This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa
File:                     ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa (raw, json)
Hash identifier:          6KJzsBOmWkWNjIPw+pN6XcIjmWVNJnyQyPCTB+CKohg=
Subject key identifier:   A2:07:8B:81:F1:4C:93:4B:5F:4E:65:19:7F:D3:1C:EA:14:0C:38:A9
Certificate issuer:       /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial:       019B7C80607FDC3F184004418F067A88BB59
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa
Signing time:             Fri 02 Jan 2026 02:19:06 +0000
ROA not before:           Fri 02 Jan 2026 02:19:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57444
IP address blocks:        188.247.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:60:7f:dc:3f:18:40:04:41:8f:06:7a:88:bb:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
        Validity
            Not Before: Jan  2 02:19:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a2078b81f14c934b5f4e65197fd31cea140c38a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:b1:8a:23:73:60:3a:28:8c:39:3c:5b:38:
                    7c:72:bb:3f:b3:bd:b8:6c:da:55:41:f7:0e:d3:76:
                    8f:1b:ea:10:08:ed:3b:c6:f7:35:a2:8d:ae:71:78:
                    e3:48:a0:77:27:7a:a1:40:0f:12:79:17:82:37:19:
                    d9:1a:46:73:09:94:34:a4:cb:b4:f8:16:bc:76:dd:
                    d0:af:91:73:a8:e4:1b:de:d8:67:fa:0d:34:23:8a:
                    db:ba:57:eb:f3:ff:43:63:ee:d5:40:45:30:67:0b:
                    67:fe:42:16:f7:7c:e2:62:b6:ca:28:5f:29:44:9b:
                    2d:13:d2:e3:f4:36:30:2e:11:14:0f:89:50:83:39:
                    06:27:22:ec:2a:c8:f2:49:18:5a:36:1e:25:c9:1e:
                    4d:5a:da:bb:65:43:13:bc:d1:41:fe:1b:6d:68:85:
                    e2:08:bf:40:11:7b:e8:e8:ab:11:76:ce:ec:a8:39:
                    b8:cd:84:09:3d:75:82:e4:89:0d:2c:ee:98:7b:25:
                    60:be:41:3b:25:a1:04:11:e8:86:bc:f7:cb:22:91:
                    35:1e:66:02:92:16:a0:4b:f3:5b:c4:f4:8d:4d:45:
                    63:ee:93:14:78:96:65:e7:be:df:78:c9:a0:5f:79:
                    95:5b:d4:67:56:36:3c:a9:e1:50:93:da:4e:b9:7a:
                    ad:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:07:8B:81:F1:4C:93:4B:5F:4E:65:19:7F:D3:1C:EA:14:0C:38:A9
            X509v3 Authority Key Identifier:
                keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.247.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:36:e6:71:d7:e1:c3:d4:8a:05:a8:02:ba:10:2b:e1:3a:b9:
         d0:94:50:82:b3:40:dd:b9:1b:4c:39:79:7c:f7:89:6b:0c:c6:
         db:39:ad:b1:59:58:f3:c8:7e:39:01:8e:d2:15:26:04:df:08:
         86:49:39:76:6a:65:98:36:4e:a2:2e:9c:09:68:9e:a2:50:6f:
         4d:9a:de:d7:71:5a:da:51:d2:14:e9:d6:66:89:a8:16:85:ef:
         8c:26:a4:6f:b5:73:a4:21:10:79:b0:c0:6f:7b:a8:8c:3b:38:
         bd:27:69:45:f9:ca:fb:81:ae:f5:58:80:ab:a7:09:eb:56:16:
         f3:14:82:52:03:2d:14:36:c8:7f:75:9c:53:7e:1c:f6:8d:30:
         12:d9:38:5d:fc:78:c0:dc:ee:98:1c:d2:fc:19:4f:d0:41:2c:
         30:1b:50:c4:d9:cd:70:44:2b:21:d7:31:67:08:f6:69:36:b3:
         4b:67:9c:11:7b:08:b2:f4:e5:51:83:53:78:1c:6c:ab:1e:78:
         0a:80:62:30:b7:de:27:53:98:5e:4e:0e:1a:6a:3c:0f:49:af:
         d9:04:82:dc:c7:76:9e:32:b0:bd:62:31:6c:48:33:46:06:46:
         06:ce:e8:99:f1:e8:40:68:15:07:1d:7a:dd:37:50:a3:d0:fe:
         bc:a0:21:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:14:08 2026 by rpki-client