This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/AgsPlaew9BxC8H6svqcKUEs4Qhk.roa
File:                     AgsPlaew9BxC8H6svqcKUEs4Qhk.roa (raw, json)
Hash identifier:          4UR8Vh6eTw1Tv7xe4kRQAuAMN978t94veu9L+yIEOOw=
Subject key identifier:   02:0B:0F:95:A7:B0:F4:1C:42:F0:7E:AC:BE:A7:0A:50:4B:38:42:19
Certificate issuer:       /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial:       019B77C736748F32C8794B2D0C7639831511
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/AgsPlaew9BxC8H6svqcKUEs4Qhk.roa
Signing time:             Thu 01 Jan 2026 04:18:22 +0000
ROA not before:           Thu 01 Jan 2026 04:18:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15511
IP address blocks:        94.231.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 16:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:36:74:8f:32:c8:79:4b:2d:0c:76:39:83:15:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
        Validity
            Not Before: Jan  1 04:18:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=020b0f95a7b0f41c42f07eacbea70a504b384219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:d5:25:e9:2a:62:69:bd:eb:d8:d7:01:a2:
                    10:46:86:32:d1:44:a1:b4:c3:64:85:a5:35:f3:8b:
                    e4:90:c9:54:6a:fb:df:a9:22:70:e2:dc:25:eb:37:
                    a6:41:74:36:3f:05:ae:60:92:9f:4d:3a:fe:3e:aa:
                    87:14:29:82:53:4e:ba:31:6b:a8:95:2f:2e:48:62:
                    37:6f:e6:c8:da:d1:4d:cc:e3:b3:ef:e4:04:ba:75:
                    24:ff:f3:16:25:72:84:33:f0:00:ff:74:5e:44:b4:
                    e0:36:71:32:82:04:3e:36:a6:fc:e7:76:f3:ff:e9:
                    03:d1:59:56:f2:04:cb:43:35:cf:66:c2:c6:dc:7d:
                    81:49:de:cc:fc:fa:91:b4:e5:71:b1:28:e4:45:ee:
                    42:28:eb:00:c1:7e:72:00:d2:e6:c6:ce:41:25:27:
                    37:56:c9:d0:7b:5d:be:98:68:4a:8a:f5:3d:01:03:
                    aa:10:40:5d:e7:83:74:51:fc:b8:f2:75:7d:f9:61:
                    dd:db:19:e9:c0:ef:95:f2:39:19:9b:ce:c6:b9:46:
                    b7:8c:33:54:f6:5a:f1:fc:26:e0:1c:09:c3:4e:48:
                    3e:75:b6:77:91:e9:ea:61:2b:9c:46:eb:c1:0b:d6:
                    d7:9c:c3:09:33:03:71:f0:95:d6:64:b9:bd:de:50:
                    ae:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0B:0F:95:A7:B0:F4:1C:42:F0:7E:AC:BE:A7:0A:50:4B:38:42:19
            X509v3 Authority Key Identifier:
                keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/AgsPlaew9BxC8H6svqcKUEs4Qhk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.231.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:50:d9:0f:76:64:33:d6:bf:b4:74:ac:ac:de:b4:3c:76:
         a0:64:fc:25:57:ce:46:24:d5:19:16:c2:c8:e3:28:6a:75:b7:
         36:15:63:a7:86:21:73:0b:e7:58:f1:3c:9e:72:ae:80:41:03:
         8e:bd:11:04:e4:7b:3d:35:68:08:94:d0:d1:fe:15:43:d3:9c:
         18:34:3f:e6:52:b7:4d:8b:1a:16:db:9b:f9:38:e3:e7:34:98:
         00:5b:a4:6f:79:53:8c:f5:86:66:2c:94:75:8e:5e:37:85:e2:
         d9:9e:fc:72:49:f6:a4:a1:fd:f5:cf:38:1c:60:82:1f:9d:55:
         75:fa:a2:ea:dc:74:ad:ef:c4:72:9a:7f:99:0f:2c:8a:dd:55:
         c0:71:f6:e6:77:17:bd:40:3c:be:26:b0:1d:ff:55:c8:63:71:
         94:0e:f0:f2:96:ac:f5:8a:79:c1:5b:59:a0:0c:22:b9:7f:88:
         a5:75:f9:67:3a:02:fb:f9:ea:a3:66:de:dc:5b:e6:31:81:62:
         a7:68:cc:93:67:08:ad:aa:68:ee:f3:b9:18:d5:cf:d5:3e:2f:
         c2:cc:a2:a6:15:91:79:88:d9:ca:4b:53:6f:56:ca:8f:67:09:
         42:a7:c8:c6:b0:fd:0a:ba:2f:f5:67:06:c1:cb:5c:f9:13:eb:
         e9:70:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:53:47 2026 by rpki-client