This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/9yiB2kgtBAsvl_hUtTF_9T1_6hA.roa
File:                     9yiB2kgtBAsvl_hUtTF_9T1_6hA.roa (raw, json)
Hash identifier:          LvAW/dorcWJs7ZFyV1eDoNVGXIMQa9jTmGb0oFcyF74=
Subject key identifier:   F7:28:81:DA:48:2D:04:0B:2F:97:F8:54:B5:31:7F:F5:3D:7F:EA:10
Certificate issuer:       /CN=7946c5601064101b1b54cf5c6efcd407f17911b9
Certificate serial:       019B79ED28D77D1BC26A341D4CE25AE9064D
Authority key identifier: 79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/9yiB2kgtBAsvl_hUtTF_9T1_6hA.roa
Signing time:             Thu 01 Jan 2026 14:19:04 +0000
ROA not before:           Thu 01 Jan 2026 14:19:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8708
IP address blocks:        194.102.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 08:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:28:d7:7d:1b:c2:6a:34:1d:4c:e2:5a:e9:06:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7946c5601064101b1b54cf5c6efcd407f17911b9
        Validity
            Not Before: Jan  1 14:19:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f72881da482d040b2f97f854b5317ff53d7fea10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:c4:ce:4f:3e:34:4e:a7:fa:95:44:3b:41:
                    fb:ef:00:98:d7:01:83:49:20:b9:ed:70:d9:d2:58:
                    e0:4d:b6:86:36:99:41:bc:4e:d1:fa:e7:d7:e9:98:
                    02:e9:3d:2e:24:7a:71:1d:eb:6f:22:e8:3b:eb:57:
                    77:c1:3e:ee:23:76:3a:ff:c9:bb:3c:62:d3:8c:42:
                    a0:6e:ac:dd:41:b1:98:ac:ef:36:be:7b:3d:d9:c6:
                    0d:af:bd:df:fb:b1:c9:6b:90:aa:df:24:fa:63:c5:
                    fa:ed:d9:3e:13:7a:e3:b2:e3:c8:80:1c:4a:37:93:
                    3d:7c:4a:cc:82:f7:c7:7d:17:88:c3:09:d4:43:70:
                    64:9f:ec:ca:16:f7:2d:33:bd:24:aa:0d:5f:b6:02:
                    4a:0d:6d:ff:1d:12:f5:76:3b:55:8c:9e:9e:d6:80:
                    72:ad:1d:bb:78:d1:70:ba:3c:c6:77:e4:5b:d8:17:
                    80:81:b6:9f:f3:b6:2f:f2:fd:85:35:f0:7e:e1:80:
                    25:f6:0c:51:d9:54:0f:2b:d8:5d:4b:b4:d8:85:3c:
                    c3:db:19:f9:18:b3:ab:9a:58:17:23:2d:c0:63:25:
                    f6:11:fa:88:dc:18:90:40:a0:ff:bb:be:ca:a2:77:
                    38:07:03:e0:8e:0b:4a:74:30:b0:32:cb:07:6f:e8:
                    eb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:28:81:DA:48:2D:04:0B:2F:97:F8:54:B5:31:7F:F5:3D:7F:EA:10
            X509v3 Authority Key Identifier:
                keyid:79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/9yiB2kgtBAsvl_hUtTF_9T1_6hA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.102.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:f3:d7:59:75:78:49:fd:f1:4c:89:f1:f5:ff:61:a9:1b:82:
         36:d3:2b:a7:a6:0b:a3:b6:94:db:0d:6a:98:1b:a7:d1:fd:4b:
         d3:8c:d0:76:d1:5c:6d:e6:50:d2:36:9e:bb:5b:c0:63:1b:e8:
         b5:ae:c6:96:a8:8b:fe:b2:f8:46:da:3b:e1:ee:2d:37:e7:23:
         fb:52:6d:d0:35:e3:1a:f3:25:84:62:ab:3c:3a:82:8a:3b:5e:
         a4:17:c6:a0:61:8f:f6:2e:82:3c:56:3e:60:86:9c:a0:d7:04:
         2e:44:79:34:d4:4e:f6:01:9e:fe:2a:16:01:ef:e9:75:91:84:
         eb:46:a8:c9:72:0f:40:77:f1:35:bb:a7:18:42:98:86:4b:f5:
         de:5b:30:ea:ec:e1:3d:21:12:d0:41:ee:72:dc:bb:75:58:12:
         a4:85:8b:4f:96:4d:76:68:90:64:be:2f:5a:82:c4:e5:62:22:
         d7:36:3a:c5:ac:bd:ec:da:fb:73:c1:fe:d8:e2:55:6c:9b:8b:
         f0:f3:b0:2f:50:af:91:7f:55:f5:99:22:8c:36:d7:7e:65:ce:
         21:a6:9f:90:4d:2e:aa:36:ba:98:f6:dc:2c:c5:a4:77:94:5f:
         8e:80:84:60:e7:e3:af:fe:de:c8:12:d8:a5:28:af:0c:93:37:
         05:d5:d6:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt57SjXfRvCajQdTOJa6QZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NDZjNTYwMTA2NDEwMWIxYjU0Y2Y1YzZlZmNkNDA3ZjE3
OTExYjkwHhcNMjYwMTAxMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzI4ODFkYTQ4MmQwNDBiMmY5N2Y4NTRiNTMxN2ZmNTNkN2ZlYTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugfEzk8+NE6n+pVEO0H77wCY1wGD
SSC57XDZ0ljgTbaGNplBvE7R+ufX6ZgC6T0uJHpxHetvIug761d3wT7uI3Y6/8m7
PGLTjEKgbqzdQbGYrO82vns92cYNr73f+7HJa5Cq3yT6Y8X67dk+E3rjsuPIgBxK
N5M9fErMgvfHfReIwwnUQ3Bkn+zKFvctM70kqg1ftgJKDW3/HRL1djtVjJ6e1oBy
rR27eNFwujzGd+Rb2BeAgbaf87Yv8v2FNfB+4YAl9gxR2VQPK9hdS7TYhTzD2xn5
GLOrmlgXIy3AYyX2EfqI3BiQQKD/u77Konc4BwPgjgtKdDCwMssHb+jruQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPcogdpILQQLL5f4VLUxf/U9f+oQMB8GA1UdIwQY
MBaAFHlGxWAQZBAbG1TPXG781AfxeRG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVViRllCQmtFQnNiVk05Y2J2elVCX0Y1RWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83M2ZlNzgtZjAwZC00NWY4LWJmZDMt
ZjJhMGU5YzhjN2YwLzEvOXlpQjJrZ3RCQXN2bF9oVXRURl85VDFfNmhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83M2ZlNzgtZjAwZC00NWY4LWJmZDMtZjJhMGU5YzhjN2Yw
LzEvZVViRllCQmtFQnNiVk05Y2J2elVCX0Y1RWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmaAMA0G
CSqGSIb3DQEBCwUAA4IBAQAu89dZdXhJ/fFMifH1/2GpG4I20yunpgujtpTbDWqY
G6fR/UvTjNB20Vxt5lDSNp67W8BjG+i1rsaWqIv+svhG2jvh7i035yP7Um3QNeMa
8yWEYqs8OoKKO16kF8agYY/2LoI8Vj5ghpyg1wQuRHk01E72AZ7+KhYB7+l1kYTr
RqjJcg9Ad/E1u6cYQpiGS/XeWzDq7OE9IRLQQe5y3Lt1WBKkhYtPlk12aJBkvi9a
gsTlYiLXNjrFrL3s2vtzwf7Y4lVsm4vw87AvUK+Rf1X1mSKMNtd+Zc4hpp+QTS6q
NrqY9twsxaR3lF+OgIRg5+Ov/t7IEtilKK8MkzcF1dav
-----END CERTIFICATE-----
Generated at Mon Jan 26 14:14:06 2026 by rpki-client