This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/utZEsgYETwVjffebw8WvuaSD38s.roa
File:                     utZEsgYETwVjffebw8WvuaSD38s.roa (raw, json)
Hash identifier:          I3ZwGQt/WZxKXFBa6fUjOUHzcIDeiRRIZPhVhRO/rUo=
Subject key identifier:   BA:D6:44:B2:06:04:4F:05:63:7D:F7:9B:C3:C5:AF:B9:A4:83:DF:CB
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F84CA37D11E3B638CF0E8CC586551B8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/utZEsgYETwVjffebw8WvuaSD38s.roa
Signing time:             Fri 02 Jan 2026 16:22:47 +0000
ROA not before:           Fri 02 Jan 2026 16:22:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57562
IP address blocks:        93.171.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:ca:37:d1:1e:3b:63:8c:f0:e8:cc:58:65:51:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:22:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bad644b206044f05637df79bc3c5afb9a483dfcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:26:b1:d1:2a:09:e3:d3:33:c2:f3:6d:8f:
                    16:96:53:60:ac:b4:6d:86:df:17:f4:cc:7a:08:d6:
                    2e:e7:25:e1:c9:97:ca:61:58:01:35:b3:0a:8a:9a:
                    c7:94:68:ec:d5:16:21:a5:f8:e0:fa:e2:aa:f7:6b:
                    43:8d:9c:04:b2:a1:80:01:e3:b8:72:f1:d0:fd:9b:
                    49:0e:b9:dd:30:b3:fa:18:cc:41:16:15:c0:15:02:
                    45:0c:cf:73:dd:42:36:aa:3c:ef:03:41:e3:bd:67:
                    d6:38:fb:a4:8b:77:fc:62:31:f9:d9:71:be:43:1d:
                    1d:89:9a:6a:96:5a:44:be:62:5e:85:ff:e8:f1:62:
                    3f:62:a6:4a:0c:d9:73:fe:9b:4f:d2:8c:d8:cf:bb:
                    93:c4:d6:24:dd:55:0d:b1:2e:d8:35:8b:c4:da:ca:
                    4f:60:f1:ac:82:c3:ea:08:d8:9c:67:64:a8:df:96:
                    fe:8e:94:10:be:f1:9f:27:46:75:10:cc:7e:5c:cd:
                    11:bd:88:a0:06:e4:f2:1f:44:01:50:5a:cb:d5:45:
                    73:f1:f9:55:5b:8c:d1:83:f8:1c:52:74:18:bb:c5:
                    68:cf:66:14:de:e9:42:7e:1a:da:74:16:b0:bb:89:
                    42:a6:ac:82:76:2c:0f:c1:c4:e7:29:49:41:68:a3:
                    47:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D6:44:B2:06:04:4F:05:63:7D:F7:9B:C3:C5:AF:B9:A4:83:DF:CB
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/utZEsgYETwVjffebw8WvuaSD38s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:1d:78:9b:c4:30:0d:c5:8b:9f:70:7a:ef:a0:b7:1a:77:0d:
         8c:62:c3:5a:49:e0:9a:f7:c9:e3:39:0b:f6:8d:4a:69:60:46:
         0d:44:2e:f8:aa:bb:24:e6:92:df:19:c0:7e:25:9f:39:9c:18:
         2c:08:ec:aa:ed:5f:61:38:37:46:07:fd:a4:26:aa:ec:8c:44:
         eb:ba:63:1b:11:29:f8:38:1f:56:fc:9c:94:28:85:83:63:dc:
         7d:2c:f5:fe:11:81:8b:43:09:5e:c8:87:a3:9d:6a:1f:cd:76:
         27:ae:c8:bd:f6:af:eb:f9:3f:41:86:d8:aa:59:1c:c7:30:37:
         73:a1:3b:88:3e:92:f4:eb:28:2e:9e:75:39:21:cc:2c:02:ce:
         c0:b4:ec:ea:27:02:95:a9:a0:be:6f:ff:32:9f:83:13:a3:4b:
         3a:2d:d3:e4:c1:cf:dd:e0:64:97:d2:c1:36:fd:84:21:49:bb:
         56:3b:47:52:c0:f4:4b:fe:e7:b0:c0:83:ee:3d:c3:dd:d7:fc:
         15:c1:4a:c5:0e:55:4f:0b:2a:5c:82:b9:fa:e6:c6:8c:29:bc:
         c5:8e:3f:06:dd:62:eb:39:52:79:cf:91:6c:60:a2:30:48:a5:
         60:bc:cd:39:96:ce:b2:03:61:80:80:42:e2:c5:16:5c:2b:3a:
         31:32:06:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:16:47 2026 by rpki-client