This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/s8uoBmRDwT1I6UHn-j9HLjE26mE.roa
File:                     s8uoBmRDwT1I6UHn-j9HLjE26mE.roa (raw, json)
Hash identifier:          93nVEqAB+I5Wpe2PdQ+LQC2FT2DxNkUueoInceH3LxI=
Subject key identifier:   B3:CB:A8:06:64:43:C1:3D:48:E9:41:E7:FA:3F:47:2E:31:36:EA:61
Certificate issuer:       /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial:       019B7AC8C556E05650CC5D99BF89C6D605D1
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/s8uoBmRDwT1I6UHn-j9HLjE26mE.roa
Signing time:             Thu 01 Jan 2026 18:18:56 +0000
ROA not before:           Thu 01 Jan 2026 18:18:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209360
IP address blocks:        193.105.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:c5:56:e0:56:50:cc:5d:99:bf:89:c6:d6:05:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
        Validity
            Not Before: Jan  1 18:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b3cba8066443c13d48e941e7fa3f472e3136ea61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f8:e3:01:64:29:4d:d7:90:d7:40:0b:65:3a:
                    08:4d:94:06:60:41:b4:95:c6:de:f4:d1:b5:b5:d1:
                    3e:f5:fd:44:ec:d5:f5:7c:5b:47:a6:35:55:df:2a:
                    af:38:36:e0:98:f0:96:15:13:1a:e3:99:e5:18:c9:
                    34:c2:13:58:23:b3:60:3b:d1:e0:96:1b:dd:06:d7:
                    80:d1:2a:78:a9:9f:e6:26:dc:a8:33:30:c3:15:af:
                    a4:27:c7:f7:93:e3:1c:7d:53:05:e6:cc:54:52:41:
                    65:70:e7:6d:58:a7:dc:ca:80:ef:8d:88:5d:8e:4d:
                    78:d0:9d:13:9d:f4:64:df:a7:3a:a0:0f:8c:cb:ea:
                    d1:fa:52:4d:26:42:f7:84:d1:42:f0:b3:3f:a3:66:
                    ff:73:37:bb:6a:c9:40:f0:94:ca:f4:bd:4f:de:0a:
                    0e:4f:c2:0b:2d:20:f0:b7:1f:34:8a:11:87:f6:0e:
                    5d:4b:dc:5c:0a:07:53:ec:15:a2:a3:27:2f:a6:83:
                    ad:1f:5c:5d:83:24:fa:2e:e6:04:9d:36:8d:9e:a5:
                    cc:c1:9d:11:e2:df:db:82:3f:bf:b2:a1:3f:5a:4b:
                    83:cf:78:b2:2f:17:d2:33:bd:86:fa:fe:3a:65:99:
                    0b:f0:28:28:66:c5:52:b1:f6:28:66:35:15:88:48:
                    eb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CB:A8:06:64:43:C1:3D:48:E9:41:E7:FA:3F:47:2E:31:36:EA:61
            X509v3 Authority Key Identifier:
                keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/s8uoBmRDwT1I6UHn-j9HLjE26mE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:ec:6f:56:8a:0c:07:ac:09:49:fa:9c:6b:1f:b9:e3:e8:35:
         ba:0a:01:a3:b1:3f:da:b9:cf:5f:cb:65:2b:11:96:dc:2b:0b:
         5a:e3:a1:40:a5:ab:3a:72:a5:2e:1a:24:e6:bc:eb:0a:d7:2f:
         09:56:ef:70:2c:8d:0e:b8:4c:98:8b:75:ca:54:98:b6:7c:51:
         39:af:67:05:80:2c:c8:cf:6c:79:38:e5:3d:80:dc:77:cb:35:
         fd:0d:78:80:4d:76:00:d9:e1:89:18:71:25:7d:c4:15:fd:54:
         16:73:47:f4:fd:54:80:ce:e7:f2:91:f4:42:ce:37:01:8c:7f:
         00:36:45:05:5a:ad:e5:47:ff:31:00:e6:18:f0:81:70:bb:6a:
         57:dc:0a:e5:f8:9b:50:50:ea:30:df:70:b9:b5:ec:f5:56:a7:
         8a:6b:5f:b7:8b:19:a9:86:b4:26:dd:32:12:2a:9f:0e:3d:5a:
         b1:d8:65:75:98:44:37:9a:76:01:a2:e5:0b:21:e9:1d:0e:05:
         cb:81:98:67:d0:90:5c:71:b5:33:0d:b4:cc:d9:b4:9c:85:67:
         6a:80:2f:b7:59:ca:31:90:6a:3a:dd:2d:ca:52:1a:8f:23:b8:
         3f:e8:5b:90:43:59:60:a1:0f:20:55:57:b1:1a:67:9c:7a:d6:
         b8:94:f6:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6yMVW4FZQzF2Zv4nG1gXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMmJhM2FjODcxMzlhZDExNjAyNzc3ZTRkMzVkODE1ODJh
MTkxYmYwHhcNMjYwMTAxMTgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2NiYTgwNjY0NDNjMTNkNDhlOTQxZTdmYTNmNDcyZTMxMzZlYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfjjAWQpTdeQ10ALZToITZQGYEG0
lcbe9NG1tdE+9f1E7NX1fFtHpjVV3yqvODbgmPCWFRMa45nlGMk0whNYI7NgO9Hg
lhvdBteA0Sp4qZ/mJtyoMzDDFa+kJ8f3k+McfVMF5sxUUkFlcOdtWKfcyoDvjYhd
jk140J0TnfRk36c6oA+My+rR+lJNJkL3hNFC8LM/o2b/cze7aslA8JTK9L1P3goO
T8ILLSDwtx80ihGH9g5dS9xcCgdT7BWioycvpoOtH1xdgyT6LuYEnTaNnqXMwZ0R
4t/bgj+/sqE/WkuDz3iyLxfSM72G+v46ZZkL8CgoZsVSsfYoZjUViEjrowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLPLqAZkQ8E9SOlB5/o/Ry4xNuphMB8GA1UdIwQY
MBaAFE4ro6yHE5rRFgJ3fk012BWCoZG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAt
ZGFlOTIyZTE2YmU4LzEvczh1b0JtUkR3VDFJNlVIbi1qOUhMakUyNm1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAtZGFlOTIyZTE2YmU4
LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWl7MA0G
CSqGSIb3DQEBCwUAA4IBAQAe7G9WigwHrAlJ+pxrH7nj6DW6CgGjsT/auc9fy2Ur
EZbcKwta46FApas6cqUuGiTmvOsK1y8JVu9wLI0OuEyYi3XKVJi2fFE5r2cFgCzI
z2x5OOU9gNx3yzX9DXiATXYA2eGJGHElfcQV/VQWc0f0/VSAzufykfRCzjcBjH8A
NkUFWq3lR/8xAOYY8IFwu2pX3Arl+JtQUOow33C5tez1VqeKa1+3ixmphrQm3TIS
Kp8OPVqx2GV1mEQ3mnYBouULIekdDgXLgZhn0JBccbUzDbTM2bSchWdqgC+3Wcox
kGo63S3KUhqPI7g/6FuQQ1lgoQ8gVVexGmeceta4lPbc
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:42:15 2026 by rpki-client