This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/Oc83xjl3O0pNHEvrLPV5RfHxTMo.roa
File:                     Oc83xjl3O0pNHEvrLPV5RfHxTMo.roa (raw, json)
Hash identifier:          riBhCRYBSK/hU06s7Utiuh3DGPbPNRVt2NaABQjgoC4=
Subject key identifier:   39:CF:37:C6:39:77:3B:4A:4D:1C:4B:EB:2C:F5:79:45:F1:F1:4C:CA
Certificate issuer:       /CN=137e1103775785d012fc8ddab4c02ac03791b9d4
Certificate serial:       019B7834B1B9665DB5EC9BAC49F725EB0BEB
Authority key identifier: 13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/Oc83xjl3O0pNHEvrLPV5RfHxTMo.roa
Signing time:             Thu 01 Jan 2026 06:17:57 +0000
ROA not before:           Thu 01 Jan 2026 06:17:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203715
IP address blocks:        185.126.60.0/22 maxlen: 23
                          2a06:bf00::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:b1:b9:66:5d:b5:ec:9b:ac:49:f7:25:eb:0b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137e1103775785d012fc8ddab4c02ac03791b9d4
        Validity
            Not Before: Jan  1 06:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=39cf37c639773b4a4d1c4beb2cf57945f1f14cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:44:ad:f9:e6:33:72:41:ce:80:7b:36:9c:
                    ad:91:bc:20:e7:56:2c:45:90:c6:1f:fe:3a:c9:bd:
                    ad:b9:b4:9e:bc:15:4e:60:b3:e7:b0:d6:ab:db:83:
                    aa:10:21:eb:03:e3:3f:80:ed:9a:22:eb:c7:6d:ad:
                    03:58:c6:a5:ac:92:c8:ac:8f:25:59:79:d1:27:d1:
                    a9:2c:94:fe:69:63:c4:47:36:40:d6:e4:4b:24:01:
                    4e:45:9d:df:a0:b6:b5:9b:d7:75:99:1e:69:90:dd:
                    30:31:a0:b3:c7:e7:d2:7b:8a:cb:3c:91:3a:4c:ac:
                    ee:8a:6a:64:27:67:4b:a5:b7:45:b4:a3:0a:30:94:
                    65:07:31:f8:09:22:17:16:e3:14:2e:5e:4a:1e:71:
                    e4:9c:d7:f4:4c:00:8a:2f:ac:93:fd:33:08:68:a1:
                    e7:a6:a9:ba:38:7d:6d:79:63:09:b4:5d:09:c1:10:
                    95:1e:62:d6:92:21:ec:54:8f:f4:b8:b8:52:e6:c3:
                    65:f2:e6:74:af:b6:1a:ca:42:1d:19:c7:fa:2b:3b:
                    41:6e:34:cd:d5:4d:2d:07:40:a5:fa:0b:78:45:5b:
                    07:af:7e:f7:df:b6:73:e5:f2:34:04:92:b3:2e:d0:
                    e3:5b:ee:7b:68:58:c5:d3:8e:71:c9:8c:36:24:b6:
                    47:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CF:37:C6:39:77:3B:4A:4D:1C:4B:EB:2C:F5:79:45:F1:F1:4C:CA
            X509v3 Authority Key Identifier:
                keyid:13:7E:11:03:77:57:85:D0:12:FC:8D:DA:B4:C0:2A:C0:37:91:B9:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E34RA3dXhdAS_I3atMAqwDeRudQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/Oc83xjl3O0pNHEvrLPV5RfHxTMo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e16ee7-efef-4809-89ff-8bdccce5dfe8/1/E34RA3dXhdAS_I3atMAqwDeRudQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.60.0/22
                IPv6:
                  2a06:bf00::/29

    Signature Algorithm: sha256WithRSAEncryption
         37:58:90:ac:de:f8:2a:c2:2a:2b:b0:fe:6e:f1:99:e5:eb:36:
         49:85:49:fa:c6:30:e8:47:0a:97:5b:a0:77:fe:0f:55:e7:d3:
         7b:72:5f:41:77:b0:19:79:08:82:ae:80:aa:b5:d2:09:e4:5e:
         bb:65:d5:8b:da:05:b2:ca:52:00:8f:3e:d0:b3:80:3f:d8:03:
         b4:4f:4c:c5:03:12:f7:27:3f:f2:3b:00:d6:a5:ad:5b:9a:d4:
         94:9c:ae:26:0c:76:35:a1:30:13:fb:1d:2e:41:fc:e1:80:bc:
         ab:44:2d:d9:a3:ab:75:2e:83:aa:19:ff:e4:2a:eb:59:2e:ca:
         80:21:8b:75:7e:5f:00:27:a6:3f:96:91:59:d7:64:3e:e8:57:
         2a:73:55:4b:a5:d1:fc:f0:59:ae:2a:ed:14:d0:80:e9:4c:69:
         59:32:d1:2b:c4:15:77:53:a2:6a:18:b9:b3:90:c2:ee:d9:51:
         82:0c:b9:8e:77:cc:d5:78:96:9e:59:49:aa:9d:fe:04:ee:32:
         5d:18:be:40:46:9c:07:9c:32:ae:0d:04:5f:f0:80:c1:29:13:
         52:81:8a:20:1a:13:2c:5a:f6:23:8d:e0:5f:dd:c9:9f:0c:a0:
         23:2d:50:9d:03:33:2d:d0:51:ac:50:4a:a6:3a:48:d4:9f:6f:
         0d:ed:d9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:31 2026 by rpki-client