This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/nRmjyxWGF6a7tV1DmVfOj7lLijI.roa
File:                     nRmjyxWGF6a7tV1DmVfOj7lLijI.roa (raw, json)
Hash identifier:          zc3Mo+okKisvH6UwCPx7tW7bSfZdDVD88nKDTYhyQDY=
Subject key identifier:   9D:19:A3:CB:15:86:17:A6:BB:B5:5D:43:99:57:CE:8F:B9:4B:8A:32
Certificate issuer:       /CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Certificate serial:       019B78350BE74A2AC29DE6F24162A3D3CF12
Authority key identifier: C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/nRmjyxWGF6a7tV1DmVfOj7lLijI.roa
Signing time:             Thu 01 Jan 2026 06:18:20 +0000
ROA not before:           Thu 01 Jan 2026 06:18:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211339
IP address blocks:        193.228.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:0b:e7:4a:2a:c2:9d:e6:f2:41:62:a3:d3:cf:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
        Validity
            Not Before: Jan  1 06:18:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9d19a3cb158617a6bbb55d439957ce8fb94b8a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:21:a3:31:b1:31:5e:ce:fb:04:b4:76:a4:
                    26:83:ad:ec:86:42:2b:61:b8:d5:1a:b2:6c:ed:13:
                    53:fc:15:47:01:06:c4:ca:df:0e:30:eb:6c:5c:ed:
                    ec:fa:df:12:8f:2f:2d:c1:91:65:d9:36:7c:1c:7c:
                    02:f9:0d:7a:13:f6:db:8d:bc:4b:c9:94:cf:db:54:
                    a2:eb:2f:6d:3e:df:12:0d:66:99:1b:2f:c2:1c:c0:
                    eb:74:3c:44:35:1b:d0:c1:c1:a8:c3:d3:e7:83:52:
                    62:48:6d:2d:92:f3:22:94:dc:43:0e:0a:f1:a2:a9:
                    f4:9b:cf:34:f8:a7:43:ca:7d:51:f8:69:44:ba:7a:
                    5d:e4:4a:44:d4:6e:a7:05:f5:42:9d:b4:b6:45:80:
                    8e:6a:34:2a:1f:3b:87:64:34:85:ab:0c:f2:bb:42:
                    f3:e8:a7:d2:d6:a5:87:18:0e:62:83:8e:7a:4f:52:
                    50:fa:19:7b:ec:74:03:27:3f:32:04:39:67:0a:31:
                    90:6a:0b:e2:8d:c1:8c:6f:29:49:52:6f:25:d3:40:
                    a9:76:63:b1:e6:06:86:eb:14:f9:b7:09:58:fc:39:
                    60:40:a8:f6:b3:88:14:b8:bc:fa:07:fd:54:bc:aa:
                    56:20:85:2e:f7:80:28:c2:98:ec:0d:c4:0f:87:12:
                    70:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:19:A3:CB:15:86:17:A6:BB:B5:5D:43:99:57:CE:8F:B9:4B:8A:32
            X509v3 Authority Key Identifier:
                keyid:C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/nRmjyxWGF6a7tV1DmVfOj7lLijI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:2e:2b:0b:e3:be:4f:f5:9c:69:41:17:16:86:8f:39:f3:08:
         73:fb:c1:9a:30:b5:35:23:60:c6:38:b4:86:5f:df:49:3c:c7:
         5b:e3:0f:81:f0:d3:72:93:6e:d9:ee:49:86:31:c7:b7:27:ca:
         e0:72:8a:d5:56:8e:ad:8d:54:4b:b5:23:6e:45:af:d9:7d:f0:
         a8:84:c1:0c:e8:49:dd:84:72:3c:f4:da:dd:56:7a:0a:4d:fa:
         0c:e7:06:55:42:b2:7a:7e:a6:4d:81:8d:26:41:09:b9:1c:30:
         f7:9f:69:52:b1:ce:b2:46:76:39:cb:42:67:08:02:c6:97:e0:
         86:77:02:24:9d:14:13:66:17:71:1b:80:67:f1:93:18:56:14:
         5d:56:fd:8d:74:a5:4e:6a:42:80:90:09:bb:88:93:8a:08:86:
         9b:51:c3:bf:d4:24:b3:cd:03:f3:5f:50:f6:4a:29:16:49:f3:
         fe:df:59:bf:52:a6:4b:bb:2d:b7:f8:a2:b4:5f:4e:f2:6b:96:
         20:4d:e3:9b:c0:eb:a5:52:c7:30:d1:5c:e6:8b:09:b0:2c:65:
         bf:c2:a0:70:74:40:71:da:ff:98:67:0e:31:64:71:e7:6b:e0:
         b0:f2:06:1a:90:0a:f8:7f:53:67:2a:63:fb:a8:4c:91:17:3f:
         aa:5e:ca:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:28:35 2026 by rpki-client