This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/x6wY1hh1UMR03dRTbKZ1rvUylzo.roa
File:                     x6wY1hh1UMR03dRTbKZ1rvUylzo.roa (raw, json)
Hash identifier:          jSu5cUSFLGmQIwJTQdJ25XCFgFKf8LZSMzXzmSmg5w0=
Subject key identifier:   C7:AC:18:D6:18:75:50:C4:74:DD:D4:53:6C:A6:75:AE:F5:32:97:3A
Certificate issuer:       /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial:       019B7CED9BE75DDA8DB72E68F9D336630BF2
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/x6wY1hh1UMR03dRTbKZ1rvUylzo.roa
Signing time:             Fri 02 Jan 2026 04:18:25 +0000
ROA not before:           Fri 02 Jan 2026 04:18:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        109.94.102.0/24 maxlen: 24
                          109.94.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:9b:e7:5d:da:8d:b7:2e:68:f9:d3:36:63:0b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
        Validity
            Not Before: Jan  2 04:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c7ac18d6187550c474ddd4536ca675aef532973a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d3:16:3e:64:ae:db:c4:73:3a:c5:cb:57:ab:
                    3d:d9:35:cd:cf:2e:fe:d9:ab:5f:92:1a:4b:82:84:
                    a7:b6:a1:24:a9:7b:ae:88:f8:be:9f:39:38:69:b2:
                    78:d6:b8:47:64:a5:bc:dc:62:89:b1:c7:c0:cb:cb:
                    a3:a0:37:70:18:c3:69:fb:04:03:49:a3:8e:6c:49:
                    df:59:d6:d6:c0:2f:9e:b1:8b:3f:af:11:da:aa:69:
                    4e:0f:d9:43:bf:c6:47:ac:48:06:20:27:bb:8e:f9:
                    cd:e9:e4:cf:c7:01:ba:f5:d0:d0:52:db:2c:b3:dc:
                    cc:93:73:e8:d2:13:65:5d:47:62:f0:be:91:85:a3:
                    e5:7b:96:c4:10:ee:26:34:6d:6c:c5:55:56:54:bd:
                    86:0f:42:a6:b6:bf:07:3b:b3:f1:35:dc:aa:bd:6b:
                    14:be:78:92:0a:fc:6b:3b:2b:32:db:ef:ae:3d:94:
                    0b:23:bd:11:90:e6:2d:d8:5a:65:33:cf:62:84:89:
                    09:4a:50:fd:0a:09:aa:5b:a1:15:f5:1f:77:46:c3:
                    64:4f:67:d2:b8:ec:40:1f:2e:8f:e5:6e:21:f8:42:
                    c1:5b:92:1a:8a:e8:61:d6:e8:fb:00:c6:e0:e5:d4:
                    8d:0b:ed:4b:69:1c:bc:22:78:d2:4f:18:06:30:35:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AC:18:D6:18:75:50:C4:74:DD:D4:53:6C:A6:75:AE:F5:32:97:3A
            X509v3 Authority Key Identifier:
                keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/x6wY1hh1UMR03dRTbKZ1rvUylzo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.94.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:15:2e:16:fa:49:13:2d:db:89:b5:c4:cb:cc:ab:9f:cf:25:
         63:31:0d:3e:21:57:fc:52:00:0b:8d:10:d7:86:ed:8d:89:07:
         03:f5:f8:77:1d:1f:76:43:69:f2:20:86:a4:e9:6f:88:d2:7d:
         0c:27:a7:3d:d3:3a:a9:dd:26:00:8d:d3:cc:00:97:26:72:22:
         aa:32:29:c8:44:a8:04:a4:92:50:0e:63:17:dc:e2:82:c1:08:
         60:fc:2a:a6:0a:9c:22:6b:75:02:1d:0d:5d:0b:2b:93:66:1f:
         4e:70:2b:5f:81:e5:ae:5a:0c:16:85:17:8f:67:11:36:3b:b2:
         4b:d4:73:de:e2:ac:19:d6:bb:59:d1:7c:c2:92:e4:0d:91:59:
         02:af:0b:81:a7:05:ba:87:a6:2b:a6:4a:6c:0e:8e:73:5d:79:
         73:34:09:53:67:36:40:b1:98:a7:13:23:1d:ad:78:93:c4:97:
         e7:61:c5:9e:57:fd:ff:1b:65:8c:95:e1:22:fd:b3:48:10:c4:
         a2:9d:0d:1d:dd:3e:95:a4:80:9d:51:61:27:91:fb:f8:5c:ce:
         cd:81:cb:2f:bb:bc:9f:2d:5b:83:41:65:cf:32:20:5d:06:35:
         3d:23:71:5b:34:68:ab:2c:a9:8a:8b:58:4d:e6:d9:5c:1a:fa:
         f0:29:5b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:22:01 2026 by rpki-client