This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/RgWMQjXg7-8S339TlCBO4Dg9rfU.roa
File:                     RgWMQjXg7-8S339TlCBO4Dg9rfU.roa (raw, json)
Hash identifier:          WorX+HeeCdUwWkRZ9MEdKKlywcL38BiogUuWefr3ejk=
Subject key identifier:   46:05:8C:42:35:E0:EF:EF:12:DF:7F:53:94:20:4E:E0:38:3D:AD:F5
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       019B7E372A4276EDCE4A628B9275D19EECDD
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/RgWMQjXg7-8S339TlCBO4Dg9rfU.roa
Signing time:             Fri 02 Jan 2026 10:18:22 +0000
ROA not before:           Fri 02 Jan 2026 10:18:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213480
IP address blocks:        93.179.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:2a:42:76:ed:ce:4a:62:8b:92:75:d1:9e:ec:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jan  2 10:18:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=46058c4235e0efef12df7f5394204ee0383dadf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:e2:1f:a6:0c:e2:a6:8e:c5:8b:da:a8:5b:
                    81:26:73:dd:08:8e:f9:6e:3d:76:6d:32:76:ee:ee:
                    a3:5b:fa:d4:cc:90:fc:ea:ef:2d:fc:06:72:58:61:
                    3a:a6:4d:1b:24:3f:8a:04:fc:75:ad:05:53:f9:8d:
                    ea:a8:db:cf:c3:91:8e:a3:92:f2:07:05:57:57:57:
                    ad:19:7a:fa:7a:09:99:2c:25:50:aa:55:06:7b:1a:
                    da:d4:7e:d7:c3:01:e4:fe:6c:2d:3c:ec:f6:97:23:
                    46:da:24:02:73:33:83:5a:9c:48:71:8a:78:6a:ce:
                    1a:1c:69:89:9e:e0:fc:f8:5d:d5:27:4b:d0:fc:77:
                    37:12:ac:65:c5:e0:a0:da:47:82:44:ed:51:a8:6f:
                    19:ed:4e:34:09:1b:65:bc:90:49:c2:49:07:5f:43:
                    2a:ca:93:a7:2b:b4:55:42:4f:35:c1:fe:5a:47:7e:
                    12:bf:49:f2:d1:35:ef:0f:a6:48:ad:c2:6d:62:70:
                    d4:77:6e:76:e7:c1:a5:87:d8:14:e0:bd:d1:a0:ae:
                    7d:08:77:79:4f:30:5f:84:f9:12:cd:31:b1:83:ec:
                    56:86:a0:94:69:8f:17:d5:d5:ea:37:7f:25:03:40:
                    de:6f:ba:2f:16:36:17:d4:54:8c:99:af:3c:f4:17:
                    f3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:05:8C:42:35:E0:EF:EF:12:DF:7F:53:94:20:4E:E0:38:3D:AD:F5
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/RgWMQjXg7-8S339TlCBO4Dg9rfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f0:79:f5:27:c2:d4:78:5b:20:38:49:a1:5d:15:84:a4:09:
         fd:9f:de:f1:f3:6b:d0:af:32:78:30:b4:34:fb:ec:c6:d8:ea:
         86:ed:34:9a:6a:48:6c:7f:b0:5d:d0:c7:fd:0e:d0:e1:fb:eb:
         0f:ce:9f:87:d4:73:3c:8d:51:0d:b2:e8:39:82:d9:21:b5:2b:
         90:2f:21:44:a4:81:fa:a7:a9:e9:53:4d:18:65:23:0d:42:3d:
         29:7b:58:c1:96:bb:90:5c:c6:d8:eb:05:f2:7d:9f:97:1a:1d:
         2e:5b:8b:de:52:cd:95:f6:0b:06:9e:f6:ae:ae:48:04:8a:3e:
         df:ac:db:d8:c7:7b:ac:38:34:80:18:76:28:34:62:2b:dc:39:
         95:60:75:63:08:92:10:e0:12:04:bf:77:80:76:b9:df:03:93:
         87:a8:71:44:36:76:49:01:1c:17:42:cd:13:f1:1d:31:77:c0:
         de:53:1f:21:28:86:41:9d:e6:dc:0e:75:15:40:1b:a6:80:4e:
         ee:eb:e7:d0:43:e5:65:85:01:2d:ea:03:72:a8:4b:f3:4d:4a:
         40:b7:49:87:d3:f4:5d:50:0d:b4:ac:c4:26:e4:7b:c7:b1:24:
         55:e3:85:3b:c3:69:51:05:a4:9e:68:94:48:85:ae:d7:16:2a:
         72:df:d0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:58 2026 by rpki-client