This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa
File:                     6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa (raw, json)
Hash identifier:          HsNpK7hPj6W6BnASMw5ZiyHooADbT1D1N/LoEYfC8k0=
Subject key identifier:   EA:D5:AD:69:B7:6D:E5:B4:AB:B6:C6:87:43:D4:01:A3:82:02:C9:C4
Certificate issuer:       /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial:       019B7E3865140EE24B3B243E817553D2559A
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa
Signing time:             Fri 02 Jan 2026 10:19:43 +0000
ROA not before:           Fri 02 Jan 2026 10:19:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28853
IP address blocks:        193.138.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:65:14:0e:e2:4b:3b:24:3e:81:75:53:d2:55:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
        Validity
            Not Before: Jan  2 10:19:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ead5ad69b76de5b4abb6c68743d401a38202c9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:18:72:31:9a:fc:17:aa:53:f3:fd:e4:e9:
                    05:33:30:a6:e6:01:24:3c:d9:6a:30:a0:7b:6b:20:
                    4a:24:62:32:06:0c:b0:22:2e:77:fb:95:a6:7a:ea:
                    ce:f6:3c:cd:05:e4:fc:d3:4c:c9:35:30:bf:ba:0e:
                    c9:ef:02:b9:43:d3:f5:d5:16:48:b1:cf:67:fd:9c:
                    40:9f:5e:8b:a4:e8:44:bd:75:33:fd:27:30:06:b2:
                    84:27:52:d0:92:47:f1:52:f5:70:dc:d4:2f:e1:84:
                    4e:ec:79:9a:eb:65:97:a5:e7:0d:0e:8b:f2:be:bb:
                    11:13:2c:06:1b:79:3f:78:69:9f:12:eb:33:ef:23:
                    e7:7f:c3:a7:8f:05:0c:1a:39:1a:87:3c:55:9a:81:
                    39:07:1d:dd:d0:1d:89:64:cd:5f:e9:cd:91:0c:89:
                    9b:65:a9:8a:92:95:ac:6e:0c:23:26:b3:5d:ed:8b:
                    7c:03:ab:64:4d:fe:20:a1:24:9c:ce:4f:61:9a:1f:
                    ac:a0:b1:8a:d2:41:cc:82:c8:aa:54:b6:70:57:2f:
                    d6:b4:40:90:fb:62:b0:95:4e:ea:7c:f1:42:11:a5:
                    89:c5:0f:34:f2:7e:6c:c2:ce:60:27:76:43:8b:f8:
                    bd:34:24:6d:e8:c0:dc:b3:89:5e:be:5a:d9:c3:bd:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D5:AD:69:B7:6D:E5:B4:AB:B6:C6:87:43:D4:01:A3:82:02:C9:C4
            X509v3 Authority Key Identifier:
                keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.138.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:ae:16:4a:08:b7:12:7d:8d:2e:73:9e:e4:c2:fa:08:7f:e4:
         b2:ab:89:64:e9:bd:af:e2:ce:37:07:a1:47:23:38:82:d7:0c:
         be:e7:fc:f0:17:28:4c:9a:97:96:ce:5c:6e:53:29:4d:44:4d:
         5d:83:05:7d:ea:55:52:b6:87:34:7b:6b:1d:ea:cd:af:d4:5b:
         32:96:e4:cb:50:71:46:81:b9:96:1b:f0:90:a4:b3:72:54:7c:
         ff:12:5f:87:f1:12:77:b1:3b:dc:59:b1:a8:75:30:f0:27:3c:
         50:b2:20:5a:05:16:a4:0b:b8:c8:7c:aa:a5:30:2b:f8:78:c7:
         58:71:eb:f7:11:d8:86:95:78:2a:42:59:f4:ce:61:f2:2a:cb:
         b2:dd:da:4a:ed:86:3a:62:70:b3:db:02:d0:5e:74:ab:36:f4:
         c3:c3:71:a6:e1:8e:f2:95:0d:e7:c4:74:ae:52:8a:4a:a5:3e:
         1a:1e:73:98:ce:fd:5a:c4:92:ee:a6:72:ef:0e:f6:a3:61:31:
         00:87:53:dc:ee:42:0b:58:bf:66:4c:48:8e:d8:50:6f:cc:d7:
         3a:1a:ad:74:89:01:5a:66:fb:69:cb:0c:b0:4e:4e:ba:09:1b:
         e6:0f:49:54:8a:40:c9:93:75:5b:7d:ac:57:f4:25:32:ed:70:
         5c:52:df:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:44:49 2026 by rpki-client