This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/Ow_V3D3LkyTM_r00ewpLU-JasWM.roa
File:                     Ow_V3D3LkyTM_r00ewpLU-JasWM.roa (raw, json)
Hash identifier:          n2QpzWe5qjli0Yj1OxzqDbdWwdmykVdSNeAfSZ+0exo=
Subject key identifier:   3B:0F:D5:DC:3D:CB:93:24:CC:FE:BD:34:7B:0A:4B:53:E2:5A:B1:63
Certificate issuer:       /CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
Certificate serial:       019B7A5B5EB39511F3CDEDE5CCFD8D05A1C2
Authority key identifier: 11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/Ow_V3D3LkyTM_r00ewpLU-JasWM.roa
Signing time:             Thu 01 Jan 2026 16:19:26 +0000
ROA not before:           Thu 01 Jan 2026 16:19:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49788
IP address blocks:        193.0.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:5e:b3:95:11:f3:cd:ed:e5:cc:fd:8d:05:a1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11362f3cfb94b9223c78433197c4e0ca12dbd70a
        Validity
            Not Before: Jan  1 16:19:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3b0fd5dc3dcb9324ccfebd347b0a4b53e25ab163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c1:b1:e1:68:1d:9e:62:2e:3b:14:5d:2f:90:
                    df:df:49:1e:3a:b5:ad:ba:05:82:04:ce:e7:28:15:
                    f1:b3:67:89:69:5d:2d:45:b5:b0:50:01:f6:29:c2:
                    02:0c:9f:84:80:fb:08:96:46:ca:5b:d5:e5:7a:0c:
                    e5:db:1f:98:c6:b7:75:51:a9:ea:a4:62:ad:3c:0f:
                    44:49:fc:40:c9:4f:9e:08:92:41:e2:c8:c3:90:d6:
                    b7:c8:c3:a9:91:1c:da:6e:b8:57:a7:0e:b0:09:f2:
                    be:60:6a:3b:45:ef:cc:7b:c1:67:3a:05:fb:09:b2:
                    83:57:00:db:14:5b:ce:c0:27:41:8c:e0:03:1b:bb:
                    16:26:61:7d:7f:f1:d7:82:0b:21:1e:14:74:b0:2b:
                    48:83:2e:85:c1:81:8b:b2:fc:b7:5b:67:f1:7b:ca:
                    86:1a:f0:2c:9b:09:b1:f4:52:41:61:78:46:a4:d2:
                    1e:7e:dc:8b:aa:95:f7:c1:92:fe:ab:10:e3:35:b9:
                    55:63:6b:20:db:11:34:0f:da:b3:64:63:64:00:70:
                    7c:c3:21:33:ea:ee:6f:5d:9c:fa:f7:20:95:46:2b:
                    2c:32:c2:3b:7c:e5:41:a3:1c:fb:a6:63:70:10:c2:
                    4c:38:1d:b7:fd:e9:c4:9f:ea:47:ea:12:77:8b:85:
                    2d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0F:D5:DC:3D:CB:93:24:CC:FE:BD:34:7B:0A:4B:53:E2:5A:B1:63
            X509v3 Authority Key Identifier:
                keyid:11:36:2F:3C:FB:94:B9:22:3C:78:43:31:97:C4:E0:CA:12:DB:D7:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ETYvPPuUuSI8eEMxl8TgyhLb1wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/Ow_V3D3LkyTM_r00ewpLU-JasWM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/aba260-0850-4460-8053-94ca9c165779/1/ETYvPPuUuSI8eEMxl8TgyhLb1wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:c6:65:18:9e:8b:e9:56:7b:5c:88:12:83:54:1f:25:14:90:
         ab:7b:12:4f:40:8e:1d:ef:7d:74:76:83:b3:cd:6f:5f:0f:b6:
         9c:5b:6c:c7:77:95:79:77:07:13:d1:8c:10:04:7a:2e:1d:75:
         5b:6c:78:ac:87:6a:c2:72:12:7c:b1:03:cc:9b:84:bb:5e:bd:
         36:cd:9c:61:e5:f2:90:14:b6:82:c5:1e:df:ff:fc:60:3a:d1:
         3e:96:e6:d8:19:b2:23:b3:38:3b:85:03:10:66:08:bc:c9:1b:
         a8:9c:c4:ac:8a:58:74:5c:18:c0:8e:c1:ff:47:d9:93:cb:d1:
         b1:2b:28:dd:33:31:9f:cf:50:6c:61:14:22:4f:77:7b:60:b0:
         00:90:af:04:78:ca:e3:2a:ba:80:66:75:fe:dd:7b:30:46:ab:
         05:c6:94:d2:9e:af:c4:9c:a1:0d:3b:2e:42:81:d6:c6:3b:ce:
         1e:6c:af:ea:ed:fb:ce:c4:95:c0:1b:6e:cd:e0:46:0a:b1:80:
         c0:26:55:63:ac:4c:71:de:30:d0:f6:d4:d2:67:21:12:be:32:
         cc:63:80:4c:54:1a:d8:fb:ee:e2:d1:7c:09:e6:1f:2b:c6:ca:
         e3:ff:10:37:7f:9b:c8:fe:f8:df:50:83:57:84:0d:84:d2:67:
         6e:3d:35:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 12:27:26 2026 by rpki-client