This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/AUJBwqUEGRl5pOinQQhewx3XNN4.roa
File:                     AUJBwqUEGRl5pOinQQhewx3XNN4.roa (raw, json)
Hash identifier:          00r5IYJwyUKYgINfARqOjf3C3sp+DUhl/0cWO2KBAGQ=
Subject key identifier:   01:42:41:C2:A5:04:19:19:79:A4:E8:A7:41:08:5E:C3:1D:D7:34:DE
Certificate issuer:       /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial:       019B79EC48FE7E3C2FC4186E68C76A236297
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/AUJBwqUEGRl5pOinQQhewx3XNN4.roa
Signing time:             Thu 01 Jan 2026 14:18:06 +0000
ROA not before:           Thu 01 Jan 2026 14:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38974
IP address blocks:        194.113.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:48:fe:7e:3c:2f:c4:18:6e:68:c7:6a:23:62:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
        Validity
            Not Before: Jan  1 14:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=014241c2a504191979a4e8a741085ec31dd734de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f6:16:f5:51:a9:12:2e:4f:12:7c:7c:60:f5:
                    6f:7b:ce:02:33:ed:66:64:2e:9f:2f:aa:ab:d2:48:
                    d8:45:35:77:91:73:e2:1c:83:16:b8:35:65:1d:30:
                    53:69:e3:6a:17:84:da:5e:d3:0b:d7:2b:ae:c3:55:
                    26:72:26:b4:7a:c7:45:98:68:12:68:b2:8f:39:1e:
                    20:f8:4c:b6:9e:ba:80:71:d5:9d:7a:26:fc:fe:98:
                    27:33:25:60:b6:1e:f9:da:af:b2:41:ce:b3:86:28:
                    c3:84:c1:93:a7:e7:bc:74:8d:9a:09:5a:fc:39:8c:
                    22:df:06:62:2a:85:77:ed:f8:46:a3:e2:c4:a8:13:
                    75:2f:2c:cf:e7:04:1b:37:54:35:4a:1c:f2:24:0c:
                    ae:5d:89:0a:cd:96:41:1b:66:3f:17:6d:94:be:4d:
                    62:cc:03:6e:b8:c8:a0:94:8c:85:67:86:30:18:4f:
                    f0:18:f8:62:51:49:20:dc:19:76:71:75:12:ba:a0:
                    8d:7f:1e:2e:f7:01:50:2d:13:f2:01:99:2a:f2:23:
                    3d:5d:95:a6:13:af:8a:1f:08:bb:21:48:e6:81:87:
                    29:ff:ba:b7:46:de:88:b0:ac:61:76:45:a3:30:0a:
                    2e:b0:ac:79:bb:3b:5d:73:5c:e5:d0:05:f7:f9:6c:
                    37:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:42:41:C2:A5:04:19:19:79:A4:E8:A7:41:08:5E:C3:1D:D7:34:DE
            X509v3 Authority Key Identifier:
                keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/AUJBwqUEGRl5pOinQQhewx3XNN4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:2d:dd:83:30:42:2e:3f:c4:25:9d:83:74:db:00:78:08:21:
         01:4b:1a:1a:62:89:49:69:ae:e7:8e:88:f1:20:bb:fe:17:9b:
         f8:e1:64:1f:5f:59:e4:6f:c7:bd:40:d2:43:c6:91:71:9c:fb:
         fb:5b:2e:8b:ec:cd:31:46:90:15:84:17:03:4e:ec:4d:7a:db:
         69:ef:6b:1a:e5:c8:83:de:e9:6a:30:aa:ef:cb:43:40:93:75:
         f4:55:7e:3f:2c:82:43:69:08:c3:9f:76:6f:b9:e8:4c:08:0d:
         6e:f9:9e:77:a7:14:99:8d:91:1c:c4:df:d2:54:e1:92:0a:cc:
         f4:31:e5:e8:83:d3:b3:63:18:ec:c1:dd:71:ff:e3:24:aa:f2:
         75:25:6c:51:7a:37:9a:06:b9:fd:bd:00:17:f4:95:8f:e4:7c:
         59:43:45:20:9f:9d:ce:3a:3d:0f:bd:49:4c:89:9c:b1:6b:d1:
         42:ba:4a:05:65:42:20:5f:9d:fb:ee:15:92:d3:98:27:af:65:
         54:31:0d:98:32:a1:e6:19:f4:5c:7c:9e:03:4f:fb:a9:24:c7:
         c9:86:54:3e:aa:a1:d3:99:00:5e:33:e7:05:ae:a5:44:18:a3:
         2d:b4:02:ad:d8:fd:b5:dd:79:fe:cd:64:d2:f6:5e:2b:95:20:
         b9:66:bc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:11:59 2026 by rpki-client