This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/9h49lJWwF1PdYlUFcV2QXMYgM9o.roa
File:                     9h49lJWwF1PdYlUFcV2QXMYgM9o.roa (raw, json)
Hash identifier:          GCIawhjOg95GqWKJazHKfaZHhHNmcBK7aJ3Mw2UEcAc=
Subject key identifier:   F6:1E:3D:94:95:B0:17:53:DD:62:55:05:71:5D:90:5C:C6:20:33:DA
Certificate issuer:       /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Certificate serial:       019B7EA4BC25BCF44269962D6A508E982333
Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/9h49lJWwF1PdYlUFcV2QXMYgM9o.roa
Signing time:             Fri 02 Jan 2026 12:18:03 +0000
ROA not before:           Fri 02 Jan 2026 12:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     26125
IP address blocks:        193.27.47.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Feb 2026 19:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a4:bc:25:bc:f4:42:69:96:2d:6a:50:8e:98:23:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
        Validity
            Not Before: Jan  2 12:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f61e3d9495b01753dd625505715d905cc62033da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:51:31:b3:12:e9:20:e6:23:31:6d:71:d3:
                    c8:3f:10:cd:c7:4d:9a:11:93:09:d9:1e:85:7a:17:
                    1f:52:11:e2:cd:05:ea:da:eb:1d:17:20:a3:ec:9e:
                    ba:b1:97:de:66:d3:5b:b1:54:9e:12:a2:64:24:26:
                    4d:00:a0:99:ca:04:f3:b1:e9:43:77:39:44:7e:7a:
                    62:fe:32:85:84:80:f5:85:04:78:c5:51:1a:70:ba:
                    00:c1:aa:e3:38:ac:8e:47:c9:fb:52:f8:fd:2f:f6:
                    20:78:62:3c:f1:8d:c3:d4:d4:d4:43:1c:d3:8f:75:
                    22:42:7b:39:bb:2a:ae:13:22:f9:a4:6c:9c:1e:75:
                    a5:2c:1d:b1:86:0e:ea:6d:95:21:53:7e:f8:34:77:
                    1b:4f:b0:68:d3:cf:4e:30:a6:e1:1d:b3:7f:30:64:
                    4f:40:cb:c8:17:31:26:38:69:45:57:0d:c4:cb:1e:
                    d3:61:2a:5c:d6:1c:a1:eb:aa:45:f0:fe:2f:db:24:
                    77:f1:02:62:bb:c4:e9:d3:fc:e5:21:ae:c6:0b:b3:
                    4a:74:c7:5b:fb:f3:7a:33:1e:4b:4f:81:df:7d:fc:
                    84:b6:28:48:63:dd:90:e7:09:40:7f:9b:f8:74:cc:
                    8c:25:5d:26:57:17:b6:e5:0d:e0:48:34:08:c4:fe:
                    6b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1E:3D:94:95:B0:17:53:DD:62:55:05:71:5D:90:5C:C6:20:33:DA
            X509v3 Authority Key Identifier:
                keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/9h49lJWwF1PdYlUFcV2QXMYgM9o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.27.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:bf:7c:05:80:b5:d0:93:a1:e2:0e:33:10:cb:da:33:4a:d4:
         4a:9b:cb:40:62:b2:d5:ea:27:98:84:94:99:ad:32:e3:e4:32:
         12:de:36:62:a9:86:16:c4:70:51:5d:5c:13:a5:9f:ef:85:12:
         56:59:b4:09:2e:ee:ba:ee:fc:ff:22:96:06:84:9b:56:c5:59:
         4b:80:70:56:cd:d6:fe:7a:be:06:38:1f:bd:71:ce:4c:fd:f4:
         55:a6:2c:ab:96:12:1e:1b:14:83:0c:c0:33:bd:ea:cd:59:65:
         4b:12:15:be:ee:db:de:28:b9:bb:c4:8d:b5:79:65:61:5f:f8:
         2e:d5:fc:16:1f:cc:09:6f:4f:65:00:ce:60:42:f0:70:64:f5:
         a2:51:44:b8:5b:0c:05:f8:bb:e9:d5:bc:8d:af:25:ca:44:4d:
         cd:6a:16:77:27:07:c9:a4:27:9d:c3:a6:8d:c0:a7:b9:80:b0:
         a4:62:95:24:fc:b3:06:c9:4f:bc:1c:db:7f:f3:e7:28:0c:08:
         55:0c:9b:d7:58:a5:b6:bb:97:dc:56:e2:69:08:70:7d:c9:45:
         3f:fc:44:04:f9:fd:6d:83:84:da:86:6c:68:8d:ea:4b:03:39:
         a7:e3:4d:93:5e:a0:4d:a6:fe:02:f2:7b:c6:00:f5:59:4f:c2:
         c8:9c:17:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+pLwlvPRCaZYtalCOmCMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOWE3YjdhMmMyOGEwYjNjMGUwYTU4OGMzYzg5MmU1MmE1
OWYwZTYwHhcNMjYwMTAyMTIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjFlM2Q5NDk1YjAxNzUzZGQ2MjU1MDU3MTVkOTA1Y2M2MjAzM2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOFRMbMS6SDmIzFtcdPIPxDNx02a
EZMJ2R6FehcfUhHizQXq2usdFyCj7J66sZfeZtNbsVSeEqJkJCZNAKCZygTzselD
dzlEfnpi/jKFhID1hQR4xVEacLoAwarjOKyOR8n7Uvj9L/YgeGI88Y3D1NTUQxzT
j3UiQns5uyquEyL5pGycHnWlLB2xhg7qbZUhU374NHcbT7Bo089OMKbhHbN/MGRP
QMvIFzEmOGlFVw3Eyx7TYSpc1hyh66pF8P4v2yR38QJiu8Tp0/zlIa7GC7NKdMdb
+/N6Mx5LT4HfffyEtihIY92Q5wlAf5v4dMyMJV0mVxe25Q3gSDQIxP5r8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPYePZSVsBdT3WJVBXFdkFzGIDPaMB8GA1UdIwQY
MBaAFPyae3osKKCzwOCliMPIkuUqWfDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xZDI4MjMtMzQ3NC00ZDg1LTk1ZTkt
YWNmMDkzMjI2YjA3LzEvOWg0OWxKV3dGMVBkWWxVRmNWMlFYTVlnTTlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xZDI4MjMtMzQ3NC00ZDg1LTk1ZTktYWNmMDkzMjI2YjA3
LzEvX0pwN2Vpd29vTFBBNEtXSXc4aVM1U3BaOE9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRsvMA0G
CSqGSIb3DQEBCwUAA4IBAQCtv3wFgLXQk6HiDjMQy9ozStRKm8tAYrLV6ieYhJSZ
rTLj5DIS3jZiqYYWxHBRXVwTpZ/vhRJWWbQJLu667vz/IpYGhJtWxVlLgHBWzdb+
er4GOB+9cc5M/fRVpiyrlhIeGxSDDMAzverNWWVLEhW+7tveKLm7xI21eWVhX/gu
1fwWH8wJb09lAM5gQvBwZPWiUUS4WwwF+Lvp1byNryXKRE3NahZ3JwfJpCedw6aN
wKe5gLCkYpUk/LMGyU+8HNt/8+coDAhVDJvXWKW2u5fcVuJpCHB9yUU//EQE+f1t
g4TahmxojepLAzmn402TXqBNpv4C8nvGAPVZT8LInBeN
-----END CERTIFICATE-----
Generated at Sun Feb 8 04:51:15 2026 by rpki-client