This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa
File:                     p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa (raw, json)
Hash identifier:          XKWGoP/7AKlCb/UQ1yCnmOl4XCSltYQxcpO0+1gE4vE=
Subject key identifier:   A7:FD:73:3A:31:3B:44:33:48:3C:CF:BD:8A:33:CB:B1:30:F8:70:2E
Certificate issuer:       /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial:       019B7759355C0F22F512C10DD904137BDFAF
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa
Signing time:             Thu 01 Jan 2026 02:18:13 +0000
ROA not before:           Thu 01 Jan 2026 02:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61385
IP address blocks:        2a05:9281::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:35:5c:0f:22:f5:12:c1:0d:d9:04:13:7b:df:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
        Validity
            Not Before: Jan  1 02:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a7fd733a313b4433483ccfbd8a33cbb130f8702e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:de:fc:71:41:12:3f:ac:29:4f:39:38:74:69:
                    f3:25:18:7f:dc:ec:34:59:59:77:93:0a:0b:9d:ff:
                    76:b7:ee:80:05:ce:e2:63:b4:d6:e8:e2:79:89:70:
                    7e:1c:16:ed:71:09:bb:bc:d9:53:7f:27:c1:50:2d:
                    bf:d9:6a:c6:3e:85:1e:b3:2f:95:47:fb:a1:60:b1:
                    8e:04:71:41:f0:cd:b9:ad:c4:7a:6a:65:13:34:da:
                    4c:c0:c4:7f:0c:03:92:02:e8:ad:36:aa:76:d7:b6:
                    d9:13:c7:fe:e7:49:76:6b:64:14:e1:8d:95:dd:cc:
                    8b:c3:46:b6:02:8e:8b:95:8e:44:59:ec:ff:6b:cb:
                    8c:a5:6c:5a:42:69:f1:05:fc:7a:34:ff:72:3c:3b:
                    7f:73:4d:17:f7:27:64:ef:a8:df:fb:a7:90:fb:1f:
                    69:90:a3:4e:c0:02:33:c3:bd:3c:0c:49:68:b8:42:
                    75:d2:e6:fa:f1:a0:24:96:6e:cf:e0:ca:45:ce:f0:
                    23:34:aa:78:d8:6d:ee:7e:4b:28:b7:f7:da:66:d3:
                    ef:9d:17:ae:24:d6:58:c9:c0:6a:70:34:41:d3:e1:
                    ba:5f:0d:7b:07:72:a7:07:da:8c:79:d5:14:f0:f3:
                    3d:4b:36:06:c5:1e:00:67:95:ad:73:e9:8b:fd:e2:
                    d4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FD:73:3A:31:3B:44:33:48:3C:CF:BD:8A:33:CB:B1:30:F8:70:2E
            X509v3 Authority Key Identifier:
                keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/p_1zOjE7RDNIPM-9ijPLsTD4cC4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:9281::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:bc:9f:de:30:73:24:0d:ce:c9:fa:c2:8b:2f:9c:eb:77:f0:
         c9:11:af:ff:c3:75:e3:bd:0d:8c:18:12:30:3e:c3:54:2a:1e:
         2a:91:ca:19:7d:f9:63:0a:fc:2c:71:eb:bf:1d:c6:59:e4:27:
         02:a2:ce:bd:ee:f5:6f:06:81:e2:e6:79:12:e8:6c:39:96:99:
         5b:91:7a:ca:70:0f:c2:4b:38:a7:ec:dd:69:e5:db:1b:02:2a:
         32:bf:e3:34:33:bd:15:8d:8f:70:af:e4:ee:6b:9c:53:b6:40:
         80:f7:93:26:42:ae:6d:90:ca:8d:c1:45:88:25:a4:61:86:b7:
         93:cf:d0:b6:cd:f8:9c:6c:95:e0:7c:5b:1d:89:09:5e:73:6f:
         0f:db:57:ba:2b:f4:01:92:8a:e9:a8:1e:27:05:ac:56:8f:95:
         f4:5a:06:63:6f:da:16:7b:e8:fb:03:cd:90:c5:f3:22:8f:f8:
         4f:cc:4c:93:bb:ba:a4:00:bb:c4:89:30:ca:ed:8e:0a:43:6d:
         14:6e:a8:93:74:61:ca:ad:a1:9c:ea:f2:2b:7d:04:3d:62:61:
         e3:cc:e2:ad:7d:42:23:8b:2d:30:0c:4a:8b:71:54:44:cc:56:
         56:6d:3b:61:5f:29:ae:d5:07:4b:f8:55:5e:12:95:03:0d:8d:
         1e:23:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:18 2026 by rpki-client