This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/fsk3V3ujU1MeXJuISDaMYcrAuNw.roa
File:                     fsk3V3ujU1MeXJuISDaMYcrAuNw.roa (raw, json)
Hash identifier:          xs4ji4PDrUGEfQG0riDCuisJfksQNGJPscg96Fe9h+w=
Subject key identifier:   7E:C9:37:57:7B:A3:53:53:1E:5C:9B:88:48:36:8C:61:CA:C0:B8:DC
Certificate issuer:       /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial:       019B77591831430244DACCE59886EBA69BB7
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/fsk3V3ujU1MeXJuISDaMYcrAuNw.roa
Signing time:             Thu 01 Jan 2026 02:18:06 +0000
ROA not before:           Thu 01 Jan 2026 02:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47277
IP address blocks:        193.3.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:18:31:43:02:44:da:cc:e5:98:86:eb:a6:9b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
        Validity
            Not Before: Jan  1 02:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7ec937577ba353531e5c9b8848368c61cac0b8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:b4:08:ab:4a:b9:e1:69:92:95:fc:fe:2f:
                    e4:cb:87:bf:51:a7:8b:29:7e:44:71:f0:12:ab:59:
                    fb:ca:ee:18:97:21:19:6c:99:83:5e:d4:81:00:f4:
                    71:86:d3:43:6a:3d:be:3b:4b:e2:eb:e7:1c:cf:ad:
                    7d:d9:ee:13:5a:42:be:f4:1d:f6:fb:92:47:5d:d2:
                    41:eb:c8:a1:0c:b6:1a:d5:5d:23:1d:ae:5d:de:db:
                    25:21:19:6f:d5:9c:7d:6c:92:55:84:c2:40:82:03:
                    ab:de:10:c7:41:be:71:30:f6:eb:ee:ce:f6:61:7b:
                    a9:83:a4:82:c8:a2:ec:0f:fb:35:a8:10:07:c8:7e:
                    c3:ca:73:31:4e:bf:35:45:37:84:f4:c3:39:37:99:
                    43:17:d7:05:c0:b1:f6:fe:7c:e0:e2:ed:50:db:16:
                    4b:1a:64:6f:b6:b0:8d:70:9c:04:cc:6e:0c:39:1d:
                    1f:df:d7:43:fd:45:2c:29:e2:8f:36:f8:9a:4a:04:
                    bd:15:8d:1a:60:17:dd:d9:ba:07:e8:c0:7f:ba:ee:
                    28:4e:c2:a8:49:a1:36:a9:5b:6a:9a:99:8f:ef:98:
                    29:bd:fa:cd:1c:06:3e:a4:de:1a:a0:fe:6e:d7:87:
                    00:d2:48:ea:c9:ee:57:56:73:09:c7:52:a9:cb:80:
                    4a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C9:37:57:7B:A3:53:53:1E:5C:9B:88:48:36:8C:61:CA:C0:B8:DC
            X509v3 Authority Key Identifier:
                keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/fsk3V3ujU1MeXJuISDaMYcrAuNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:6f:25:e8:e6:b8:7a:7b:d4:a4:af:4a:00:a9:e9:92:f4:59:
         d8:1b:dd:2a:02:e7:23:1e:e1:9c:65:d9:45:b5:e2:c6:bc:16:
         87:20:62:a9:cb:23:92:81:d1:5e:5a:8d:dc:c3:80:07:8f:62:
         b4:b1:0e:36:67:8f:fe:65:60:27:9b:4a:9d:1b:86:b8:5b:27:
         68:ad:57:80:74:13:29:26:69:f9:2d:80:f2:62:62:30:51:05:
         bf:2b:26:ab:9b:db:4c:76:b0:f1:52:9e:25:40:01:6a:0b:3c:
         a9:ae:6d:47:02:95:23:ef:53:06:e0:de:8f:98:80:97:c0:9c:
         ee:c7:f8:7d:76:c6:c2:97:0b:85:df:55:55:a8:ad:fa:6a:c1:
         d9:e0:9d:b2:81:df:9a:7e:68:c6:af:01:f3:c1:4c:23:6b:7a:
         0d:c8:ed:4e:5a:c0:d7:e3:5f:2b:01:c3:2c:42:61:e8:3a:7a:
         6d:9c:c3:ef:50:f7:d1:68:f3:a9:07:9b:c6:5f:6b:d3:96:ad:
         62:b2:35:2d:b4:31:5b:e0:fc:b8:0d:bb:f0:3d:dd:c3:f0:82:
         f1:45:52:4e:8f:cf:1a:65:14:f8:d1:5b:ef:43:0b:d0:3b:f4:
         c4:d7:a5:52:15:85:5a:5e:e7:ed:bd:1d:b2:97:40:8c:a1:2a:
         e7:a2:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:34 2026 by rpki-client