This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/18LcGFaA85L2PFhGmCXVUOoWIl4.roa
File:                     18LcGFaA85L2PFhGmCXVUOoWIl4.roa (raw, json)
Hash identifier:          4CfPxdyovYZLWsCd3zC7X3GJYkpt6Kyh3yiKuvnwRcQ=
Subject key identifier:   D7:C2:DC:18:56:80:F3:92:F6:3C:58:46:98:25:D5:50:EA:16:22:5E
Certificate issuer:       /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial:       019B7BA4F592E64FA15662E8EFFD80D870AE
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/18LcGFaA85L2PFhGmCXVUOoWIl4.roa
Signing time:             Thu 01 Jan 2026 22:19:26 +0000
ROA not before:           Thu 01 Jan 2026 22:19:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35523
IP address blocks:        193.239.216.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:f5:92:e6:4f:a1:56:62:e8:ef:fd:80:d8:70:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
        Validity
            Not Before: Jan  1 22:19:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d7c2dc185680f392f63c58469825d550ea16225e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:d8:4f:09:a5:9f:13:8e:d7:f5:f0:89:fd:
                    cd:f6:ed:ae:33:30:59:81:20:18:5b:a9:3a:60:8b:
                    24:13:d7:ba:61:8e:6c:d5:bf:73:bd:3c:8c:00:e0:
                    6c:9b:e4:fd:7d:04:0c:a3:59:7f:dd:d2:12:5e:f6:
                    a9:02:9a:e0:45:9e:d2:40:d5:28:79:03:e4:dc:09:
                    65:69:93:bd:74:06:3e:3a:bd:9f:9d:06:27:4f:63:
                    94:06:e4:8d:cb:30:dd:fd:aa:2a:20:34:b9:de:da:
                    75:8d:8c:18:3c:19:2d:58:27:c7:cc:90:f2:ac:4a:
                    0f:0e:9c:ce:50:51:08:74:76:cf:40:cf:02:a5:01:
                    74:20:29:8d:d6:65:c5:46:ca:4c:ee:fb:c1:7d:25:
                    4f:ca:0c:ab:f4:89:0e:33:97:64:08:24:f8:48:f2:
                    95:32:6d:c0:ae:cc:bf:98:2e:7f:5a:eb:ab:75:04:
                    71:67:fa:3b:37:d8:06:c8:15:1b:aa:6b:d3:31:79:
                    77:6f:bb:c8:83:22:fb:87:4d:f2:34:ca:5a:fb:98:
                    34:d9:73:81:d4:0e:a0:46:9e:e3:36:f2:af:f7:9c:
                    23:84:52:71:f0:e3:97:4e:88:c7:84:69:e9:d9:d6:
                    5a:dd:1a:06:49:88:6a:24:89:76:5b:48:8b:0e:53:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C2:DC:18:56:80:F3:92:F6:3C:58:46:98:25:D5:50:EA:16:22:5E
            X509v3 Authority Key Identifier:
                keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/18LcGFaA85L2PFhGmCXVUOoWIl4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.239.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:72:c1:5d:ac:88:df:6d:db:25:a9:18:11:37:16:1a:d4:35:
         de:b1:65:39:b7:97:90:7e:1e:af:a9:e4:d4:92:21:00:b8:51:
         1a:cd:f4:22:90:b2:f5:f4:fc:0a:e8:19:89:18:f5:c8:69:a3:
         76:75:5c:dd:37:48:23:9f:61:40:a3:52:a6:dd:c7:61:0b:4e:
         71:a1:4a:aa:2c:88:9a:4e:05:cf:42:32:fb:1b:c2:2e:03:bc:
         c6:76:67:39:9e:a7:84:a8:1a:17:b4:a9:50:2e:da:94:f1:ff:
         17:43:73:f9:c4:34:fd:fb:6e:b4:54:8b:7d:4d:25:d4:10:c9:
         43:e9:f0:92:cf:b6:7c:a4:5a:17:4d:c0:9a:79:c7:a7:6b:48:
         88:ac:0f:82:0f:d5:3b:bb:10:7c:a3:11:ab:17:7e:e1:9c:d1:
         e5:e0:25:be:ff:dc:e4:51:d5:54:54:0d:78:25:29:42:30:9d:
         51:33:e9:f4:3b:f1:ca:2a:dd:0d:ab:bd:4c:4a:57:6a:f2:6a:
         e4:fb:0d:08:32:31:97:2a:3a:5d:2b:cc:47:b1:81:ca:b6:cf:
         a9:e2:a2:56:a8:0b:d1:2e:df:ff:26:31:ba:9f:1d:9d:a4:0f:
         c8:06:0b:0f:f2:e6:67:b1:49:26:3c:11:53:9e:32:7a:39:9c:
         22:fd:ca:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 08:10:11 2026 by rpki-client