This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/SK0oF-iS6H8bK9GyFAh3BLhhlxs.roa
File:                     SK0oF-iS6H8bK9GyFAh3BLhhlxs.roa (raw, json)
Hash identifier:          PHUAJ7YsTIFFsHxj6+qDAx4PRIHY38mg45gFva1mwuU=
Subject key identifier:   48:AD:28:17:E8:92:E8:7F:1B:2B:D1:B2:14:08:77:04:B8:61:97:1B
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       019B7A5A9DBB96614F540B1E147ACB1C7959
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/SK0oF-iS6H8bK9GyFAh3BLhhlxs.roa
Signing time:             Thu 01 Jan 2026 16:18:37 +0000
ROA not before:           Thu 01 Jan 2026 16:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        83.147.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 01:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:9d:bb:96:61:4f:54:0b:1e:14:7a:cb:1c:79:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan  1 16:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=48ad2817e892e87f1b2bd1b214087704b861971b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:62:4e:73:fe:07:ba:d7:8a:b1:db:b7:fb:
                    78:1d:a4:23:71:fc:a8:86:78:9b:ba:a9:18:11:f8:
                    89:7a:81:bd:5b:73:41:b4:61:27:01:a4:95:ff:77:
                    97:58:55:9d:44:00:e6:c3:f7:92:01:72:68:45:43:
                    3a:31:57:cc:d8:5f:5b:9e:81:80:22:36:ed:95:98:
                    93:ac:0a:87:1c:aa:ce:7f:33:aa:be:b1:02:6a:d8:
                    3c:d1:a2:1b:46:1a:d2:86:cf:e4:6b:00:66:6c:b0:
                    65:d1:44:dc:c5:c4:24:92:ce:28:1d:35:c8:34:c3:
                    9b:8e:07:e0:85:d7:4c:a8:a0:42:f1:dc:06:40:b7:
                    1c:53:e5:58:1b:79:22:c5:7d:d3:45:45:a1:f8:b1:
                    8c:29:3c:75:53:2e:e9:a4:64:4c:e0:21:59:d0:f3:
                    1f:e3:e5:a8:de:4a:a3:ea:b1:af:d5:6f:4e:5b:50:
                    5b:4c:2c:21:3a:2a:8d:91:5c:c1:76:cc:c7:87:1f:
                    ca:0d:f6:79:5f:ba:c6:a0:0f:7a:ec:a9:db:68:84:
                    2a:b0:67:95:d6:66:26:19:d7:e2:23:9a:90:fe:d9:
                    60:db:f8:97:30:2b:2f:9a:ab:fd:78:a8:af:ce:1b:
                    7f:27:4f:5c:c5:65:ac:62:7c:1b:2a:75:cc:3d:ba:
                    74:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AD:28:17:E8:92:E8:7F:1B:2B:D1:B2:14:08:77:04:B8:61:97:1B
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/SK0oF-iS6H8bK9GyFAh3BLhhlxs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:d5:d9:86:d9:2d:de:99:ac:1a:62:af:30:8b:5e:8d:f6:e2:
         ac:86:cf:8c:42:5c:6f:8f:de:b4:af:95:4c:70:1d:98:2d:80:
         4e:d9:46:f6:e2:f3:11:e5:5b:39:3b:7f:c6:9b:5b:25:b6:f4:
         5b:65:a5:79:49:68:be:b2:9f:68:a7:84:0a:aa:93:98:71:b9:
         ac:6f:63:d1:db:db:30:bb:b1:e1:74:ab:f7:74:01:52:aa:bc:
         55:de:bd:b4:5c:ec:7c:fa:1c:24:f9:a5:a9:00:5d:56:35:88:
         88:f8:92:a5:53:4b:0b:52:90:89:0d:b9:a7:5d:93:bf:7d:d9:
         d5:33:4d:50:f6:96:7b:d1:3c:b8:cd:03:d9:e3:d1:db:45:e6:
         db:aa:f8:c1:68:ae:a0:cb:c7:3f:e0:09:3e:45:98:bf:51:92:
         30:78:6a:72:1f:04:99:b2:ec:71:71:15:0b:5a:a1:dc:28:22:
         b4:55:e2:02:2d:22:8a:05:a5:08:0d:e9:23:b7:c1:bc:51:0c:
         04:fc:eb:fa:ae:21:0b:fa:30:84:13:17:95:de:b4:91:32:b2:
         96:fd:e6:6f:35:bc:a3:95:63:84:f2:fe:d4:bd:ce:d4:de:3b:
         74:9c:60:f2:2f:45:7b:f2:6c:41:bc:26:f0:60:a0:0c:1f:a5:
         8a:c1:68:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:27:25 2026 by rpki-client