This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/nle7H145kWARm3i3WSQ0jxUoyxQ.roa
File:                     nle7H145kWARm3i3WSQ0jxUoyxQ.roa (raw, json)
Hash identifier:          zhsBwF/9ucNK3MWhQYCLkOEtb7B4dCQtxNnhlmW24Jc=
Subject key identifier:   9E:57:BB:1F:5E:39:91:60:11:9B:78:B7:59:24:34:8F:15:28:CB:14
Certificate issuer:       /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial:       019B797E5EC0B9F72A394022E119ED674269
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/nle7H145kWARm3i3WSQ0jxUoyxQ.roa
Signing time:             Thu 01 Jan 2026 12:18:03 +0000
ROA not before:           Thu 01 Jan 2026 12:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3303
IP address blocks:        193.247.83.0/24 maxlen: 24
                          193.247.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:5e:c0:b9:f7:2a:39:40:22:e1:19:ed:67:42:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
        Validity
            Not Before: Jan  1 12:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9e57bb1f5e399160119b78b75924348f1528cb14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:a3:20:38:2f:b0:23:98:7f:f2:6f:c3:d1:
                    8f:2c:07:22:fa:f2:e8:7c:34:91:96:de:d0:c8:13:
                    a7:10:d2:1c:46:ea:3b:f5:b7:75:7e:66:0b:d1:8f:
                    50:42:b0:4a:62:e2:66:8e:94:52:be:34:25:a3:39:
                    ba:d7:08:70:8b:18:1c:a1:9b:7e:82:71:d3:8d:f5:
                    24:2c:45:9e:d6:24:3e:4d:6f:b4:4d:58:16:55:f3:
                    69:5c:1e:67:86:85:11:12:53:60:df:02:f0:f5:1c:
                    8c:00:3d:db:f7:a3:75:9b:ce:aa:5b:51:fb:71:1e:
                    65:96:98:31:5d:6e:70:02:55:a2:1e:7f:19:dc:50:
                    63:4d:97:ce:9e:dd:52:7f:d6:b7:bd:0b:4d:32:ff:
                    40:53:b5:cc:de:7f:a6:82:30:55:53:14:6f:2c:27:
                    ca:01:98:69:f4:14:87:2c:c3:af:65:1f:f6:ed:69:
                    89:2e:24:1e:f9:47:c4:8b:06:25:c9:2d:6d:12:f9:
                    97:3d:b7:59:8d:fd:be:5e:6f:87:ff:9c:48:87:85:
                    5a:82:25:d8:f5:9d:d7:77:01:6d:a1:11:c2:01:9f:
                    ba:e3:6b:97:6d:f6:0b:32:2f:0e:d9:85:90:54:74:
                    9d:86:94:e9:10:e3:9c:12:3d:08:bf:55:06:72:db:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:57:BB:1F:5E:39:91:60:11:9B:78:B7:59:24:34:8F:15:28:CB:14
            X509v3 Authority Key Identifier:
                keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/nle7H145kWARm3i3WSQ0jxUoyxQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.247.83.0-193.247.84.255

    Signature Algorithm: sha256WithRSAEncryption
         29:98:6e:4b:ef:14:5a:b5:cc:ca:24:d0:4a:9e:d9:91:00:fe:
         e1:69:aa:c4:9e:7e:09:7b:94:a9:5b:41:b1:ea:ac:a5:80:21:
         02:35:dd:05:06:18:6b:97:9d:28:75:d4:2e:d6:05:2f:7d:bc:
         11:70:3b:7f:2b:df:24:f5:77:b6:ff:4f:50:84:2e:7c:15:ab:
         dc:2f:1c:91:0c:16:2c:1e:36:2a:68:39:7e:28:82:aa:58:61:
         55:7c:0c:54:ed:f4:83:bd:fa:fd:4d:44:9a:a3:c3:80:35:91:
         ee:1b:d6:79:bc:27:df:11:3c:09:91:f8:f7:cb:53:23:96:53:
         cf:52:61:4d:c2:70:b6:77:a5:59:37:71:fc:7a:41:cc:7e:43:
         e5:8b:36:be:75:8c:6c:87:f5:c6:f2:bd:10:2b:93:ca:7b:b3:
         b0:80:c1:4c:85:9d:ef:35:ca:80:ae:a9:97:ec:b7:21:59:77:
         46:1f:9b:31:dc:d3:3d:82:1a:7a:6d:16:f6:50:b9:68:36:f0:
         a9:87:88:71:33:a9:a1:40:62:14:cb:57:53:e0:6d:e6:c3:1f:
         73:ff:c5:39:70:da:08:e1:8b:04:19:a8:52:ab:dc:c8:63:a1:
         95:fd:22:52:e9:29:dc:f7:cc:12:37:81:88:b5:f8:18:75:65:
         e4:db:e0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:22:29 2026 by rpki-client