This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/p93Yo32LiS86tKNIIJTFqRsTAc4.roa
File:                     p93Yo32LiS86tKNIIJTFqRsTAc4.roa (raw, json)
Hash identifier:          rKHZxZkQ1DlZz92HShvQ6VMO1LR9WfPRGqIp6geZ5io=
Subject key identifier:   A7:DD:D8:A3:7D:8B:89:2F:3A:B4:A3:48:20:94:C5:A9:1B:13:01:CE
Certificate issuer:       /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial:       019B7AC81EE2293C3B231825F8880741FCCE
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/p93Yo32LiS86tKNIIJTFqRsTAc4.roa
Signing time:             Thu 01 Jan 2026 18:18:14 +0000
ROA not before:           Thu 01 Jan 2026 18:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15935
IP address blocks:        31.130.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:1e:e2:29:3c:3b:23:18:25:f8:88:07:41:fc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
        Validity
            Not Before: Jan  1 18:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a7ddd8a37d8b892f3ab4a3482094c5a91b1301ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fd:a9:39:15:be:b2:43:5b:ad:ae:dc:1d:db:
                    a6:e0:75:d5:c6:81:e5:ee:77:5f:36:01:cd:36:fe:
                    54:25:d5:83:28:be:a5:a9:8a:be:9f:57:75:44:a5:
                    e3:8e:95:d9:67:ac:a6:33:84:b2:7e:76:2e:9e:98:
                    02:67:be:eb:29:ff:40:22:d7:3b:9a:4e:e6:23:00:
                    e4:c8:15:8c:b9:ce:8e:85:9e:61:92:5a:27:e9:4a:
                    77:7e:a7:b9:e4:75:88:04:ea:00:fc:c8:75:8b:4d:
                    db:6b:f2:21:69:05:86:17:5d:bb:4e:f6:06:4b:d7:
                    52:70:8f:ec:23:1b:dc:b1:99:cb:3c:4d:f7:dd:d1:
                    26:6b:e9:41:48:6f:38:eb:4d:2b:e6:66:5b:29:42:
                    29:e7:e1:ad:23:d7:f7:89:bb:2a:eb:ab:3e:d6:47:
                    da:fd:d2:4a:0c:95:ac:0e:49:2e:85:a8:13:d3:63:
                    6f:52:4f:be:28:a7:e8:2f:00:f5:87:ce:64:59:56:
                    6f:85:a7:05:ee:ff:c4:7a:8b:d4:81:29:b0:5b:ce:
                    16:f3:42:8c:f8:c0:84:b7:f2:b3:82:41:bc:67:27:
                    42:db:af:35:3c:8f:aa:46:27:08:b7:aa:28:71:c6:
                    46:fd:b4:26:18:ba:6f:25:ac:b0:8d:27:09:2c:cc:
                    3c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DD:D8:A3:7D:8B:89:2F:3A:B4:A3:48:20:94:C5:A9:1B:13:01:CE
            X509v3 Authority Key Identifier:
                keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/p93Yo32LiS86tKNIIJTFqRsTAc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.130.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:30:be:c1:cc:c3:80:38:10:cb:31:d7:57:88:aa:9f:f8:28:
         cd:c1:2e:94:a1:ee:65:6d:df:4c:8a:4b:03:db:cb:b0:0f:7c:
         81:af:ea:fc:ba:12:47:ed:1d:17:dc:59:77:d1:37:06:24:d3:
         67:db:14:65:1e:e2:00:dc:c5:ce:01:31:bc:ea:c6:95:51:19:
         19:9d:1c:00:0c:9d:d7:18:c5:67:37:cb:77:82:1a:b7:df:27:
         43:a5:b4:2e:62:af:50:a2:67:ed:e7:d8:e6:ff:c4:66:ba:0a:
         67:fd:b5:a3:54:a5:ad:3f:0f:cb:a4:31:4e:a6:40:bc:e7:82:
         5d:1f:09:f9:c0:fd:fd:c2:28:37:0c:85:92:c7:01:bd:69:14:
         80:23:b4:5e:91:cf:67:2d:63:90:69:9f:0e:4b:33:a8:a3:c2:
         46:6e:35:1f:e0:4e:ea:df:1d:a0:7c:4c:a6:26:1a:eb:5a:bc:
         9f:ce:c7:81:92:95:03:d0:6e:51:c5:c3:ed:8d:2a:af:34:de:
         43:a6:04:ff:9e:c6:9c:96:2b:a1:47:7a:98:2b:23:b0:82:cd:
         0b:54:c7:9f:bf:2f:a5:43:ef:bb:04:88:09:f8:ee:7b:25:4b:
         87:96:8a:5f:1d:95:37:26:1e:f7:7e:9f:1c:46:c7:51:02:71:
         db:8b:56:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6yB7iKTw7Ixgl+IgHQfzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI4MTdhMjk4ODJkNDMzYmYxYmI4ZWJjNTliMmZmMjU2
ZTgwM2YwHhcNMjYwMTAxMTgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2RkZDhhMzdkOGI4OTJmM2FiNGEzNDgyMDk0YzVhOTFiMTMwMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP2pORW+skNbra7cHdum4HXVxoHl
7ndfNgHNNv5UJdWDKL6lqYq+n1d1RKXjjpXZZ6ymM4SyfnYunpgCZ77rKf9AItc7
mk7mIwDkyBWMuc6OhZ5hklon6Up3fqe55HWIBOoA/Mh1i03ba/IhaQWGF127TvYG
S9dScI/sIxvcsZnLPE333dEma+lBSG84600r5mZbKUIp5+GtI9f3ibsq66s+1kfa
/dJKDJWsDkkuhagT02NvUk++KKfoLwD1h85kWVZvhacF7v/EeovUgSmwW84W80KM
+MCEt/KzgkG8ZydC2681PI+qRicIt6ooccZG/bQmGLpvJaywjScJLMw8bwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKfd2KN9i4kvOrSjSCCUxakbEwHOMB8GA1UdIwQY
MBaAFBlCgXopiC1DO/G7jrxZsv8lboA/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VLQmVpbUlMVU03OGJ1T3ZGbXlfeVZ1Z0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81MzAwNjQtMjQ4Mi00NWJlLWJmZmUt
ZmRkZTU4YWIyOWY5LzEvcDkzWW8zMkxpUzg2dEtOSUlKVEZxUnNUQWM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81MzAwNjQtMjQ4Mi00NWJlLWJmZmUtZmRkZTU4YWIyOWY5
LzEvR1VLQmVpbUlMVU03OGJ1T3ZGbXlfeVZ1Z0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH4KoMA0G
CSqGSIb3DQEBCwUAA4IBAQCnML7BzMOAOBDLMddXiKqf+CjNwS6Uoe5lbd9MiksD
28uwD3yBr+r8uhJH7R0X3Fl30TcGJNNn2xRlHuIA3MXOATG86saVURkZnRwADJ3X
GMVnN8t3ghq33ydDpbQuYq9Qomft59jm/8Rmugpn/bWjVKWtPw/LpDFOpkC854Jd
Hwn5wP39wig3DIWSxwG9aRSAI7Rekc9nLWOQaZ8OSzOoo8JGbjUf4E7q3x2gfEym
JhrrWryfzseBkpUD0G5RxcPtjSqvNN5DpgT/nsacliuhR3qYKyOwgs0LVMefvy+l
Q++7BIgJ+O57JUuHlopfHZU3Jh73fp8cRsdRAnHbi1Ya
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:32:52 2026 by rpki-client