This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/Sr6zqiJ99FeqwYQ28f19iLqoqDg.roa
File:                     Sr6zqiJ99FeqwYQ28f19iLqoqDg.roa (raw, json)
Hash identifier:          TL3BARSlFoDZ5ZNhUOEZiPZ9fIVbuOQ2POjRAByuFjI=
Subject key identifier:   4A:BE:B3:AA:22:7D:F4:57:AA:C1:84:36:F1:FD:7D:88:BA:A8:A8:38
Certificate issuer:       /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial:       019B7A5A835C43C344B225A46AED112FD26F
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/Sr6zqiJ99FeqwYQ28f19iLqoqDg.roa
Signing time:             Thu 01 Jan 2026 16:18:30 +0000
ROA not before:           Thu 01 Jan 2026 16:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207199
IP address blocks:        193.8.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:83:5c:43:c3:44:b2:25:a4:6a:ed:11:2f:d2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
        Validity
            Not Before: Jan  1 16:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4abeb3aa227df457aac18436f1fd7d88baa8a838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:0f:f6:74:9c:60:6d:84:96:5d:8f:97:0c:
                    68:33:14:20:86:95:27:fc:89:1f:c3:44:3c:f0:dc:
                    21:09:ba:ec:eb:5b:55:2b:ae:c9:06:35:39:85:f8:
                    55:b7:50:f6:6a:0e:8d:49:d7:29:6a:ce:bd:80:3d:
                    f4:9c:08:3d:f0:b5:44:2c:24:e3:c6:ed:2f:35:7f:
                    ff:94:b9:d8:47:99:f3:55:8b:91:3f:78:7e:6b:93:
                    5c:71:92:8c:11:33:cf:5c:1e:17:db:01:97:a2:94:
                    71:6f:f4:82:28:e5:d2:55:5c:dc:58:08:cb:f8:56:
                    02:40:1b:ce:3c:33:0f:7a:5d:1c:12:bb:12:95:eb:
                    8f:cf:f0:c4:d3:18:73:76:14:4c:98:d4:de:34:1e:
                    8e:74:b9:7e:16:60:a3:b9:c2:a3:19:c2:db:76:7d:
                    55:9d:a0:09:26:88:fc:d1:10:9e:0d:fc:0e:e0:a5:
                    14:c6:1a:8d:59:70:d3:e3:da:74:af:6f:49:cf:0f:
                    17:b6:d3:78:6e:aa:4e:ba:a4:9b:81:d0:24:ff:83:
                    39:7f:b4:cf:c8:82:38:10:d0:1d:6e:b1:44:65:cd:
                    91:ea:60:26:b2:3f:af:75:8f:ff:a0:ca:2d:ee:55:
                    1a:01:ed:69:19:f3:ab:19:93:c8:d9:be:77:6b:35:
                    5b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BE:B3:AA:22:7D:F4:57:AA:C1:84:36:F1:FD:7D:88:BA:A8:A8:38
            X509v3 Authority Key Identifier:
                keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/Sr6zqiJ99FeqwYQ28f19iLqoqDg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:34:8a:6e:34:56:16:cc:13:03:97:77:10:11:a8:7d:9d:1e:
         88:df:e3:a8:cf:02:1e:b1:74:d2:fd:2c:d6:d8:3e:be:34:3e:
         0a:ef:84:b6:79:88:56:f1:9f:5a:5d:a6:6d:a9:d6:45:04:24:
         27:e3:63:23:4c:9d:a7:7a:e3:7d:a0:d6:fb:dd:0b:c1:89:9f:
         42:bc:c7:ad:2b:dd:66:7b:f0:e8:97:df:03:c6:81:26:2b:4c:
         b6:16:d9:56:bb:72:16:0e:83:b4:73:ae:6d:c7:22:59:40:98:
         c7:b3:ea:5f:9b:1e:db:bf:08:52:7c:52:20:c6:71:b9:6c:79:
         b1:9a:49:1c:b5:44:d5:4f:9f:b9:f1:05:5e:86:bf:13:e7:ef:
         1f:89:00:74:3b:ea:f0:dc:4e:c7:b6:4c:79:3c:7d:63:84:ba:
         34:ae:ad:4b:86:92:39:09:c4:a1:e3:15:7c:a2:fc:60:98:97:
         e7:bf:7d:8b:7d:0a:ae:af:b9:61:be:d6:e8:de:94:50:23:b3:
         5c:2a:18:18:f8:cd:b3:d6:07:83:d1:b5:a1:0f:d2:aa:41:e8:
         6f:1b:e6:bf:47:a7:7c:e1:ac:17:ef:8a:bc:5d:22:60:f1:6d:
         26:2c:fa:f2:bd:f3:ef:03:d4:cb:64:9d:84:c0:61:ad:29:a4:
         d1:d5:51:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:17:14 2026 by rpki-client