This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/9VMvKl57FyZtFhzbGLaf00fYTZk.roa
File:                     9VMvKl57FyZtFhzbGLaf00fYTZk.roa (raw, json)
Hash identifier:          YJv0ppoA9WL93aHmjJueTI66Bs6bF13+XEmlLJFLXhs=
Subject key identifier:   F5:53:2F:2A:5E:7B:17:26:6D:16:1C:DB:18:B6:9F:D3:47:D8:4D:99
Certificate issuer:       /CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Certificate serial:       019B7E38EE92B6518C5F89A8C217537D6B00
Authority key identifier: 3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/9VMvKl57FyZtFhzbGLaf00fYTZk.roa
Signing time:             Fri 02 Jan 2026 10:20:18 +0000
ROA not before:           Fri 02 Jan 2026 10:20:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        176.110.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:ee:92:b6:51:8c:5f:89:a8:c2:17:53:7d:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
        Validity
            Not Before: Jan  2 10:20:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5532f2a5e7b17266d161cdb18b69fd347d84d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:54:d3:35:ff:cf:64:79:f5:02:ba:1b:47:
                    29:f8:79:d9:cd:dc:cf:96:80:e3:97:71:c7:2e:c8:
                    e4:ab:f8:c8:ec:63:b6:68:37:b8:c5:ca:9b:37:aa:
                    38:c8:91:ef:b5:e9:1e:cc:fb:b9:06:01:d6:0b:50:
                    67:dc:7e:ee:5c:e9:0e:d3:b1:4c:1c:7a:79:cb:ca:
                    c0:ec:33:18:1a:75:93:a9:c9:03:31:45:ae:c5:82:
                    22:3f:be:15:0f:d6:01:7c:38:54:63:03:cc:e2:de:
                    ce:07:b6:05:41:a1:88:be:97:48:04:aa:34:d5:9a:
                    55:db:0a:97:78:60:ad:5e:f0:2f:46:d4:23:ee:e6:
                    5d:ce:70:33:50:6e:41:32:25:e0:d4:f3:93:58:d2:
                    eb:65:80:22:e4:eb:f9:7d:9e:39:c3:f8:3f:c1:7e:
                    cf:ed:16:12:64:ae:51:d6:ce:d9:3c:78:af:05:37:
                    57:84:36:68:a8:26:c6:28:a8:de:bb:cc:95:b5:5a:
                    21:10:58:45:d8:8e:cd:16:c1:9d:38:c7:4c:ae:f6:
                    33:e2:63:4e:b4:eb:91:4c:01:d9:3a:9e:a0:0c:31:
                    c7:4a:8f:d3:3a:49:1d:8a:77:e4:ee:66:87:26:4a:
                    c3:7b:27:d6:04:d7:d6:8f:1d:cb:42:f6:21:7d:2f:
                    b9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:53:2F:2A:5E:7B:17:26:6D:16:1C:DB:18:B6:9F:D3:47:D8:4D:99
            X509v3 Authority Key Identifier:
                keyid:3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/9VMvKl57FyZtFhzbGLaf00fYTZk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.110.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:0e:2e:69:20:e3:60:25:43:b2:14:9c:d5:49:42:f0:b8:57:
         7e:4f:57:d8:ae:10:5b:28:08:a4:52:60:44:68:cd:96:2e:ad:
         67:93:0d:75:25:57:c0:e1:d6:f5:96:9f:ac:ff:ab:9e:08:61:
         6d:4f:52:a7:ca:d5:d6:9a:a6:6c:8f:aa:ce:e1:1b:dc:1a:59:
         a7:ab:06:cd:b2:f5:a7:9d:88:fd:15:60:07:01:8b:61:58:53:
         24:e8:ad:aa:4a:27:bc:66:83:ae:02:a3:d0:85:74:4c:6b:29:
         e9:f2:07:ee:97:54:13:17:c6:7d:5b:58:fc:21:a9:58:ae:91:
         40:28:33:86:33:c3:a3:4c:f5:a8:63:4d:a8:f7:4f:84:be:bb:
         4b:65:be:03:85:e9:9a:81:bb:48:86:2b:09:7d:ef:3c:d7:b4:
         b4:ce:53:02:70:28:82:70:a1:1b:36:ef:c7:01:b9:88:fe:14:
         af:b8:38:e0:72:37:ed:f9:c8:ae:7a:10:9c:41:49:bb:2b:63:
         32:1e:4f:27:bf:0c:0b:66:d7:d6:69:d5:6d:47:36:2e:a4:1a:
         74:69:52:de:d6:ce:c4:f0:26:15:70:80:b7:cd:b6:fe:9a:bd:
         b6:04:52:91:d2:3b:36:67:7d:0b:de:29:a1:7b:15:53:95:ee:
         ff:99:6e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:27 2026 by rpki-client