This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/EdVO9FKaVINf4-EcfDH2n-UZXgI.roa
File:                     EdVO9FKaVINf4-EcfDH2n-UZXgI.roa (raw, json)
Hash identifier:          dwVT4CPLLp3oBHUxJmbUMjoihn96t4N47NrHTtml6ac=
Subject key identifier:   11:D5:4E:F4:52:9A:54:83:5F:E3:E1:1C:7C:31:F6:9F:E5:19:5E:02
Certificate issuer:       /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial:       019B7C134C489C17DE75B2CDBE6EE872C843
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/EdVO9FKaVINf4-EcfDH2n-UZXgI.roa
Signing time:             Fri 02 Jan 2026 00:19:58 +0000
ROA not before:           Fri 02 Jan 2026 00:19:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208336
IP address blocks:        193.17.53.0/24 maxlen: 24
                          193.203.24.0/24 maxlen: 24
                          193.203.110.0/24 maxlen: 24
                          193.203.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:4c:48:9c:17:de:75:b2:cd:be:6e:e8:72:c8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
        Validity
            Not Before: Jan  2 00:19:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=11d54ef4529a54835fe3e11c7c31f69fe5195e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:a2:be:38:08:c0:e1:c3:7b:06:a3:61:69:
                    78:57:2d:f7:05:91:7b:d5:0c:b1:df:68:d6:25:b9:
                    f9:a0:3a:79:6a:c6:59:87:78:39:79:a4:ed:03:98:
                    c2:b3:bb:db:e7:ca:6f:e7:c8:4f:ad:26:c5:03:76:
                    d1:ae:16:85:7a:0f:7c:73:5c:4d:dd:b7:5c:92:36:
                    6a:4f:f8:98:7d:6d:8e:d1:66:fc:81:0b:71:a9:45:
                    42:ff:2d:c7:53:bf:f9:84:c4:a1:73:10:e6:46:50:
                    7d:5d:75:1e:8c:d0:ff:f8:63:cf:3f:6c:96:fe:3c:
                    37:50:da:30:70:d9:15:f8:b9:2e:6b:b8:a8:40:91:
                    e9:4d:1a:eb:aa:1a:d2:53:76:95:a5:e8:06:7f:97:
                    3f:eb:b4:c6:5d:2b:a6:22:29:8f:4c:51:1b:8f:cd:
                    55:c7:aa:22:b0:18:6a:d5:fe:20:c0:42:68:1e:c7:
                    bf:aa:e3:29:21:1d:80:aa:fd:71:8c:6c:e1:3b:d1:
                    38:26:c8:8d:96:a6:5e:4b:c9:5b:cd:7f:67:a4:a7:
                    5f:c1:fe:65:59:be:b1:5e:5a:12:ad:d8:34:7b:c4:
                    a5:70:90:a5:a2:21:12:b1:19:df:f4:1f:d9:82:86:
                    e2:84:23:20:c1:ff:89:6c:3b:5e:e3:e4:54:81:70:
                    ec:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D5:4E:F4:52:9A:54:83:5F:E3:E1:1C:7C:31:F6:9F:E5:19:5E:02
            X509v3 Authority Key Identifier:
                keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/EdVO9FKaVINf4-EcfDH2n-UZXgI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.17.53.0/24
                  193.203.24.0/24
                  193.203.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:ad:27:2f:b2:61:91:ab:95:60:e9:4c:4b:27:8f:43:4c:1a:
         63:f9:9e:b3:e5:91:4a:ae:7f:9e:dd:49:48:c6:00:04:62:0d:
         ec:b1:1a:d4:ef:f7:3b:0a:b2:57:0c:a9:45:4b:45:70:89:da:
         1c:2b:ea:5a:e2:6f:5b:85:56:f3:5a:b3:88:d6:5b:bd:a7:f1:
         41:75:ca:28:ad:25:26:82:fa:02:b1:21:28:18:c7:e4:af:61:
         20:9a:00:ec:b8:cf:f8:68:c8:56:50:0e:45:e8:a8:7d:21:ba:
         2b:e2:ac:8d:fa:3e:a3:3d:7c:c3:2d:f5:b3:13:2e:57:ee:6f:
         3a:92:68:7d:cd:06:32:ed:9f:22:86:4a:c2:f7:74:41:09:f2:
         0d:ff:f6:30:9d:1a:75:cd:29:4b:fc:49:65:1c:52:ac:10:eb:
         d5:f1:be:fe:ff:05:bf:3d:a2:ce:97:05:bd:26:fb:14:69:ed:
         e4:bb:2a:22:6d:6a:6f:bc:60:a9:89:54:bc:6e:4f:44:18:1b:
         c4:1f:50:7e:16:f7:d8:60:cb:52:e0:7d:84:7b:81:db:a2:21:
         a0:73:2e:01:d9:a3:ec:47:3d:f7:d8:05:8c:8e:71:c0:af:ee:
         36:ba:53:34:f4:b8:eb:dc:52:e7:80:98:6f:ab:d1:b9:5f:ef:
         e8:33:4c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 04:28:27 2026 by rpki-client