This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/cuQOSndsrOHE68u2RGDR9Wvb2PU.roa
File:                     cuQOSndsrOHE68u2RGDR9Wvb2PU.roa (raw, json)
Hash identifier:          oESYbd0eiPwK4UeuaCOTGhvgRMQavcY75LLUi+iO6dU=
Subject key identifier:   72:E4:0E:4A:77:6C:AC:E1:C4:EB:CB:B6:44:60:D1:F5:6B:DB:D8:F5
Certificate issuer:       /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial:       019B7E38567C7004E1E50CE8AB280E5CD492
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/cuQOSndsrOHE68u2RGDR9Wvb2PU.roa
Signing time:             Fri 02 Jan 2026 10:19:39 +0000
ROA not before:           Fri 02 Jan 2026 10:19:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61358
IP address blocks:        176.113.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:56:7c:70:04:e1:e5:0c:e8:ab:28:0e:5c:d4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
        Validity
            Not Before: Jan  2 10:19:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=72e40e4a776cace1c4ebcbb64460d1f56bdbd8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:03:18:2c:88:e3:34:c2:a0:97:15:87:f1:
                    93:4e:5f:f3:25:ed:bd:f8:7a:55:5f:93:bd:29:3c:
                    79:94:62:fa:7f:95:62:64:24:44:2e:d3:16:55:e1:
                    f8:57:3d:54:34:bb:31:f0:76:d5:ae:f6:39:b2:97:
                    16:65:ba:c2:c6:29:e6:20:41:fe:95:ca:cc:32:0d:
                    f4:d0:b1:68:ea:4c:32:bd:a2:b8:41:6c:71:9d:70:
                    8c:a5:f5:44:2d:30:34:9e:61:0b:e7:fe:5e:34:56:
                    90:a0:6e:99:c4:04:c2:2f:da:55:04:43:3d:62:c4:
                    20:7c:2b:b8:28:b0:f5:73:60:be:2a:3a:9a:4f:57:
                    58:94:0f:eb:d2:16:49:27:de:85:6c:df:c3:4d:69:
                    ce:f0:f4:91:55:39:c0:cb:d2:bd:9e:a0:ad:7c:81:
                    95:0a:98:57:dd:65:db:a1:78:bb:19:4a:53:86:68:
                    df:73:33:76:e9:53:45:8b:9d:9e:a1:8e:94:39:c8:
                    a7:4a:29:ac:4a:d2:cb:a7:14:c5:42:a4:17:66:49:
                    df:a6:86:bb:89:38:8f:30:55:84:99:84:29:74:02:
                    17:45:c6:c3:d1:62:ec:8a:81:5c:17:e0:9e:a9:7b:
                    80:9e:7e:6e:36:2a:06:ea:3e:f2:16:ed:ea:14:ab:
                    76:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E4:0E:4A:77:6C:AC:E1:C4:EB:CB:B6:44:60:D1:F5:6B:DB:D8:F5
            X509v3 Authority Key Identifier:
                keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/cuQOSndsrOHE68u2RGDR9Wvb2PU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.113.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:69:5b:38:dd:4a:81:6f:e7:c7:a9:f8:d5:df:c2:9f:ae:a2:
         63:10:40:2a:dc:9a:a3:85:f9:b2:e2:9a:86:ea:69:1d:f1:64:
         90:b2:4b:85:3d:f9:ab:91:0c:bb:a0:12:48:d6:3d:5b:df:34:
         fc:52:cb:2e:ba:0b:48:dc:cc:3f:b0:99:1b:4b:11:73:b6:18:
         d8:2f:5a:f4:81:93:a5:b0:c4:02:7d:5c:60:5d:9d:33:23:b7:
         9d:fb:8c:ba:a9:01:b0:b7:95:bf:52:4e:c6:7b:9f:b3:b3:ed:
         8b:74:5f:46:33:f2:73:b8:00:4b:2d:6f:83:cc:87:10:07:4c:
         e8:d4:77:52:e3:b8:d2:86:6c:13:a3:f4:e3:50:25:36:18:20:
         62:0a:5e:b1:30:ff:82:89:00:6d:2d:5b:0e:76:12:79:0f:92:
         b3:98:32:e9:08:56:b6:65:c9:a9:4d:3e:a0:45:27:82:83:21:
         64:5a:24:f7:44:3e:bb:0d:f2:02:59:62:13:c3:a9:63:99:ad:
         cb:f5:5b:76:2c:cc:50:e4:c3:a7:2e:d2:03:05:e4:b3:4a:74:
         39:c0:62:40:db:28:f7:da:d3:36:d6:6e:18:c6:4a:4e:70:bf:
         7c:cd:35:85:ac:46:7b:93:78:14:b3:dd:6d:12:6e:05:b5:e4:
         d7:06:a2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:56 2026 by rpki-client