This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/s9wft5exBNkYskV_dZzV8PgTmN8.roa
File:                     s9wft5exBNkYskV_dZzV8PgTmN8.roa (raw, json)
Hash identifier:          SqDQE0wx9TjgCXIZt8Rvz7S4lvxi/pWK/bn1VcvBoIA=
Subject key identifier:   B3:DC:1F:B7:97:B1:04:D9:18:B2:45:7F:75:9C:D5:F0:F8:13:98:DF
Certificate issuer:       /CN=927a47d7477f25689f64d064b3eca09647e8cea2
Certificate serial:       019B7F855F7E833EDB77BABABC312CBA45C9
Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/s9wft5exBNkYskV_dZzV8PgTmN8.roa
Signing time:             Fri 02 Jan 2026 16:23:25 +0000
ROA not before:           Fri 02 Jan 2026 16:23:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60076
IP address blocks:        193.107.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:5f:7e:83:3e:db:77:ba:ba:bc:31:2c:ba:45:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2
        Validity
            Not Before: Jan  2 16:23:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b3dc1fb797b104d918b2457f759cd5f0f81398df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:27:04:4b:b8:60:3f:fc:14:12:98:55:89:1b:
                    bb:38:35:66:31:45:04:a8:4a:08:a2:71:02:39:a0:
                    f7:88:9a:a1:80:2c:12:15:68:6a:ae:64:a1:af:5a:
                    54:0f:9d:c6:3b:c7:ba:58:4e:fb:08:bd:0b:06:d6:
                    f0:9d:8e:cd:12:fd:0d:5f:1a:fd:2b:48:bc:ad:9d:
                    84:4d:19:e2:76:0e:22:15:99:ad:69:8f:d2:89:17:
                    f7:ec:db:94:5f:cb:75:f2:32:d8:00:3a:86:01:90:
                    1f:ac:41:9f:87:9d:b4:c9:a6:3b:7a:56:c3:29:24:
                    e9:dc:83:1a:e5:e3:99:40:b5:fc:21:6c:fb:1b:65:
                    aa:ca:31:8e:7e:c8:63:7d:7c:54:3b:f1:53:ee:22:
                    a4:29:9a:8b:aa:b8:26:bc:6f:ad:52:1c:2c:22:6b:
                    96:56:1b:f6:43:90:ea:0a:f6:ff:d4:a4:38:89:8f:
                    fd:7b:8c:f8:27:bb:ac:95:75:f7:a5:46:8c:8d:01:
                    e5:41:7f:31:f2:e8:86:cd:d6:b5:3a:20:69:83:ab:
                    5e:44:ca:c7:d6:4b:3d:40:68:8a:0d:4b:ce:4b:9f:
                    ec:b4:fa:5c:15:01:1b:df:59:17:27:54:ab:73:c3:
                    3f:1c:39:99:73:b2:42:82:f5:53:74:15:83:bf:4d:
                    4c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DC:1F:B7:97:B1:04:D9:18:B2:45:7F:75:9C:D5:F0:F8:13:98:DF
            X509v3 Authority Key Identifier:
                keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/s9wft5exBNkYskV_dZzV8PgTmN8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:c1:37:60:99:82:ef:31:a8:3c:a9:f0:ba:ce:33:5d:86:ff:
         f1:3b:fd:c7:b1:69:4a:23:57:da:58:81:27:cf:d0:d9:33:b3:
         f2:7d:87:64:7d:ba:ac:18:ae:56:85:a3:bd:02:2c:21:6e:a7:
         2c:96:e8:f7:66:05:e3:93:a3:31:3a:75:0d:8c:08:df:aa:45:
         c8:a4:31:0d:14:e3:e5:80:a8:0e:9d:ae:40:95:cc:7e:44:46:
         e5:d9:53:57:ee:84:b5:b3:b5:1e:58:e4:d2:ae:2e:a8:0f:bc:
         3d:b5:2c:c3:62:06:c9:13:e7:2d:42:fe:fc:97:9d:a8:1b:76:
         75:4b:bb:3c:34:3a:16:06:86:7c:b2:bb:ed:1f:2b:b5:31:e9:
         04:73:fd:f0:f5:22:d5:24:0d:ad:3a:45:06:00:ae:f8:fb:f2:
         ac:0f:c1:91:ae:16:05:9a:df:9e:95:55:10:55:7e:1e:b3:1b:
         dc:23:18:34:ba:8f:09:b9:78:9f:7d:31:34:cf:ac:dc:f0:a8:
         b3:5b:ec:97:f0:8d:ab:b8:5a:2f:f2:06:60:dd:4e:af:db:db:
         9b:13:11:8d:0a:ed:ec:1a:5d:a3:57:69:49:38:28:25:00:d6:
         bf:2f:89:9d:23:38:0a:af:04:58:89:80:fc:fa:37:30:b8:e2:
         e7:87:5c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:03:38 2026 by rpki-client