This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/oDVz2eTnCDw98Sh8AXFEKdiMCm8.roa
File:                     oDVz2eTnCDw98Sh8AXFEKdiMCm8.roa (raw, json)
Hash identifier:          thUeFABDpIEkTpbKZW+FpdsviA9MqeC7/Ij0qsHenC8=
Subject key identifier:   A0:35:73:D9:E4:E7:08:3C:3D:F1:28:7C:01:71:44:29:D8:8C:0A:6F
Certificate issuer:       /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial:       019B7C1361A54EC4779FCBA90593FEAEEA8B
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/oDVz2eTnCDw98Sh8AXFEKdiMCm8.roa
Signing time:             Fri 02 Jan 2026 00:20:03 +0000
ROA not before:           Fri 02 Jan 2026 00:20:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29374
IP address blocks:        195.149.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:61:a5:4e:c4:77:9f:cb:a9:05:93:fe:ae:ea:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
        Validity
            Not Before: Jan  2 00:20:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a03573d9e4e7083c3df1287c01714429d88c0a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1b:71:54:4a:9f:62:b3:bc:e1:52:f4:2e:9e:
                    89:c1:d9:82:75:c0:48:7a:f8:8e:cd:74:5e:a9:63:
                    40:45:60:7c:28:a5:61:ad:67:0e:d6:cf:ea:e3:26:
                    38:06:b4:e7:08:55:af:23:08:be:34:77:f2:d5:28:
                    e9:11:6a:1e:74:e5:b4:da:9c:e1:0b:66:42:85:dd:
                    a4:17:fd:5b:e8:38:52:fa:60:47:5c:d2:f4:e1:70:
                    b8:4b:ae:de:b3:3b:0a:43:ed:9c:f9:c0:b3:ba:bc:
                    0b:16:a1:22:51:48:6b:7b:3f:09:f9:0d:35:6d:d0:
                    8e:ef:84:d9:cb:6e:f8:a9:86:fc:60:3f:17:e7:10:
                    63:ae:42:bc:10:b7:b1:05:b2:ab:8e:f8:33:ae:8c:
                    0f:a5:90:72:22:af:96:17:2f:a3:88:33:32:0e:57:
                    b9:9f:9a:42:7e:09:9e:89:12:20:d3:37:8d:d2:ba:
                    c6:3b:fa:a7:85:7d:1f:59:0a:96:41:f5:49:26:2d:
                    44:42:b3:b2:86:5f:df:5c:49:d2:e3:b7:3c:a3:22:
                    3e:31:20:3b:de:55:f5:87:b6:fe:6d:2e:e5:8f:b6:
                    fa:d4:e1:15:d4:6b:67:6a:f8:84:50:c8:27:87:56:
                    03:10:c2:98:df:dc:83:0a:17:bd:a0:d5:9f:96:cd:
                    30:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:35:73:D9:E4:E7:08:3C:3D:F1:28:7C:01:71:44:29:D8:8C:0A:6F
            X509v3 Authority Key Identifier:
                keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/oDVz2eTnCDw98Sh8AXFEKdiMCm8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.149.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:2c:3f:c8:86:eb:0c:a2:3e:09:73:43:aa:13:fe:ad:36:29:
         4b:df:6f:a9:7e:82:2b:0a:bd:a7:e4:54:b8:01:c8:f9:81:bf:
         f7:08:35:55:7a:6a:69:7b:88:be:71:86:4c:e4:c5:5e:69:65:
         8e:f3:a0:9f:4f:63:0a:54:dd:65:f7:cb:3d:40:b3:1d:84:c5:
         b0:93:42:60:59:33:c3:4a:f5:3e:bb:99:d5:84:a7:35:d0:5c:
         e1:b9:ea:a5:f5:5b:84:60:de:56:96:44:b2:cf:e8:61:99:73:
         05:75:8c:97:2f:42:ee:dd:5e:0b:9f:32:0b:86:18:fd:8d:cb:
         fc:69:4b:ff:08:9b:7b:2c:a9:00:b8:09:18:5a:4c:ea:5e:02:
         e3:67:07:ae:64:b2:81:42:86:a1:c7:a2:3b:9a:ee:aa:8b:d4:
         eb:41:45:05:a5:b5:b1:e5:6c:9d:c3:87:8b:c7:7d:f3:cf:41:
         a3:da:96:5a:c7:57:3e:54:7c:bf:82:ff:12:81:d9:08:14:4a:
         27:25:66:11:af:a6:a5:4b:e8:68:b3:fd:49:5a:0c:67:86:0c:
         be:8f:41:54:45:90:9b:c4:63:a5:83:4e:0c:b4:f4:6e:5b:88:
         e6:59:72:59:5e:5b:f5:68:c0:50:69:d3:d2:4f:00:ff:58:f0:
         d0:0e:78:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:44:35 2026 by rpki-client