This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/RRmiScBLvwsw5z8G2LH6SUClMoE.roa
File:                     RRmiScBLvwsw5z8G2LH6SUClMoE.roa (raw, json)
Hash identifier:          FLy+pNxCEJyb0zDZveiKUlM9CQ9kZZJWzymxSYEox+c=
Subject key identifier:   45:19:A2:49:C0:4B:BF:0B:30:E7:3F:06:D8:B1:FA:49:40:A5:32:81
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B77590E7C2B6F55BE9B42DA475D243A74
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/RRmiScBLvwsw5z8G2LH6SUClMoE.roa
Signing time:             Thu 01 Jan 2026 02:18:03 +0000
ROA not before:           Thu 01 Jan 2026 02:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207555
IP address blocks:        188.114.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:0e:7c:2b:6f:55:be:9b:42:da:47:5d:24:3a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4519a249c04bbf0b30e73f06d8b1fa4940a53281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1b:d6:8d:57:8d:5f:50:47:70:58:a8:0a:65:
                    3c:54:a2:9b:ff:50:87:eb:34:5b:70:eb:8a:74:ca:
                    2b:5d:5a:42:3e:d8:6b:c0:26:db:ee:ca:98:61:c8:
                    9d:bc:c6:67:4d:96:d6:d6:5d:47:cc:fe:e9:fa:45:
                    9d:91:81:2d:da:c8:3a:dd:35:02:4d:df:68:25:ad:
                    ca:d9:a3:61:a8:ca:06:61:ea:16:26:9a:50:9a:e1:
                    d1:41:e5:af:db:fd:22:c5:e0:86:94:2b:62:fd:f0:
                    ca:c5:4a:d1:5f:a0:e5:cd:f7:ea:8a:2b:78:fa:f5:
                    72:5f:47:98:ef:de:aa:27:d4:03:ba:4e:64:a1:fb:
                    7e:37:cc:08:6a:11:2a:b1:d4:71:b3:c5:cb:5b:ec:
                    1c:56:7a:e3:4d:a8:a3:8f:31:04:fd:d3:b7:ac:c3:
                    3a:a7:2d:3d:ca:5b:74:f1:1b:f5:c1:c1:07:36:49:
                    6c:09:86:02:ef:5c:36:26:0a:be:b2:6f:c1:36:ee:
                    6a:2d:fa:b7:39:5a:8b:94:a7:9b:80:1b:f4:83:4a:
                    ea:c9:a3:14:e6:72:c4:40:d8:7a:12:32:14:1d:f9:
                    cb:6f:d2:4d:e7:d6:30:aa:3f:fd:d8:e2:77:83:05:
                    6b:c3:63:d7:d7:15:a3:3a:08:42:b8:b2:0c:8e:d5:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:19:A2:49:C0:4B:BF:0B:30:E7:3F:06:D8:B1:FA:49:40:A5:32:81
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/RRmiScBLvwsw5z8G2LH6SUClMoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.114.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:99:5f:8a:10:4f:06:0f:d7:33:03:96:49:eb:50:fc:95:13:
         da:d0:68:0a:ba:0c:4c:f8:01:1b:39:83:08:a1:27:c4:8a:9b:
         5d:55:11:15:3c:87:51:39:0c:46:46:f5:65:90:02:f5:25:27:
         45:35:68:75:66:3a:3f:35:ef:47:3e:9d:69:d9:98:aa:6d:d4:
         22:be:de:b8:25:af:46:33:3d:9a:9b:6b:ed:41:79:47:6d:b3:
         44:34:ba:6b:b7:fb:cc:b9:f0:3d:69:f4:e0:1f:fe:b4:60:6c:
         63:c4:8b:b4:54:a0:67:42:25:c9:b3:c3:cb:78:ab:6b:0a:f5:
         70:fe:ff:ea:50:3a:26:9a:38:29:15:53:7b:58:4f:8d:2c:57:
         52:ae:59:00:74:7a:86:50:0c:ef:d7:13:a0:f0:15:22:38:15:
         86:cc:81:a3:7f:36:33:04:2e:32:eb:e3:87:e2:8f:02:96:2a:
         e1:95:97:40:7b:78:94:74:74:2b:c9:3e:a9:8d:e8:bd:91:60:
         fc:2b:bd:d2:fe:ae:83:f8:a2:3b:ae:a3:96:a1:f4:ee:cc:ca:
         47:ae:ca:ef:f4:c2:8e:2e:36:5d:fe:11:f8:b2:63:18:dd:97:
         a8:50:b7:3f:37:5b:2c:b1:cc:31:ce:ca:7b:a3:83:2b:9d:fc:
         9d:9c:c3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:30:07 2026 by rpki-client