This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/9gPhrTVXXrWCqCjsm71By0RzzoI.roa
File:                     9gPhrTVXXrWCqCjsm71By0RzzoI.roa (raw, json)
Hash identifier:          7vmmrUGhqUOQFhjNyWVb6vw1/SSr/8CDWs1hZa2ebfU=
Subject key identifier:   F6:03:E1:AD:35:57:5E:B5:82:A8:28:EC:9B:BD:41:CB:44:73:CE:82
Certificate issuer:       /CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
Certificate serial:       019B7AC91FA8E2CACD4AA7D725BC616B7662
Authority key identifier: 22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/9gPhrTVXXrWCqCjsm71By0RzzoI.roa
Signing time:             Thu 01 Jan 2026 18:19:19 +0000
ROA not before:           Thu 01 Jan 2026 18:19:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206351
IP address blocks:        2001:67c:12e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:1f:a8:e2:ca:cd:4a:a7:d7:25:bc:61:6b:76:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2224fd65003c39490abeaa9e1efe5f20246dc77b
        Validity
            Not Before: Jan  1 18:19:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f603e1ad35575eb582a828ec9bbd41cb4473ce82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:12:85:9c:d5:4b:c5:60:c8:ff:37:4a:41:23:
                    91:d8:b8:c1:fb:e0:99:0c:d8:0f:54:c9:e5:4c:de:
                    0b:30:41:bb:e5:4c:45:78:45:e5:33:b4:76:18:3c:
                    2f:81:b5:5b:fd:ac:d1:7f:84:54:0c:0f:80:87:75:
                    17:5e:2d:f7:ce:26:8e:f1:85:17:27:36:0f:8d:82:
                    8a:55:b4:2d:63:3b:12:61:5f:67:54:b6:9c:8b:1f:
                    83:49:ca:d2:72:f8:78:6f:af:b4:ac:d5:a5:24:98:
                    17:c2:84:c9:ef:a9:10:4b:a5:00:38:08:e6:d9:78:
                    b5:52:78:b6:55:1a:51:0a:6d:2c:95:e1:ef:a2:25:
                    9c:0c:4f:00:3c:e6:b1:b8:42:cc:e4:f4:24:34:d7:
                    46:76:0e:30:45:d2:bc:42:aa:dc:7c:57:cf:e4:27:
                    35:a6:0c:34:d7:f7:81:8f:23:0b:fe:5a:3c:20:45:
                    ba:ef:bb:98:0b:b4:ec:2a:5f:1c:0d:4b:32:9d:ec:
                    ae:e4:74:52:31:7d:91:b0:38:d1:21:0a:be:9e:87:
                    94:89:22:6e:57:2a:a1:1b:9a:c8:e1:57:7d:2b:b6:
                    fd:c7:eb:78:3a:df:c0:05:26:e3:e6:da:58:7a:d1:
                    52:43:26:f6:46:9b:19:ab:02:f3:0a:d2:4d:c9:ee:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:03:E1:AD:35:57:5E:B5:82:A8:28:EC:9B:BD:41:CB:44:73:CE:82
            X509v3 Authority Key Identifier:
                keyid:22:24:FD:65:00:3C:39:49:0A:BE:AA:9E:1E:FE:5F:20:24:6D:C7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IiT9ZQA8OUkKvqqeHv5fICRtx3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/9gPhrTVXXrWCqCjsm71By0RzzoI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b4900-085a-4a0e-a98f-c6db34c2f7e9/1/IiT9ZQA8OUkKvqqeHv5fICRtx3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:12e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:ca:51:15:c3:d1:d8:b6:cf:37:9a:0a:a3:f3:00:ae:96:a6:
         69:cc:53:7c:38:5c:9b:c7:82:f0:ac:71:c8:30:b6:7e:11:ee:
         bd:56:11:ef:76:a3:d2:0e:61:89:9c:12:e9:34:95:39:f5:17:
         14:a4:63:e3:4d:7d:25:a0:68:4f:26:3d:78:b7:c4:b8:c4:1e:
         e1:2f:f1:0a:5a:bc:68:93:0f:3e:d4:ba:1f:a4:a8:e3:14:e1:
         7d:2a:57:67:67:08:2f:c8:d4:62:45:fd:82:86:ca:cd:87:89:
         58:8b:92:7e:d0:4e:7d:14:56:78:2a:35:83:70:4b:8c:ac:65:
         09:4d:f7:9e:55:03:29:a1:40:bb:9a:49:dc:a0:b1:e5:0c:25:
         32:7b:b0:a4:e2:80:9e:8c:ec:9c:52:02:ee:9d:29:a7:e6:9a:
         16:a2:31:c2:18:7b:6a:4c:0a:c1:6e:fc:01:42:66:29:e4:ef:
         e8:0c:5c:1f:09:31:c3:d8:b6:43:2e:47:6d:9d:18:46:f9:37:
         d3:f0:2c:83:72:34:3c:6c:ae:1e:86:2d:f5:7b:10:3b:0a:c9:
         9b:55:f7:f6:16:bc:da:5e:da:71:e9:a0:64:a8:bd:99:da:62:
         1e:c3:ec:f8:40:e3:54:78:af:91:f9:54:97:f3:b3:5c:a7:75:
         72:61:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:53 2026 by rpki-client