This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/n1gszGNi91NKoAVx2xcmyMTkTXY.roa
File:                     n1gszGNi91NKoAVx2xcmyMTkTXY.roa (raw, json)
Hash identifier:          FWe/Htj+8lvEAdsYtcUQYTp79iPETMeKYH5pSUcy/4E=
Subject key identifier:   9F:58:2C:CC:63:62:F7:53:4A:A0:05:71:DB:17:26:C8:C4:E4:4D:76
Certificate issuer:       /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial:       019B7B35E9C2113AA82E48BC75DF598349A9
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/n1gszGNi91NKoAVx2xcmyMTkTXY.roa
Signing time:             Thu 01 Jan 2026 20:18:09 +0000
ROA not before:           Thu 01 Jan 2026 20:18:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214294
IP address blocks:        176.116.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 23:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:e9:c2:11:3a:a8:2e:48:bc:75:df:59:83:49:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
        Validity
            Not Before: Jan  1 20:18:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9f582ccc6362f7534aa00571db1726c8c4e44d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:20:69:70:0a:2a:64:58:c7:27:80:c0:35:
                    b0:c2:c8:f0:e1:16:63:03:e6:8e:ee:2d:a4:39:40:
                    1d:3c:1f:71:d5:11:70:97:79:e2:31:25:b2:cc:5b:
                    b0:9c:9a:c0:f4:98:37:eb:67:86:ed:a6:7c:6e:be:
                    6c:bc:19:10:de:8a:2a:2b:01:ff:7e:22:25:ec:11:
                    7e:01:70:8a:2c:e5:20:96:71:a2:3d:02:48:18:60:
                    27:dc:98:20:cf:38:1d:60:79:79:48:fc:1c:77:86:
                    dd:b8:9d:03:a7:d1:a6:6b:4f:99:1e:a1:da:67:33:
                    f4:f2:49:aa:03:a6:e1:4b:cc:37:9a:ea:7c:12:10:
                    c5:08:d2:0f:42:50:26:24:cb:60:36:e5:ea:db:c9:
                    7c:4c:da:90:8f:ec:a1:0e:8b:80:26:5b:4b:27:9b:
                    c3:4f:37:05:24:4f:79:4c:dd:6c:08:5a:b6:2d:dd:
                    fa:bc:25:22:0c:5f:37:ed:52:d1:59:6f:27:1e:e3:
                    3b:45:6e:0c:8c:e0:5f:2b:bd:4a:3d:bc:58:cd:08:
                    53:a0:98:3e:06:d4:9e:86:c9:26:e1:5f:37:d2:9a:
                    2e:0b:06:eb:88:8b:7b:ed:a4:b0:8f:b0:bd:c7:03:
                    56:7c:89:02:77:33:88:be:17:69:2f:f7:47:ca:96:
                    75:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:58:2C:CC:63:62:F7:53:4A:A0:05:71:DB:17:26:C8:C4:E4:4D:76
            X509v3 Authority Key Identifier:
                keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/n1gszGNi91NKoAVx2xcmyMTkTXY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:4c:99:fb:0a:b3:a4:e3:21:e1:43:ea:93:8f:ec:ec:55:7f:
         9f:59:38:69:e8:ba:f3:88:6b:17:d5:42:98:7d:b2:ac:5d:0e:
         8b:cc:4b:70:30:6b:0b:ab:1e:3b:67:d7:26:f7:0a:21:ce:d6:
         cb:0f:f8:8d:41:db:97:66:86:2b:ba:2d:35:9c:ff:76:3d:d2:
         a1:f3:2e:e9:da:eb:db:3b:3d:6b:a5:f8:e4:f4:33:d9:cd:c3:
         ba:50:cb:f2:6e:a1:ac:b2:55:17:4e:78:d9:1d:e8:24:d7:9e:
         bd:8c:89:29:49:df:82:65:95:bc:c1:b9:b0:9d:33:c2:4c:0c:
         9c:5e:5e:9a:2b:cc:6e:fe:e2:52:c6:d5:38:53:a5:ba:76:a4:
         b2:5a:7a:c3:9c:6f:ea:21:72:d5:c2:62:e9:8c:dc:22:d6:c9:
         cb:ae:81:1f:23:27:58:0b:e6:f8:2c:36:bf:2c:de:f7:26:0a:
         d5:ad:98:fe:87:0f:99:cd:2d:26:45:3e:27:d1:67:78:58:cb:
         2b:67:26:35:fa:c0:c5:df:1c:b9:19:5c:4b:89:18:85:a7:a5:
         6b:f6:ba:aa:24:4d:56:44:a9:82:41:ab:95:24:13:03:28:e7:
         14:f0:1a:7f:be:81:79:d6:a6:1f:c6:5e:aa:30:01:dc:3a:21:
         1a:1b:e8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 08:22:19 2026 by rpki-client