This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/B_yoM3Jy8N0DdJQtpgjme97ROik.roa
File:                     B_yoM3Jy8N0DdJQtpgjme97ROik.roa (raw, json)
Hash identifier:          xw69BNhn5/2sAEBqf+HIAJ2XYT2OBNlWA7mFr5PTYFI=
Subject key identifier:   07:FC:A8:33:72:72:F0:DD:03:74:94:2D:A6:08:E6:7B:DE:D1:3A:29
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       019B7E371E33ED93E7ACD596FD7291728827
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/B_yoM3Jy8N0DdJQtpgjme97ROik.roa
Signing time:             Fri 02 Jan 2026 10:18:19 +0000
ROA not before:           Fri 02 Jan 2026 10:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61324
IP address blocks:        93.179.121.0/24 maxlen: 24
                          95.85.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:1e:33:ed:93:e7:ac:d5:96:fd:72:91:72:88:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jan  2 10:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=07fca8337272f0dd0374942da608e67bded13a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:83:bf:9d:d0:cb:82:83:e9:56:12:64:9a:
                    62:a5:aa:1a:c0:7f:9c:49:4b:bf:b4:f3:7c:d9:f2:
                    99:21:f7:95:c9:b7:06:17:86:f4:96:99:06:22:86:
                    fc:58:01:aa:4e:30:aa:32:28:d9:44:f6:57:b1:2d:
                    e6:79:b4:c7:9f:64:e5:bd:42:48:5c:d6:94:60:c5:
                    fd:19:4a:27:be:71:1f:44:15:9b:c5:cc:70:83:26:
                    56:ec:94:4a:0c:1b:e8:2b:4f:1f:a4:c9:19:be:98:
                    9d:5c:d7:e9:36:61:c2:7e:ee:06:e4:4f:69:79:0f:
                    cc:40:6c:bf:58:53:df:1a:39:8f:5c:2f:f7:0d:b2:
                    9a:0f:e7:5b:2a:da:dd:91:97:bd:a8:fc:23:6e:26:
                    97:a1:37:33:6a:2e:48:78:31:9c:3f:3b:ec:94:9b:
                    a2:e5:1b:73:38:56:83:25:10:f9:bf:9f:2c:55:a9:
                    46:a6:8f:85:64:49:05:03:6c:87:77:22:ac:2c:f9:
                    cb:ba:49:33:54:c4:87:63:9e:f5:67:f4:7e:00:f9:
                    4f:7f:70:38:95:83:64:39:5f:f2:c0:6b:02:84:c6:
                    30:06:08:f7:57:8b:53:6f:96:d9:02:61:f1:a8:f6:
                    96:b3:c8:15:dc:e1:c4:f7:33:c8:12:26:ef:a1:cb:
                    06:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FC:A8:33:72:72:F0:DD:03:74:94:2D:A6:08:E6:7B:DE:D1:3A:29
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/B_yoM3Jy8N0DdJQtpgjme97ROik.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.121.0/24
                  95.85.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:74:8d:c3:80:ba:05:62:31:09:18:fc:b9:2a:8f:5a:12:c7:
         55:5b:2e:02:ac:e0:cf:97:11:76:88:ef:1f:50:f1:6c:00:7d:
         0d:a8:26:dc:e0:e9:03:73:11:dd:5a:bc:03:f8:e0:9c:85:31:
         32:d2:3b:7c:39:8f:ba:25:b9:5c:7a:a6:02:4c:3d:d0:c1:af:
         33:80:34:f9:de:ae:16:0c:60:fe:20:f9:23:bb:13:ba:a5:d1:
         d2:8e:e9:15:6d:a1:f3:e3:c5:94:53:b4:33:c9:56:a4:73:e7:
         27:d7:2c:c9:e9:03:5e:24:c8:72:28:3e:1a:a8:e4:e9:55:65:
         94:e0:98:17:62:fe:0c:76:41:70:86:4d:db:25:4a:89:9e:cf:
         0e:20:ee:46:d0:f4:da:e0:3a:aa:d5:08:68:af:a6:06:26:f0:
         28:bf:ee:77:2c:37:c1:01:fd:52:6c:81:a6:b2:dc:8d:cf:bf:
         00:fd:a0:3b:16:56:b6:0e:0a:22:1c:f8:76:1f:e6:fb:e8:bf:
         22:7b:e7:7e:94:d0:19:3d:48:f9:44:3a:ff:73:69:8c:ce:16:
         06:45:00:7f:2d:b0:2e:6c:70:5c:66:2e:14:5a:80:70:49:f8:
         a4:85:68:f5:f5:2d:af:4d:31:0f:1b:3d:75:9f:15:01:b1:d5:
         65:15:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:39 2026 by rpki-client