This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/_SwAckWBp8isMhZUKjw_8MX2PbQ.roa
File:                     _SwAckWBp8isMhZUKjw_8MX2PbQ.roa (raw, json)
Hash identifier:          DdPCOva+CEkdSFj4rwktdG8ykIu5k66PhfcbhD6raBk=
Subject key identifier:   FD:2C:00:72:45:81:A7:C8:AC:32:16:54:2A:3C:3F:F0:C5:F6:3D:B4
Certificate issuer:       /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial:       019B7E38CDB5075001689BA33C1248935913
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/_SwAckWBp8isMhZUKjw_8MX2PbQ.roa
Signing time:             Fri 02 Jan 2026 10:20:10 +0000
ROA not before:           Fri 02 Jan 2026 10:20:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34996
IP address blocks:        193.202.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:cd:b5:07:50:01:68:9b:a3:3c:12:48:93:59:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
        Validity
            Not Before: Jan  2 10:20:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fd2c00724581a7c8ac3216542a3c3ff0c5f63db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:01:a7:87:56:34:92:3a:39:d4:74:0d:f9:9a:
                    fa:79:ae:3a:41:3c:5f:67:ee:a0:1c:c7:15:21:a4:
                    b1:7a:d2:1c:5c:ca:17:f6:91:d4:d1:b2:df:82:79:
                    05:2d:8a:ba:c4:16:09:a2:05:3a:bc:b9:a3:b7:2d:
                    a3:1d:32:64:44:f2:68:0c:d3:87:30:2b:86:67:4e:
                    7a:61:5b:e8:84:64:7c:2d:c8:d8:40:9d:32:c7:0d:
                    2f:a9:49:38:70:51:03:85:96:6a:01:2f:3d:5a:ef:
                    3a:87:d7:c3:2a:44:26:3d:e1:f0:4f:07:aa:b1:cc:
                    8c:91:65:4c:af:fc:22:7a:57:cb:55:c4:e7:6a:a4:
                    40:28:32:45:72:ef:d7:cd:1f:ff:9f:9d:5f:d9:02:
                    90:81:b2:dd:64:1f:57:3b:e8:3e:4c:bb:44:23:36:
                    51:25:dc:0d:e4:0a:d1:55:4b:ba:e8:f3:de:ec:96:
                    7a:c0:7e:bc:dc:7b:d5:ec:ed:f3:59:c7:a3:43:02:
                    d7:ff:3c:e4:55:62:d3:4c:fb:76:68:f1:59:d4:57:
                    b7:5c:a1:ab:ff:f3:5c:9b:de:5b:08:2d:80:97:6d:
                    08:6d:26:6d:ae:d5:d9:2b:7c:8b:fa:7c:1e:28:ab:
                    66:53:4f:73:2d:3a:1a:74:63:9a:f9:d4:0f:16:40:
                    2e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2C:00:72:45:81:A7:C8:AC:32:16:54:2A:3C:3F:F0:C5:F6:3D:B4
            X509v3 Authority Key Identifier:
                keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/_SwAckWBp8isMhZUKjw_8MX2PbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.202.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:28:40:49:89:71:88:96:6c:d5:f9:97:b1:e9:8a:2a:60:2a:
         fb:86:bf:c4:db:1d:28:85:c4:0c:3b:a1:b8:ff:46:36:e8:e4:
         6d:ad:9d:bb:49:5c:35:23:0b:c5:0f:92:77:85:68:35:10:4c:
         0b:53:ea:4a:ab:af:ec:11:24:d7:24:a7:13:8d:f9:3c:b3:03:
         d9:a3:97:17:64:79:33:70:54:f2:c2:18:31:f7:f5:82:08:52:
         14:f4:5e:58:21:e9:25:61:67:d3:7b:97:06:f0:d2:5e:0a:54:
         16:46:b1:82:03:2c:90:e5:b0:b6:57:a6:0c:53:a2:82:90:73:
         6c:d5:ef:29:08:75:2b:e7:4e:62:db:2f:38:12:d9:5d:8f:d3:
         f1:20:f5:fc:de:d8:72:a8:fd:d3:01:54:fc:4e:5d:59:79:27:
         f4:05:96:b5:24:70:0e:dc:88:f6:3b:dd:2c:f4:a1:93:a3:ce:
         6d:de:f5:b7:86:a8:45:dd:ad:6d:6f:37:c1:75:7d:21:f0:07:
         19:9a:8d:c4:9a:28:63:39:eb:e6:ce:21:4a:ad:fc:63:f7:de:
         66:a4:5d:c1:94:2f:28:65:97:63:f5:c1:7e:ec:ac:b5:0e:98:
         f2:3d:8f:a4:6c:1a:ac:e7:0e:4b:13:85:9c:ac:1d:e8:b8:83:
         4b:4a:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:25:58 2026 by rpki-client