6:a0:71:19:99:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Jan  1 22:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ff13e5fd55e647ac55099bce8a4215a7fe8f5957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:f9:9f:44:07:58:1d:d5:ce:59:34:b4:3a:
                    fa:29:f3:22:1e:45:95:1c:4c:0b:cc:ce:70:95:fc:
                    ad:45:a4:36:d4:a2:57:94:cd:94:20:ca:b7:b2:18:
                    92:0a:e8:41:f7:84:92:9d:7f:ee:24:53:1b:50:1f:
                    be:4f:55:0a:f0:b7:0f:49:06:0a:cc:1b:e2:fc:96:
                    23:c3:ab:e6:16:40:86:fe:e5:77:97:00:9e:ea:4e:
                    45:c8:af:d5:ae:e5:17:31:17:3c:dc:c4:eb:0c:99:
                    71:ee:11:f7:83:e8:db:58:f6:37:18:e4:fe:d2:b6:
                    72:79:98:95:32:34:95:7d:9f:22:8f:aa:8e:6a:01:
                    fc:11:d2:da:9a:5d:91:55:cf:c5:20:a0:20:22:8b:
                    6f:f4:b0:8b:58:a7:b1:29:b3:49:ab:92:c5:37:82:
                    ef:86:3d:d5:55:ac:cd:8b:88:ca:d3:54:d0:71:d1:
                    81:c4:5f:de:f1:e0:be:45:50:19:88:1c:60:e5:24:
                    31:2e:0e:e0:49:e7:ac:e1:51:10:97:6e:52:82:1e:
                    2d:16:02:ac:17:bf:e4:83:e6:14:7e:0c:04:c0:3d:
                    a5:7a:1f:ea:d7:b5:b9:ae:71:26:90:fa:c7:ac:d3:
                    f6:1e:4f:d4:c9:7b:37:d5:49:a3:c7:38:92:34:20:
                    6c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:13:E5:FD:55:E6:47:AC:55:09:9B:CE:8A:42:15:A7:FE:8F:59:57
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_xPl_VXmR6xVCZvOikIVp_6PWVc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:0a:8e:d2:d5:fe:cc:64:33:4b:fc:6f:67:6d:1f:c3:4d:7c:
         18:15:3e:b5:7f:0d:3e:b7:f5:c4:71:af:f2:ec:da:e8:d6:f5:
         44:fe:fb:48:6f:cc:c6:c9:cf:75:7e:d0:1a:c1:44:58:8c:df:
         a8:59:4b:a5:0f:ec:fa:b1:8a:43:da:23:b7:b6:c9:42:22:a7:
         5b:b6:69:1e:cf:09:39:f5:b0:b1:d5:c9:ed:6e:b9:69:74:24:
         d4:92:35:b9:1e:b7:ef:fc:83:57:c4:34:c3:d9:cf:c8:93:b3:
         07:35:cb:7e:22:f2:85:54:93:9e:68:99:64:d5:9c:e8:9f:68:
         d5:fc:96:53:60:85:d9:cc:22:85:ff:8e:dc:6c:5f:3e:00:f6:
         f9:aa:ec:6a:50:16:41:c3:f4:fa:e4:50:3b:48:7e:da:4f:66:
         8c:25:e2:63:3e:03:88:a0:7e:c4:1d:cf:ca:05:ae:48:12:56:
         1e:7d:9a:e6:cf:6d:3c:84:84:14:23:af:2c:4e:2f:0c:fb:1f:
         f6:9c:0e:4e:fc:74:d7:96:9d:c4:67:07:80:f1:eb:17:3e:61:
         83:81:ae:32:9a:be:ee:ba:4e:4d:e3:69:0c:97:d7:ab:34:25:
         08:ec:7c:b5:3f:ec:55:5b:bf:01:d3:0c:75:61:a3:61:5a:a6:
         62:69:35:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:45:59 2026 by rpki-client