This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/I4mggl4uSAQvDqAUnGUEEhPygjw.roa
File:                     I4mggl4uSAQvDqAUnGUEEhPygjw.roa (raw, json)
Hash identifier:          +EARjNxSw+0e6kZAvMKbSJqIzkguh2kgrCJ+PF8TwqE=
Subject key identifier:   23:89:A0:82:5E:2E:48:04:2F:0E:A0:14:9C:65:04:12:13:F2:82:3C
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F84C8F9B477C5098E6F805D397CC4C2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/I4mggl4uSAQvDqAUnGUEEhPygjw.roa
Signing time:             Fri 02 Jan 2026 16:22:47 +0000
ROA not before:           Fri 02 Jan 2026 16:22:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57270
IP address blocks:        93.171.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:c8:f9:b4:77:c5:09:8e:6f:80:5d:39:7c:c4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:22:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2389a0825e2e48042f0ea0149c65041213f2823c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:41:70:0a:5e:a4:f8:b4:5a:8c:b9:64:31:f1:
                    87:95:a6:b4:77:f4:f1:74:ac:d4:60:f6:8d:04:dd:
                    21:29:43:37:e9:0c:5c:b4:ca:3a:95:30:5f:d5:20:
                    97:78:33:22:a4:e2:c1:8c:51:9d:b2:59:e6:9a:e6:
                    ac:7d:eb:93:aa:06:c8:1a:62:a0:87:68:49:17:5b:
                    b2:02:df:da:43:0b:9d:28:75:4f:80:ae:7a:3b:9d:
                    6d:ec:1d:7c:e5:21:ce:ac:b1:3d:17:7f:4e:88:49:
                    de:42:a1:82:a4:0b:08:90:c6:54:63:f4:8b:b1:6d:
                    25:ab:d6:0d:dd:12:ba:b5:74:7b:e0:7b:ed:df:3e:
                    d0:03:a9:e0:4a:4c:f8:af:16:27:5a:a7:72:ee:3c:
                    7b:5d:36:ac:0e:a7:9e:4b:a2:da:c2:33:09:e7:d2:
                    e7:41:dc:5d:7f:a0:23:77:94:7e:c5:17:1e:24:97:
                    18:e8:d7:a7:95:07:99:bd:13:ba:ff:47:09:47:77:
                    1d:3b:c6:b1:11:6a:d6:50:a8:2e:bf:8e:cd:f2:e5:
                    a4:0b:d6:74:7d:7a:26:b5:bf:2c:a2:c3:e5:4a:f2:
                    cf:2a:17:74:84:09:68:fd:dc:7d:d1:90:9b:68:f4:
                    15:77:59:d7:bc:0f:e0:88:c2:86:24:af:db:4a:0d:
                    b8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:89:A0:82:5E:2E:48:04:2F:0E:A0:14:9C:65:04:12:13:F2:82:3C
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/I4mggl4uSAQvDqAUnGUEEhPygjw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:26:11:ba:35:da:74:c4:9a:c5:93:e7:75:95:89:21:be:8a:
         bf:65:33:ec:63:70:c7:f2:34:25:cb:50:6b:a6:7b:1e:34:8d:
         e1:27:c5:08:2a:e6:9f:7a:2a:40:47:5a:39:68:33:a3:7d:ee:
         eb:b0:a7:1a:f3:38:da:77:54:03:bf:e1:77:bf:dc:41:4f:c8:
         78:07:5f:41:31:2f:fc:f6:29:2d:2d:cc:6d:6a:41:3f:1f:e4:
         35:71:a4:ad:ae:f8:50:e5:e2:88:44:1b:8f:6e:0c:61:30:16:
         6e:eb:84:13:42:ce:eb:2c:2d:cd:fe:eb:9f:24:cf:bd:00:37:
         9b:4d:40:a7:a5:31:69:f2:1a:24:ac:95:e4:55:a0:07:ac:e7:
         0c:79:35:32:eb:ba:57:ff:fa:f7:07:88:39:f4:29:8f:a0:41:
         3e:08:0a:4d:f8:6a:28:d8:6e:a0:97:6b:75:7b:ae:29:f6:04:
         55:db:d0:2e:ed:5f:51:fd:20:64:d6:58:82:bd:20:cf:13:fb:
         18:b1:19:9c:92:5d:4a:59:0d:4e:e3:08:d0:37:f1:3d:3b:40:
         a3:ab:c4:05:90:88:a8:97:c6:51:95:e6:52:08:47:e5:a4:aa:
         88:9f:57:36:30:d8:85:50:fe:65:d3:85:4a:65:5b:cb:8a:17:
         2e:cf:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:46:22 2026 by rpki-client