This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/1_RvhXg_yFt9QLCl3nbA9HBJU5Q.roa
File:                     1_RvhXg_yFt9QLCl3nbA9HBJU5Q.roa (raw, json)
Hash identifier:          H1El/6ha6YQmqIJbSscbpAN4aty2fcfaJv1HlmkgJhI=
Subject key identifier:   D7:F4:6F:85:78:3F:C8:5B:7D:40:B0:A5:DE:76:C0:F4:70:49:53:94
Certificate issuer:       /CN=e69e45a4481456148e2e00349d87aa57c56b24a0
Certificate serial:       019B77C6FA78F526F83B09A7196362346CA8
Authority key identifier: E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/1_RvhXg_yFt9QLCl3nbA9HBJU5Q.roa
Signing time:             Thu 01 Jan 2026 04:18:07 +0000
ROA not before:           Thu 01 Jan 2026 04:18:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62146
IP address blocks:        194.150.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:fa:78:f5:26:f8:3b:09:a7:19:63:62:34:6c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69e45a4481456148e2e00349d87aa57c56b24a0
        Validity
            Not Before: Jan  1 04:18:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d7f46f85783fc85b7d40b0a5de76c0f470495394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fe:de:6a:e2:37:27:9a:c0:04:42:c6:26:72:
                    0d:8f:7d:a7:79:92:91:c2:07:0c:38:97:0c:f3:ba:
                    c5:fa:1f:2f:83:32:c3:3d:5a:39:49:11:4a:dd:dc:
                    46:2f:cb:9c:89:7a:65:f1:a4:8b:5d:b5:c6:ff:c9:
                    40:34:3b:67:61:b8:f1:ca:ae:73:ae:be:5e:3a:48:
                    26:93:53:69:60:10:f4:83:3b:44:96:84:5c:29:b8:
                    45:d0:38:aa:53:95:3b:56:05:b3:d4:93:b1:a6:5a:
                    6d:a8:78:fa:87:40:87:70:93:28:3e:13:d8:21:5a:
                    c5:43:72:9e:49:bb:1e:f7:26:c3:7f:29:89:07:ac:
                    df:42:aa:84:12:aa:bc:1f:db:69:05:9a:84:15:24:
                    cb:33:2c:74:e6:c1:c4:78:6a:73:b8:a8:c0:04:bf:
                    f1:8d:68:3d:bc:a3:2d:a4:1e:29:fa:a9:48:20:c3:
                    34:2c:2a:e0:36:5f:ce:8b:aa:23:20:8c:eb:63:01:
                    d6:f3:33:53:13:5d:d3:75:f3:e7:1f:d7:68:c0:23:
                    a3:ab:09:ea:93:ae:e8:20:e0:c7:88:89:01:e0:ee:
                    2b:8d:72:2d:b0:7c:d3:9c:ce:46:6f:0d:90:75:55:
                    56:41:d5:01:11:42:ae:41:fd:7e:10:7b:96:a1:14:
                    38:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F4:6F:85:78:3F:C8:5B:7D:40:B0:A5:DE:76:C0:F4:70:49:53:94
            X509v3 Authority Key Identifier:
                keyid:E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/1_RvhXg_yFt9QLCl3nbA9HBJU5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:40:10:3e:75:6e:7b:58:5b:38:08:47:eb:c3:0a:df:54:b2:
         b4:0d:a8:75:0e:25:c7:c3:3e:19:70:a1:03:c4:13:bd:bb:59:
         53:4e:50:09:e1:af:72:6f:7d:90:03:ff:83:76:ff:ec:5c:3e:
         69:c0:77:12:10:b7:7f:6b:f0:a2:85:f4:9e:50:ba:5c:9c:c3:
         13:cb:5a:88:52:d6:c9:76:f7:e3:95:9d:ae:72:72:b6:46:27:
         78:29:da:b5:04:e6:bb:55:51:7d:03:1b:b1:f7:5e:5d:4e:bb:
         92:16:82:bf:71:26:b9:39:d2:92:e6:52:a2:71:24:08:c4:af:
         f9:61:e5:ed:09:d6:2e:b6:ad:95:e5:e7:3a:d6:bd:2a:a5:0b:
         cf:86:92:b6:79:d1:a1:db:2a:35:02:e3:64:25:f1:e9:83:34:
         b4:0e:61:d1:1e:91:52:24:a7:6c:1f:ff:2c:3f:43:3d:a5:5c:
         34:b4:05:03:72:3e:61:68:f8:57:65:bf:e3:3f:73:dc:1f:80:
         2d:24:67:04:a2:e7:9c:73:5a:5d:92:2e:07:4d:c6:0b:71:5b:
         eb:6b:06:ba:4f:08:48:a2:1c:e3:bd:63:f5:e9:91:84:6c:da:
         08:bd:3d:59:ed:32:c5:8f:9f:40:eb:1e:6a:33:8c:60:22:36:
         a1:b3:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:38 2026 by rpki-client