This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Ns0TEayHhiePChPTJ9vCIwt5XyI.roa
File:                     Ns0TEayHhiePChPTJ9vCIwt5XyI.roa (raw, json)
Hash identifier:          Xy/xmqWwzmYADBHd+Z2Wr4OAJGAQaKgbnFraMpsTfPk=
Subject key identifier:   36:CD:13:11:AC:87:86:27:8F:0A:13:D3:27:DB:C2:23:0B:79:5F:22
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019C4335EB786DAEAA65C957174160C7C5DF
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Ns0TEayHhiePChPTJ9vCIwt5XyI.roa
Signing time:             Mon 09 Feb 2026 16:22:13 +0000
ROA not before:           Mon 09 Feb 2026 16:22:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198584
IP address blocks:        2a05:9080:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 09:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:35:eb:78:6d:ae:aa:65:c9:57:17:41:60:c7:c5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Feb  9 16:22:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=36cd1311ac8786278f0a13d327dbc2230b795f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:63:f5:e6:10:2a:d7:8d:eb:61:ea:e8:96:a9:
                    16:e2:25:1a:c1:df:2d:ca:c8:a0:f1:13:37:3f:a1:
                    9d:79:19:da:58:03:b8:0e:8a:43:86:c5:50:03:6a:
                    b8:63:f8:e8:04:80:83:c5:18:85:27:d9:8e:c3:7c:
                    6d:8d:dc:1a:cc:15:8c:36:37:63:ac:72:39:9b:11:
                    a9:3e:6f:ab:66:a7:c5:13:99:e8:47:68:c3:76:11:
                    7b:5f:3c:6c:57:fd:c4:41:48:3b:55:f0:2b:e8:c4:
                    14:f5:9a:92:38:0c:78:60:ad:72:5f:54:8d:ba:91:
                    f8:58:94:9c:04:50:79:03:05:4d:b4:68:0f:03:cb:
                    6e:2c:c2:82:91:21:5e:2b:7e:c1:ab:97:e9:1a:c2:
                    24:a1:40:ed:77:53:c3:bd:5c:0b:0a:6e:a6:4b:e1:
                    68:29:a6:5f:66:b5:18:76:ea:79:c9:05:a4:14:70:
                    66:e5:9c:fc:76:18:3f:84:51:08:b1:dd:45:24:d5:
                    97:b7:69:dd:48:ff:cf:a5:b4:af:0b:ea:44:48:f5:
                    40:e4:34:bd:60:25:cd:ad:b6:41:88:de:a0:49:c1:
                    7d:2c:0b:12:40:6b:a7:19:21:e9:ef:1a:a8:75:9b:
                    0e:32:6a:43:ed:5d:8b:eb:a9:3c:c4:08:f9:94:35:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CD:13:11:AC:87:86:27:8F:0A:13:D3:27:DB:C2:23:0B:79:5F:22
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Ns0TEayHhiePChPTJ9vCIwt5XyI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:9080:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:2b:00:3d:97:b6:3a:b0:17:e1:d2:ad:27:d5:7f:10:5a:ef:
         2d:29:69:90:05:1e:a8:ed:cf:4a:1f:20:fb:8c:20:21:74:3b:
         77:77:90:94:3b:84:6e:3f:83:2a:6f:19:4a:81:b3:94:08:39:
         ed:69:a8:83:c5:64:08:01:dc:bf:c1:37:0a:60:13:8e:a2:1c:
         5a:bb:20:22:2c:98:08:03:56:a9:de:bf:f5:22:7a:bc:96:4f:
         a4:61:b7:fc:b5:6a:22:ab:19:8b:67:fc:1b:97:eb:f5:bc:fc:
         d5:40:9e:30:5e:9e:bf:6c:bc:3b:56:99:52:dc:34:88:aa:94:
         bd:24:e1:47:10:51:69:cc:5c:48:ed:5c:09:2f:05:c4:94:cf:
         0d:9d:91:43:82:9c:d9:74:0e:f3:d3:4b:31:80:e1:90:ef:3a:
         a8:4b:d7:c5:09:6a:ba:f6:ee:99:58:61:29:d6:0f:4b:f3:44:
         f8:0a:bb:75:d3:d1:76:6e:2a:16:d6:e7:fc:d2:f8:a4:b4:ac:
         6f:0a:71:c1:f0:39:da:ec:9f:3e:b6:44:85:1d:f9:08:cd:a0:
         fa:b3:57:fc:5b:a5:be:08:99:4d:1f:46:69:17:6e:7a:f9:0d:
         96:1c:a7:3a:18:2d:f0:a9:42:a8:58:fa:70:c1:b1:d5:df:12:
         ca:f3:af:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 16:22:41 2026 by rpki-client