This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/bH0F2mV_dRL1r12H9Kv5329qGfI.roa
File:                     bH0F2mV_dRL1r12H9Kv5329qGfI.roa (raw, json)
Hash identifier:          zDXdXDEtcJePiYih7GNQU0Vm0lUa6Wpo3l7juYolzJE=
Subject key identifier:   6C:7D:05:DA:65:7F:75:12:F5:AF:5D:87:F4:AB:F9:DF:6F:6A:19:F2
Certificate issuer:       /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial:       019B7CEE466DD7E4B624EA418D55558807DE
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/bH0F2mV_dRL1r12H9Kv5329qGfI.roa
Signing time:             Fri 02 Jan 2026 04:19:08 +0000
ROA not before:           Fri 02 Jan 2026 04:19:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20857
IP address blocks:        193.111.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:46:6d:d7:e4:b6:24:ea:41:8d:55:55:88:07:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
        Validity
            Not Before: Jan  2 04:19:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6c7d05da657f7512f5af5d87f4abf9df6f6a19f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:a0:14:f1:6b:5b:39:8c:7c:96:59:21:04:
                    66:0c:55:19:0e:a6:14:12:c6:30:23:c6:66:06:7b:
                    fd:51:7e:5f:6d:25:5b:f5:00:b4:d8:1a:8b:fd:12:
                    e1:8a:5c:8f:73:02:1f:5b:6c:87:0d:71:64:56:21:
                    99:97:3a:5d:0c:45:a2:4c:ba:d1:22:8c:9c:5a:67:
                    da:35:57:ce:92:3d:68:9a:17:12:b3:46:6d:79:f7:
                    2a:65:72:bf:0f:db:8b:b7:9a:a7:c3:c1:3e:10:da:
                    6c:90:57:ca:7e:70:ff:23:e4:35:80:53:c2:db:25:
                    82:9c:5c:97:99:f8:d9:04:7d:b3:09:7a:b3:3e:a0:
                    72:a3:8b:4b:fb:59:3f:8b:3e:5f:b3:b6:cc:c9:6e:
                    08:83:d0:cc:a0:43:70:04:fd:1d:bb:be:ce:fc:7a:
                    3d:f8:36:c3:4f:1b:c1:87:02:3e:ae:c4:f9:e6:3f:
                    6a:e7:07:e3:80:f0:6e:cb:9a:48:aa:19:0c:f8:26:
                    d7:2b:82:32:6a:f3:54:d6:a8:73:ef:22:1c:a4:7b:
                    28:8e:47:d6:1d:3c:29:bf:49:9a:7f:d3:ae:d1:6d:
                    4a:ff:4c:68:25:c1:ec:77:c5:9b:9f:c1:d2:f4:65:
                    0f:22:cd:f5:f0:90:30:96:d6:7e:bc:29:92:b7:6b:
                    a7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7D:05:DA:65:7F:75:12:F5:AF:5D:87:F4:AB:F9:DF:6F:6A:19:F2
            X509v3 Authority Key Identifier:
                keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/bH0F2mV_dRL1r12H9Kv5329qGfI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:77:85:af:56:13:3c:8c:c1:ff:8b:2e:81:fe:f8:bb:e1:77:
         d8:78:ba:88:55:00:9a:ab:e7:fc:e7:a5:37:3b:a3:e0:3d:b7:
         ae:86:0b:2b:33:11:34:7e:a3:fd:95:2d:4d:f7:d2:c0:e5:2e:
         6b:fc:af:ad:41:7e:5a:6e:9e:70:9d:2f:82:d1:28:03:f3:e5:
         f2:bd:03:f2:69:a4:ec:8b:83:c5:9d:fd:e6:43:10:61:72:51:
         e6:c5:fb:2a:1e:f9:ef:a4:71:1d:82:51:d4:2a:85:82:16:5d:
         1a:8a:ab:ff:0d:48:6a:f5:92:47:70:a9:fc:fe:af:5b:05:97:
         e9:33:71:c3:2a:a8:84:2d:44:4d:30:8b:10:9e:93:d4:cc:54:
         69:0f:68:81:7d:53:69:49:66:7b:20:8e:dc:77:65:10:ff:ef:
         e8:ad:8e:48:76:86:57:a1:dd:1f:d2:4f:d0:a5:18:88:d0:d0:
         91:10:3d:85:d6:c7:bd:1b:d7:e4:ff:92:6c:07:60:f4:75:49:
         9f:e1:86:77:15:5e:fc:0e:a4:ba:7a:24:71:28:29:a9:82:0c:
         54:53:5b:2c:de:cf:5d:57:e4:2d:a3:f1:17:1a:d7:c0:97:21:
         be:19:8e:08:dc:e8:60:68:e0:cc:64:c3:61:ce:e3:0f:f0:f9:
         53:2f:85:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:39:35 2026 by rpki-client