This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/c0q33XIOQrm5W1qjd8fw_F2VySw.roa
File:                     c0q33XIOQrm5W1qjd8fw_F2VySw.roa (raw, json)
Hash identifier:          PxSJmR26K9n2xvyDwPVrN57pqz+8nMCKwGzKiK0FnUE=
Subject key identifier:   73:4A:B7:DD:72:0E:42:B9:B9:5B:5A:A3:77:C7:F0:FC:5D:95:C9:2C
Certificate issuer:       /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial:       019B76EB3C6B0E2D35FEE58A2724E9E3DE95
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/c0q33XIOQrm5W1qjd8fw_F2VySw.roa
Signing time:             Thu 01 Jan 2026 00:18:06 +0000
ROA not before:           Thu 01 Jan 2026 00:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216090
IP address blocks:        84.23.51.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:3c:6b:0e:2d:35:fe:e5:8a:27:24:e9:e3:de:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
        Validity
            Not Before: Jan  1 00:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=734ab7dd720e42b9b95b5aa377c7f0fc5d95c92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cb:8d:ad:7b:e9:d3:98:3b:ca:44:31:e4:fc:
                    a3:b5:34:43:a6:d5:fb:e6:fe:28:aa:96:21:77:6a:
                    f1:12:a0:59:64:3e:9a:60:ef:c2:7f:9c:37:c5:d2:
                    96:fe:93:43:e9:f3:a9:b4:39:7b:ea:5f:7b:10:a2:
                    8b:37:30:ff:45:ac:cc:50:c9:7e:30:bb:ba:ad:5f:
                    04:af:59:2f:a0:33:ad:02:c4:79:7e:bd:13:8e:09:
                    90:95:65:a3:6c:8b:75:b1:aa:21:31:47:43:d6:f7:
                    11:8c:f2:51:1f:b9:c6:4e:f3:73:6e:23:92:c7:c9:
                    60:1c:70:86:c6:69:d1:cc:d2:23:a8:e0:af:f8:ec:
                    30:6a:c1:2b:ac:df:29:e6:a7:86:5d:27:a3:63:75:
                    e4:b0:1a:86:31:0b:f8:c0:72:5e:f1:18:27:f6:53:
                    0a:75:7a:20:19:f9:c8:29:7d:57:78:e7:7d:03:9e:
                    f8:78:df:d0:47:78:ee:b9:c7:89:00:76:4b:98:d5:
                    18:85:52:ff:46:25:3f:8f:01:86:96:04:bc:62:a2:
                    45:70:59:28:34:e7:87:02:8e:5e:88:25:15:a7:c0:
                    7a:02:60:1a:14:ad:08:9f:cd:b4:1b:6d:a3:62:6f:
                    9c:91:60:fb:aa:09:35:7d:32:19:05:72:cf:c3:20:
                    ae:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4A:B7:DD:72:0E:42:B9:B9:5B:5A:A3:77:C7:F0:FC:5D:95:C9:2C
            X509v3 Authority Key Identifier:
                keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/c0q33XIOQrm5W1qjd8fw_F2VySw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.23.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:04:f5:4c:93:99:f3:68:6c:7c:6c:12:a3:e6:5d:07:29:91:
         cf:46:b2:81:54:62:51:00:0e:08:16:dc:8e:dc:1e:8c:77:32:
         74:fb:77:6d:9b:c3:1a:12:56:a9:69:b4:70:4b:7d:74:9f:df:
         63:02:c0:28:09:3a:58:3c:6d:66:a6:48:4c:53:71:23:77:81:
         cb:92:58:19:e7:ba:a4:02:19:b1:42:f0:7a:0e:c7:c7:22:98:
         27:bb:97:4d:0c:0f:0a:f4:25:26:e7:47:58:15:2a:f0:9f:4d:
         96:26:7b:57:ca:6b:98:53:22:7d:91:5e:ae:43:41:cb:35:de:
         58:70:ba:5d:8b:56:8a:f8:85:09:17:22:74:51:52:cd:1c:33:
         f7:15:d4:52:49:44:da:f0:66:a3:41:1f:dd:6f:6b:bd:13:16:
         32:50:31:33:fe:93:37:23:50:ce:59:7c:35:40:11:f7:4d:3b:
         7b:64:69:fd:1b:59:60:35:fa:aa:55:e8:0a:ec:67:15:7b:7f:
         bd:26:58:27:64:e4:bf:9b:3b:53:3a:58:78:28:63:1b:f0:78:
         e0:75:f1:b0:8e:ec:a5:4e:f7:b7:b2:ee:ff:52:f6:43:7e:9c:
         52:78:d1:e6:ab:84:c4:dc:07:8f:da:ad:3e:11:a5:4a:49:e0:
         32:3b:e4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 12:46:58 2026 by rpki-client