This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/0sNShrDJmnaMM666_lqvw34kSbc.roa
File:                     0sNShrDJmnaMM666_lqvw34kSbc.roa (raw, json)
Hash identifier:          JvACNJqo5Kvs6tRWY9dKRk+H6pDjvw63onqZeKb1aGk=
Subject key identifier:   D2:C3:52:86:B0:C9:9A:76:8C:33:AE:BA:FE:5A:AF:C3:7E:24:49:B7
Certificate issuer:       /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial:       019B7A5AB388C8EE03F949342C91C8E414B2
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/0sNShrDJmnaMM666_lqvw34kSbc.roa
Signing time:             Thu 01 Jan 2026 16:18:43 +0000
ROA not before:           Thu 01 Jan 2026 16:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16077
IP address blocks:        193.41.180.0/23 maxlen: 23
                          193.108.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:b3:88:c8:ee:03:f9:49:34:2c:91:c8:e4:14:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
        Validity
            Not Before: Jan  1 16:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d2c35286b0c99a768c33aebafe5aafc37e2449b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:92:be:df:26:d6:67:5e:48:8a:cf:77:cc:d6:
                    59:0d:e1:11:15:c1:b0:f6:86:fe:25:b8:9a:23:4b:
                    dd:6c:cb:c9:46:a2:b8:eb:70:53:f5:80:0f:b9:be:
                    5e:d4:44:13:c1:db:03:9b:25:24:25:83:08:f4:42:
                    2f:27:82:cf:20:0b:2d:93:9c:da:9b:76:37:f7:16:
                    44:f3:9d:09:c1:04:b3:f3:b0:6f:e0:7f:23:65:d4:
                    98:1c:6a:51:25:bc:38:4e:66:b9:d5:bf:7e:b3:51:
                    22:6e:fa:a9:37:68:2a:ec:b9:11:50:0f:f6:59:7e:
                    5a:40:7a:56:18:c0:48:fd:a0:d2:18:1c:02:a3:f8:
                    3c:a5:07:cd:9a:37:d2:f9:4d:47:c2:e4:58:f8:db:
                    9f:9b:b6:d0:81:4e:fb:92:60:1d:f5:b0:a7:28:aa:
                    84:1f:34:bd:a7:4e:25:e2:b7:c5:cb:d7:6d:ca:29:
                    f2:6e:15:b2:20:36:58:0f:c1:c8:55:03:78:66:76:
                    14:d9:a1:c2:1a:3d:26:a8:f5:04:1e:50:65:85:42:
                    ca:78:85:b3:49:ae:5c:00:33:a9:78:55:b5:c1:4e:
                    9d:e5:cd:10:b2:3b:69:96:4e:9c:60:ba:ce:88:c2:
                    2e:01:ad:7f:fa:bd:bd:f2:f9:da:88:39:ea:b9:db:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C3:52:86:B0:C9:9A:76:8C:33:AE:BA:FE:5A:AF:C3:7E:24:49:B7
            X509v3 Authority Key Identifier:
                keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/0sNShrDJmnaMM666_lqvw34kSbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.41.180.0/23
                  193.108.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:72:bb:bb:8c:b4:7f:1f:dd:88:2d:5a:44:79:ae:4b:f3:ff:
         31:bc:ec:5a:f1:cd:7c:c9:84:5c:41:ac:21:19:15:a5:b7:9d:
         5c:7c:b7:e1:79:7d:50:d4:d6:4c:5f:c0:8f:86:c9:f2:93:e9:
         4a:1f:ad:6d:ca:9d:fe:49:3a:a4:1a:1b:ea:59:d5:9f:b3:f7:
         cd:e1:c5:26:cb:dd:79:b6:f0:52:fc:66:25:71:b0:1b:71:a9:
         e7:86:5a:29:c9:92:0f:15:8c:23:98:09:ac:89:e8:99:1d:e6:
         0d:98:6e:38:0b:b3:58:05:d7:c2:12:a4:46:b0:0e:19:d0:c7:
         52:0b:0e:9f:46:78:45:06:fe:45:87:90:91:25:cf:36:bc:fc:
         c2:8b:07:8c:b6:12:b2:da:d1:3e:4d:42:33:dd:d2:1a:b3:e0:
         84:bc:48:ce:1a:e8:7a:d5:80:95:2a:f8:6a:b8:d4:d3:28:60:
         9f:b2:df:a0:3c:f4:85:88:f2:58:d7:c4:66:03:2e:c4:58:c5:
         bc:dd:46:a0:5b:a2:05:4d:85:cc:28:dc:40:a6:4d:45:e3:b6:
         70:1a:22:97:7a:9d:c8:84:17:f2:ff:a0:18:ae:50:5c:47:fb:
         07:45:e5:60:e7:04:e7:81:f9:f3:3e:e6:1c:97:37:fa:ae:bb:
         0a:fb:ed:f5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt6WrOIyO4D+Uk0LJHI5BSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmOTM2MGI2ZjU4MzlhYWZkY2UyMWNkNmRlNzYzYmRhYTI2
YmZiZjAwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmMzNTI4NmIwYzk5YTc2OGMzM2FlYmFmZTVhYWZjMzdlMjQ0OWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5K+3ybWZ15Iis93zNZZDeERFcGw
9ob+JbiaI0vdbMvJRqK463BT9YAPub5e1EQTwdsDmyUkJYMI9EIvJ4LPIAstk5za
m3Y39xZE850JwQSz87Bv4H8jZdSYHGpRJbw4Tma51b9+s1EibvqpN2gq7LkRUA/2
WX5aQHpWGMBI/aDSGBwCo/g8pQfNmjfS+U1HwuRY+Nufm7bQgU77kmAd9bCnKKqE
HzS9p04l4rfFy9dtyinybhWyIDZYD8HIVQN4ZnYU2aHCGj0mqPUEHlBlhULKeIWz
Sa5cADOpeFW1wU6d5c0Qsjtplk6cYLrOiMIuAa1/+r298vnaiDnquduc0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNLDUoawyZp2jDOuuv5ar8N+JEm3MB8GA1UdIwQY
MBaAFG+TYLb1g5qv3OIc1t52O9qia/vwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjVOZ3R2V0RtcV9jNGh6VzNuWTcycUpyLV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lMDU2MTQtMjgyNC00Mjk4LWJlMGMt
ZTNhN2ZmMTFjNjMxLzEvMHNOU2hyREptbmFNTTY2Nl9scXZ3MzRrU2JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lMDU2MTQtMjgyNC00Mjk4LWJlMGMtZTNhN2ZmMTFjNjMx
LzEvYjVOZ3R2V0RtcV9jNGh6VzNuWTcycUpyLV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwSm0AwQA
wWzLMA0GCSqGSIb3DQEBCwUAA4IBAQAJcru7jLR/H92ILVpEea5L8/8xvOxa8c18
yYRcQawhGRWlt51cfLfheX1Q1NZMX8CPhsnyk+lKH61typ3+STqkGhvqWdWfs/fN
4cUmy915tvBS/GYlcbAbcannhlopyZIPFYwjmAmsieiZHeYNmG44C7NYBdfCEqRG
sA4Z0MdSCw6fRnhFBv5Fh5CRJc82vPzCiweMthKy2tE+TUIz3dIas+CEvEjOGuh6
1YCVKvhquNTTKGCfst+gPPSFiPJY18RmAy7EWMW83UagW6IFTYXMKNxApk1F47Zw
GiKXep3IhBfy/6AYrlBcR/sHReVg5wTngfnzPuYclzf6rrsK++31
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:10:23 2026 by rpki-client