This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/9fygxgPENVIvZQfoRPu5xWm5fP0.roa
File:                     9fygxgPENVIvZQfoRPu5xWm5fP0.roa (raw, json)
Hash identifier:          NERurGMvuWpT735e9RelslwR2hGh8/G3a9Go5nrjDxc=
Subject key identifier:   F5:FC:A0:C6:03:C4:35:52:2F:65:07:E8:44:FB:B9:C5:69:B9:7C:FD
Certificate issuer:       /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial:       019B7CED035CD75528627C2C893F5D2A1335
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/9fygxgPENVIvZQfoRPu5xWm5fP0.roa
Signing time:             Fri 02 Jan 2026 04:17:46 +0000
ROA not before:           Fri 02 Jan 2026 04:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50148
IP address blocks:        195.130.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:03:5c:d7:55:28:62:7c:2c:89:3f:5d:2a:13:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
        Validity
            Not Before: Jan  2 04:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5fca0c603c435522f6507e844fbb9c569b97cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:33:89:24:7e:91:16:21:0b:58:c0:06:c8:
                    5e:da:18:32:41:d7:93:3c:20:77:e1:3e:fd:3e:a2:
                    f1:4f:fe:bd:38:55:93:6f:a2:ba:83:5c:ba:8d:77:
                    2d:21:99:45:83:6b:48:57:78:fc:2e:55:3c:40:a8:
                    6f:03:61:89:ac:05:08:8a:19:cd:44:5f:0c:41:83:
                    88:e6:38:20:c8:9c:c4:7c:b2:9a:3f:e5:1b:23:5a:
                    6d:fc:3b:92:50:99:9f:aa:8c:39:b0:0f:12:35:ce:
                    95:29:6a:e3:4d:27:23:ad:5d:a9:15:78:ef:76:de:
                    5a:82:8c:f1:9b:e1:e9:3d:d5:7f:87:1b:f2:4c:57:
                    b8:0a:96:5c:17:e8:43:1e:8e:f3:c2:ee:31:4b:e3:
                    58:50:57:84:60:c8:82:74:b2:bb:7a:9a:f5:85:b1:
                    ec:8c:e9:21:51:cb:8d:44:f3:a2:e7:c1:c8:fd:c6:
                    0d:14:5c:93:a0:1b:32:ec:c7:9f:6d:ac:7a:f4:c9:
                    3d:78:ad:f0:bf:b0:1b:c8:7d:65:da:f6:cd:94:88:
                    3a:0b:e5:b1:a3:42:6d:7c:09:dc:27:16:60:7d:94:
                    0c:b5:db:55:20:ee:4b:7a:4b:0e:49:3d:f3:fc:6a:
                    b1:37:61:ef:eb:ad:c9:df:3e:ac:35:64:5d:2c:7c:
                    6c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FC:A0:C6:03:C4:35:52:2F:65:07:E8:44:FB:B9:C5:69:B9:7C:FD
            X509v3 Authority Key Identifier:
                keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/9fygxgPENVIvZQfoRPu5xWm5fP0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.130.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:f3:d4:4e:4b:9c:10:c1:eb:df:1f:18:1d:4d:16:d1:31:d6:
         d2:b7:c4:be:32:86:7c:a0:42:ff:0a:17:23:39:b5:00:89:5f:
         67:04:9d:70:da:7e:c1:27:4e:7b:09:91:3b:2a:96:b5:76:95:
         09:69:26:60:ec:e8:84:0f:51:92:2e:4f:7d:f7:ae:fe:3c:34:
         11:2d:e2:4b:ef:91:62:8d:be:05:18:b0:4f:41:49:d3:8c:ef:
         22:f4:1e:ac:ed:45:94:29:76:d0:93:39:9b:14:e0:53:6d:54:
         8c:8c:21:73:73:e3:79:31:2d:20:94:70:11:35:32:ab:39:48:
         5e:da:cb:2a:85:5c:2f:bf:cd:b2:55:54:08:0a:5a:0a:55:4a:
         09:b1:bc:f6:f7:90:cc:9a:1f:c4:a7:64:5c:e6:d3:ba:89:28:
         88:dd:83:0d:80:09:55:70:36:48:e5:52:42:27:61:8e:4c:51:
         73:df:15:84:b3:b4:f8:db:02:12:fa:fc:ee:4b:3e:23:d0:0d:
         18:e6:12:f9:21:ae:90:36:77:4b:c8:c7:55:77:12:bc:d3:b4:
         81:0a:77:e6:79:65:8f:ad:bd:80:19:7c:7b:37:84:e3:dd:18:
         08:ad:ac:5c:44:2f:1c:e1:7d:1d:24:95:d6:bc:7f:7e:40:4b:
         c3:68:00:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 07:58:46 2026 by rpki-client