This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/cyZpb2lPKovVf3WfGoJ7ZraRsH4.roa
File:                     cyZpb2lPKovVf3WfGoJ7ZraRsH4.roa (raw, json)
Hash identifier:          9j0sAYqHnylk8DHpPYOuCBCLe7gHNXAvxTbqjQ3el4M=
Subject key identifier:   73:26:69:6F:69:4F:2A:8B:D5:7F:75:9F:1A:82:7B:66:B6:91:B0:7E
Certificate issuer:       /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial:       019B7C7EF6304D2AE15E99F6203850F39CAD
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/cyZpb2lPKovVf3WfGoJ7ZraRsH4.roa
Signing time:             Fri 02 Jan 2026 02:17:33 +0000
ROA not before:           Fri 02 Jan 2026 02:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24763
IP address blocks:        193.56.124.0/24 maxlen: 24
                          2a00:4f40:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7e:f6:30:4d:2a:e1:5e:99:f6:20:38:50:f3:9c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
        Validity
            Not Before: Jan  2 02:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7326696f694f2a8bd57f759f1a827b66b691b07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:49:93:69:72:46:0f:9e:aa:1f:5c:09:8d:91:
                    1b:34:20:b7:54:87:0b:15:cb:e5:4d:81:b1:49:7d:
                    11:5b:db:82:18:b2:64:2b:7b:b8:18:ce:65:bc:52:
                    94:9e:0a:c1:98:76:c5:31:7f:84:78:c9:27:89:a2:
                    70:66:10:86:d9:ff:6e:4d:38:61:0b:4b:73:61:27:
                    8d:be:3e:40:c8:c8:cc:3d:03:ca:14:91:79:37:13:
                    3b:09:9d:54:e3:92:90:c7:fa:62:89:97:7b:c5:c8:
                    ec:33:f8:83:4d:ef:ef:87:76:63:97:92:3e:5e:cb:
                    6e:66:8d:30:12:55:cb:1e:b6:5a:36:31:4f:cc:20:
                    6a:2f:8f:8c:ee:5f:0e:d3:2b:6d:49:2d:cc:c7:cb:
                    93:e7:bc:8f:68:4d:fd:cc:8d:17:b0:d7:9b:4a:cb:
                    b3:cf:ec:c8:89:a0:ec:ba:1c:fb:31:f3:b7:8b:62:
                    e0:ae:e6:de:68:dd:ca:80:2d:e7:0a:79:59:c6:cc:
                    a7:3f:56:d3:ee:4a:58:93:68:f9:ea:05:44:5f:a1:
                    e7:ce:9d:25:ec:80:2c:a5:d4:00:78:c5:65:c9:dc:
                    01:e9:2e:6b:7a:0a:a4:eb:7c:87:c3:0b:fa:d6:3e:
                    56:e6:f9:1e:48:df:a8:a5:c6:a3:b7:8b:5b:7f:dd:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:26:69:6F:69:4F:2A:8B:D5:7F:75:9F:1A:82:7B:66:B6:91:B0:7E
            X509v3 Authority Key Identifier:
                keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/cyZpb2lPKovVf3WfGoJ7ZraRsH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.124.0/24
                IPv6:
                  2a00:4f40:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:80:e1:83:aa:dc:89:26:57:51:1d:c3:1e:f4:c5:f6:f2:21:
         76:14:28:5f:52:07:63:28:17:db:52:11:d5:ef:e3:d6:3b:ed:
         37:e9:6e:f6:d7:86:07:33:9f:c8:51:b0:68:da:2d:3d:52:4f:
         5a:98:eb:f0:ee:97:dc:f4:82:1c:b1:0a:e5:03:12:af:fd:f2:
         b1:c9:68:bc:d9:d8:a8:48:50:49:4d:3d:1d:98:f1:b8:86:24:
         90:37:94:97:90:f5:a3:0a:79:f4:51:87:0e:03:9f:15:b4:4f:
         c7:7d:05:03:b3:b7:d1:75:9a:8b:7d:1e:f4:f0:e5:e6:bb:9c:
         f8:39:20:a9:c4:88:f6:60:08:13:32:0e:4f:6c:da:e3:02:f1:
         08:3a:74:0d:f3:bc:d9:7c:86:87:89:b8:16:a6:44:17:69:59:
         25:f5:4b:14:0d:b8:9c:68:b9:60:ff:a5:5d:86:d5:4a:b0:62:
         8e:75:a2:e6:f9:80:2a:66:3f:a9:56:9c:bb:76:f7:2b:e6:1a:
         6d:d2:59:84:f0:e3:bc:e2:d8:15:24:79:8b:f2:b1:af:3a:4e:
         9c:6f:db:79:20:ea:e8:b6:17:d6:a4:db:65:b7:5d:ac:d2:9d:
         1e:02:96:6e:96:23:04:01:4b:da:70:ec:62:c7:dd:77:26:f4:
         b1:70:15:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:45 2026 by rpki-client