This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/oOEupRoAbf3yjn_rZVNkLmHYF2s.roa
File:                     oOEupRoAbf3yjn_rZVNkLmHYF2s.roa (raw, json)
Hash identifier:          ud9YxpfMKaXsG95u5IqTOQpw+tqD/6ITl2NTQe2Sxdo=
Subject key identifier:   A0:E1:2E:A5:1A:00:6D:FD:F2:8E:7F:EB:65:53:64:2E:61:D8:17:6B
Certificate issuer:       /CN=9983e94f2f97a524c3f1cbf4863058d3b6510616
Certificate serial:       019B76EB6B71F682ECF1D51B0B3D8E4F2750
Authority key identifier: 99:83:E9:4F:2F:97:A5:24:C3:F1:CB:F4:86:30:58:D3:B6:51:06:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYPpTy-XpSTD8cv0hjBY07ZRBhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/oOEupRoAbf3yjn_rZVNkLmHYF2s.roa
Signing time:             Thu 01 Jan 2026 00:18:18 +0000
ROA not before:           Thu 01 Jan 2026 00:18:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204078
IP address blocks:        2001:67c:1368::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYPpTy-XpSTD8cv0hjBY07ZRBhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:6b:71:f6:82:ec:f1:d5:1b:0b:3d:8e:4f:27:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9983e94f2f97a524c3f1cbf4863058d3b6510616
        Validity
            Not Before: Jan  1 00:18:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a0e12ea51a006dfdf28e7feb6553642e61d8176b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:67:f3:6d:dc:74:3c:84:39:82:39:02:22:
                    70:0e:17:98:a3:dd:f9:18:d1:bd:42:9a:4e:f4:91:
                    c5:f1:89:2c:1a:c1:9a:91:a4:f2:68:1f:d4:8b:36:
                    77:a5:83:48:50:7d:92:75:13:f6:d7:ec:24:87:21:
                    3e:b5:15:30:90:81:d9:83:9f:09:e9:1a:7e:25:f3:
                    54:75:cd:51:4d:06:f6:b9:58:1b:a5:cd:29:f6:b7:
                    59:e4:b7:17:da:e0:4a:40:94:cd:1c:5f:9e:81:5f:
                    25:8f:11:e0:3e:38:19:ea:9f:c3:8a:1d:ae:1d:fc:
                    d4:65:18:70:4d:d5:d1:58:6e:7c:78:cc:a5:38:39:
                    ea:92:3e:41:6d:74:ec:03:75:bc:f4:4a:8f:59:a3:
                    ee:92:df:46:31:12:80:aa:71:23:5e:62:c1:c2:f8:
                    6f:37:df:0a:85:4b:b4:9c:fe:05:07:ef:f6:0b:60:
                    44:7c:bb:88:50:15:89:3e:da:8b:f7:f3:75:f6:b3:
                    b8:31:a6:73:0f:5e:56:5f:33:53:b1:93:1f:d9:cb:
                    97:02:4a:de:14:52:93:18:56:5f:0c:cc:7e:08:3f:
                    3a:61:25:33:8d:e5:80:1a:6e:38:02:3f:09:8a:f3:
                    c9:de:05:39:04:8a:9b:7c:dc:6d:97:16:3b:35:74:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E1:2E:A5:1A:00:6D:FD:F2:8E:7F:EB:65:53:64:2E:61:D8:17:6B
            X509v3 Authority Key Identifier:
                keyid:99:83:E9:4F:2F:97:A5:24:C3:F1:CB:F4:86:30:58:D3:B6:51:06:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYPpTy-XpSTD8cv0hjBY07ZRBhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/oOEupRoAbf3yjn_rZVNkLmHYF2s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/760d51-3ee2-444d-b186-214c952bf114/1/mYPpTy-XpSTD8cv0hjBY07ZRBhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1368::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:02:a7:3d:eb:53:87:f5:b3:e4:1d:cc:79:57:c4:58:bb:1d:
         84:14:7f:91:51:64:6b:92:c5:84:37:7e:b1:69:0b:7e:5a:bf:
         68:46:2e:1c:0e:c7:bb:48:36:09:e4:f9:ca:40:20:87:e5:e9:
         3c:d9:36:b3:ee:43:ff:7d:c1:5b:4c:20:cd:e2:38:e1:9b:47:
         0e:a7:9b:46:be:4a:22:6a:3d:56:58:4b:8b:44:1c:d8:04:08:
         67:7f:7b:a8:eb:94:a7:22:4e:5a:15:f9:12:0a:97:58:60:17:
         e1:8f:d2:9d:20:3d:4f:a0:87:cc:7f:09:a6:e1:d2:94:9b:70:
         a4:64:df:07:4c:8a:29:45:16:55:2b:cb:6f:9c:80:1a:3f:ab:
         ab:5d:1d:90:60:10:b9:d6:64:0e:ed:a3:f0:89:4c:5b:f8:8c:
         1c:39:5d:27:7c:8a:5b:fa:43:14:78:dd:b9:59:f6:29:e1:2a:
         55:47:5a:0d:0a:f3:5d:92:fb:69:3d:5d:51:fd:e9:a8:e2:3c:
         b5:d4:0f:aa:83:42:fc:41:c9:08:1c:12:51:55:c0:80:d8:e1:
         4b:ab:f8:fd:c6:fb:eb:33:e7:93:af:af:34:af:d6:b6:ac:81:
         a1:6b:b5:57:d6:49:eb:a9:a4:cf:fe:9f:4a:60:8f:50:65:d1:
         b3:b8:2d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:22 2026 by rpki-client