This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/R4EyQfq47lKcSi7lGsbXI4F8tPI.roa
File:                     R4EyQfq47lKcSi7lGsbXI4F8tPI.roa (raw, json)
Hash identifier:          tdmT4SygVfTwG2tATcY87tl2PKsMrLDS/k3VojLg3Q0=
Subject key identifier:   47:81:32:41:FA:B8:EE:52:9C:4A:2E:E5:1A:C6:D7:23:81:7C:B4:F2
Certificate issuer:       /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial:       019B7EA6BA4F1BD3494B91681E8EDFE87DC8
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/R4EyQfq47lKcSi7lGsbXI4F8tPI.roa
Signing time:             Fri 02 Jan 2026 12:20:14 +0000
ROA not before:           Fri 02 Jan 2026 12:20:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8839
IP address blocks:        88.151.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:ba:4f:1b:d3:49:4b:91:68:1e:8e:df:e8:7d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
        Validity
            Not Before: Jan  2 12:20:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=47813241fab8ee529c4a2ee51ac6d723817cb4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0e:0e:19:6f:fa:42:e1:57:9a:ac:4e:d5:a7:
                    b9:e0:a2:54:70:81:19:d0:e1:64:17:e9:1f:de:3b:
                    d3:38:80:04:93:87:d9:6f:15:ef:c4:02:a4:45:05:
                    96:9d:c9:de:b8:fd:22:a7:02:04:6c:6a:d5:c0:bd:
                    e0:5d:ad:52:c9:70:db:2e:62:e6:47:19:e1:8e:65:
                    c9:40:15:a6:7a:7f:8a:9d:3d:21:1d:3c:79:12:b7:
                    23:6a:f2:11:dd:4d:91:4a:df:c8:3a:8c:08:08:70:
                    60:f7:36:4d:82:00:ee:48:65:4c:51:ea:dc:99:85:
                    9c:b3:14:93:17:8d:c9:5f:c3:9e:1b:4d:5d:5c:45:
                    e6:96:0e:4a:0c:0c:60:fe:37:e1:9a:34:bc:16:e6:
                    26:7b:c2:0e:5e:6a:1d:4a:0f:1a:b8:d0:fb:cd:04:
                    59:5e:b0:79:9c:bf:34:66:6e:1c:a8:5e:0c:23:32:
                    67:48:f0:ea:74:59:e9:41:62:0d:3e:38:d1:d9:1a:
                    55:97:b5:12:c3:df:38:30:e6:74:fb:de:31:fc:d4:
                    04:22:20:c3:e4:f7:70:3c:15:9f:1f:b1:9b:89:0b:
                    cb:9c:4c:9e:4c:16:41:3d:2b:03:94:33:37:77:39:
                    f8:0a:dd:25:2f:94:70:18:11:97:30:72:ca:77:1a:
                    65:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:81:32:41:FA:B8:EE:52:9C:4A:2E:E5:1A:C6:D7:23:81:7C:B4:F2
            X509v3 Authority Key Identifier:
                keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/R4EyQfq47lKcSi7lGsbXI4F8tPI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.151.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:1a:81:66:ed:d8:24:9c:fc:21:2e:d7:e9:c2:ec:e4:a9:45:
         8f:0a:45:30:2f:78:8d:00:ca:35:ca:a5:dd:95:22:b3:10:a5:
         b0:c6:a9:ad:6b:fe:39:62:25:1d:58:10:f9:d6:77:b0:22:8c:
         a0:ff:16:24:37:c1:d7:18:03:30:e6:80:bb:5a:17:2a:f7:08:
         63:66:85:4a:b8:b5:94:3c:11:ad:df:26:16:c4:c2:96:85:8e:
         b3:85:87:fb:29:8f:2f:3b:c1:c5:b6:42:ad:f1:f4:86:2d:9e:
         44:46:55:f2:dc:5f:04:bb:97:e2:71:ad:17:09:4e:da:ef:b6:
         fe:f7:f8:62:d7:ba:6b:7f:38:d0:b4:67:b6:16:11:ef:af:b8:
         31:e7:bb:33:4c:ec:5e:29:84:15:93:c3:e5:b8:7a:27:7d:56:
         67:31:56:eb:b4:11:98:e6:be:31:3a:9c:80:6e:8c:07:db:49:
         06:31:4d:84:41:b8:82:85:4b:1f:ca:42:12:69:bd:4a:2b:c5:
         0b:a5:eb:92:65:4d:6b:00:e7:9c:9f:04:e4:42:75:02:c4:6f:
         a0:0e:32:45:89:27:26:68:07:0a:2e:8f:be:30:ae:70:86:0b:
         68:10:75:4c:34:75:2e:f9:d6:4c:9b:0b:31:cb:13:80:34:4c:
         12:7b:5d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:50 2026 by rpki-client