This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/ancLH9rsRbLYVZt0JNdPMXKNpK0.roa
File:                     ancLH9rsRbLYVZt0JNdPMXKNpK0.roa (raw, json)
Hash identifier:          rcYMBMHI8US97MASNfqHUHYDCTe+glT7idqsTc69Xuc=
Subject key identifier:   6A:77:0B:1F:DA:EC:45:B2:D8:55:9B:74:24:D7:4F:31:72:8D:A4:AD
Certificate issuer:       /CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Certificate serial:       019B7BA51C7E871EDE26ED508A3726BD4D2F
Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/ancLH9rsRbLYVZt0JNdPMXKNpK0.roa
Signing time:             Thu 01 Jan 2026 22:19:36 +0000
ROA not before:           Thu 01 Jan 2026 22:19:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48560
IP address blocks:        194.50.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:1c:7e:87:1e:de:26:ed:50:8a:37:26:bd:4d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875
        Validity
            Not Before: Jan  1 22:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a770b1fdaec45b2d8559b7424d74f31728da4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:cc:97:2e:2d:df:97:89:c5:de:01:09:23:b2:
                    92:51:3f:07:b2:51:42:57:03:f7:b6:f0:52:eb:1f:
                    94:5e:00:c7:d2:ff:1b:4b:d7:cc:42:13:c9:3a:01:
                    9a:1f:9f:a8:e8:49:dd:34:19:17:86:10:15:66:0c:
                    c3:04:50:2f:3c:6e:8c:60:1f:80:20:e1:a5:6f:a2:
                    f3:ee:33:d5:10:d0:06:45:00:14:6a:8a:c1:29:84:
                    bb:fb:4c:99:1d:8b:f4:77:7c:cf:52:6b:00:62:24:
                    bd:f5:82:44:02:18:9e:b5:81:a8:33:f5:ab:f0:94:
                    f7:0a:3c:d4:0d:f4:d3:c3:da:7d:3e:15:2f:38:86:
                    53:3d:1a:a5:ee:a0:ea:bc:68:e2:62:97:3b:23:0b:
                    5c:47:31:4a:cd:66:b0:99:d2:26:99:3f:a1:3e:ad:
                    6e:a1:1a:9a:96:c6:16:ac:64:b3:ee:6b:df:29:d1:
                    f8:1b:c8:4b:08:59:33:f0:d2:cd:8d:c5:db:1b:83:
                    57:d2:49:58:f9:3a:46:b2:30:b0:92:87:70:82:55:
                    0c:e6:e1:1b:16:a2:ff:87:9b:bc:73:59:73:19:ea:
                    bc:60:8e:51:a1:3e:ac:5e:5f:6c:db:2e:50:af:44:
                    d5:39:fd:47:f4:5d:65:ec:3b:94:d0:95:12:50:79:
                    25:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:77:0B:1F:DA:EC:45:B2:D8:55:9B:74:24:D7:4F:31:72:8D:A4:AD
            X509v3 Authority Key Identifier:
                keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/ancLH9rsRbLYVZt0JNdPMXKNpK0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:4e:1d:92:92:cc:8c:b9:92:ba:89:c4:c7:82:80:25:e2:ec:
         b1:cc:63:91:de:59:5e:93:90:ee:cf:e2:74:15:5c:70:e0:a9:
         7e:1d:a2:99:26:c3:14:ef:ce:70:90:3e:47:05:69:5f:cf:29:
         45:36:14:46:19:c3:f2:74:70:12:27:44:40:ba:22:22:97:f0:
         2f:f6:84:4b:9f:00:ec:b1:e9:c6:95:f5:d3:c9:2c:33:20:b8:
         6a:b6:9d:a7:eb:5b:f1:db:6b:9d:f2:4f:ac:92:0c:3d:1b:e7:
         20:00:a3:89:e0:6a:18:1c:7f:02:62:52:00:48:25:3a:31:90:
         68:8e:6d:42:ac:51:2a:64:c3:d4:67:2e:e4:b2:6b:a8:fb:f9:
         e4:b3:ff:fe:a2:f1:6f:df:75:d1:58:be:50:51:44:50:bd:45:
         ff:26:36:30:21:45:07:b1:d9:d8:01:8c:80:e5:46:a2:4b:1f:
         36:7f:ad:88:c6:38:74:e7:3f:f3:1b:b9:a1:15:98:3d:70:f8:
         cf:d2:b5:49:c8:71:21:15:38:be:21:63:85:e5:58:f2:c0:ef:
         24:c3:81:b2:56:ba:84:2f:e9:c2:62:a2:dc:e6:54:37:eb:72:
         e3:11:71:d1:43:4f:a9:15:ff:b2:f5:9b:1d:8d:3b:a4:12:30:
         11:6d:bc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:02 2026 by rpki-client