This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa
File:                     4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa (raw, json)
Hash identifier:          C2KBkGNtf0AMtr/iwr1TvmDzjxKM7CTZhxV5u4CUJx8=
Subject key identifier:   E3:34:5D:01:F9:BC:BD:35:CA:2F:68:A5:25:F0:4A:85:8A:A7:E8:D6
Certificate issuer:       /CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
Certificate serial:       019B78347A6FFDAD89A4ED2D71A64CB059A6
Authority key identifier: 98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa
Signing time:             Thu 01 Jan 2026 06:17:43 +0000
ROA not before:           Thu 01 Jan 2026 06:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206764
IP address blocks:        93.95.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:7a:6f:fd:ad:89:a4:ed:2d:71:a6:4c:b0:59:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9891c4488699e6d024e39cc4d61eeeabd38010fa
        Validity
            Not Before: Jan  1 06:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e3345d01f9bcbd35ca2f68a525f04a858aa7e8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:df:27:9e:50:af:a8:d3:d7:61:bc:2b:72:
                    86:4e:b8:0b:01:42:22:74:89:2e:25:3d:95:31:ce:
                    a5:aa:82:c0:fe:ab:44:5f:80:87:9c:d5:5f:7d:c4:
                    80:d5:4d:30:8b:08:bc:8e:3d:c4:d5:d3:3a:76:a8:
                    d1:ce:1e:bb:ed:02:ac:6c:81:34:5e:69:4b:5c:0e:
                    3c:60:7d:63:f1:6b:33:00:9e:e4:76:61:da:4a:be:
                    50:7d:f9:31:14:62:7a:23:2d:39:f2:22:ab:e8:77:
                    ed:0d:9c:dc:f0:c6:79:ac:d2:00:90:a3:30:6a:8b:
                    7f:cf:0b:f8:09:8b:78:7a:62:d8:52:2f:43:d8:d8:
                    f5:83:23:26:35:1f:08:a4:2b:a7:2e:62:c4:97:c8:
                    6a:1a:fe:d9:b4:69:01:ad:47:f3:dd:36:6f:b7:da:
                    5c:70:83:f1:eb:a8:b1:d7:f9:40:51:7f:8a:7a:24:
                    95:d5:33:c9:41:4b:3a:4d:28:0a:5f:3c:e9:d3:f0:
                    f0:e5:ea:c0:02:1b:0b:fe:70:1d:69:de:fd:e5:10:
                    e4:4e:7f:50:f2:0e:85:ce:54:4f:c7:e9:3d:e4:24:
                    1c:7e:ed:5e:25:83:12:63:4d:e7:41:bd:9c:54:c2:
                    3b:1a:af:96:e8:d8:d0:7b:a4:b5:74:2a:f7:a9:22:
                    e0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:34:5D:01:F9:BC:BD:35:CA:2F:68:A5:25:F0:4A:85:8A:A7:E8:D6
            X509v3 Authority Key Identifier:
                keyid:98:91:C4:48:86:99:E6:D0:24:E3:9C:C4:D6:1E:EE:AB:D3:80:10:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJHESIaZ5tAk45zE1h7uq9OAEPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/4zRdAfm8vTXKL2ilJfBKhYqn6NY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/47df00-8468-4c39-be95-e10a60596c26/1/mJHESIaZ5tAk45zE1h7uq9OAEPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.95.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:40:47:bd:89:28:96:e6:db:5d:a4:22:2e:2b:94:de:a0:d3:
         7a:a2:df:07:3d:a8:88:b1:df:81:8b:10:90:c4:7a:09:88:45:
         b2:aa:be:61:3e:af:b7:f9:b2:5f:4a:7c:93:72:f0:d0:87:11:
         dc:92:a3:b5:44:64:a7:f2:d5:09:0d:73:75:af:94:7e:fd:d4:
         35:4a:f2:95:e6:e7:a0:6e:04:c5:6f:31:e6:4f:de:39:86:ab:
         14:1f:ca:08:a3:cf:6f:04:ba:19:d8:d3:91:6e:3d:76:6a:ec:
         53:cd:6c:5d:e0:02:2a:76:c9:a3:7e:d1:0e:c4:b0:82:77:6b:
         96:6b:f8:29:46:3b:db:6f:2c:fc:9c:d4:52:97:06:69:33:5f:
         95:fd:21:cc:61:1d:02:ee:18:6f:b7:40:68:f5:f4:93:3a:63:
         e8:1e:20:50:56:b8:7f:9e:0c:46:2b:5a:ac:fe:c9:ad:b3:4b:
         ba:27:31:d9:95:18:e8:11:cf:5c:f5:b8:44:8b:3d:0e:86:ce:
         eb:3b:2c:04:d0:09:2b:48:08:92:b9:e2:b2:96:db:7a:29:68:
         82:75:32:bc:2d:ad:33:0f:46:5b:cc:43:10:ac:e6:1b:9c:59:
         2d:d8:f3:09:d2:82:37:a3:ea:c0:3c:70:69:97:80:d2:3f:29:
         60:88:3c:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NHpv/a2JpO0tcaZMsFmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTFjNDQ4ODY5OWU2ZDAyNGUzOWNjNGQ2MWVlZWFiZDM4
MDEwZmEwHhcNMjYwMTAxMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzM0NWQwMWY5YmNiZDM1Y2EyZjY4YTUyNWYwNGE4NThhYTdlOGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLvfJ55Qr6jT12G8K3KGTrgLAUIi
dIkuJT2VMc6lqoLA/qtEX4CHnNVffcSA1U0wiwi8jj3E1dM6dqjRzh677QKsbIE0
XmlLXA48YH1j8WszAJ7kdmHaSr5QffkxFGJ6Iy058iKr6HftDZzc8MZ5rNIAkKMw
aot/zwv4CYt4emLYUi9D2Nj1gyMmNR8IpCunLmLEl8hqGv7ZtGkBrUfz3TZvt9pc
cIPx66ix1/lAUX+KeiSV1TPJQUs6TSgKXzzp0/Dw5erAAhsL/nAdad795RDkTn9Q
8g6FzlRPx+k95CQcfu1eJYMSY03nQb2cVMI7Gq+W6NjQe6S1dCr3qSLgpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOM0XQH5vL01yi9opSXwSoWKp+jWMB8GA1UdIwQY
MBaAFJiRxEiGmebQJOOcxNYe7qvTgBD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUt
ZTEwYTYwNTk2YzI2LzEvNHpSZEFmbTh2VFhLTDJpbEpmQktoWXFuNk5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80N2RmMDAtODQ2OC00YzM5LWJlOTUtZTEwYTYwNTk2YzI2
LzEvbUpIRVNJYVo1dEFrNDV6RTFoN3VxOU9BRVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV9gMA0G
CSqGSIb3DQEBCwUAA4IBAQAdQEe9iSiW5ttdpCIuK5TeoNN6ot8HPaiIsd+BixCQ
xHoJiEWyqr5hPq+3+bJfSnyTcvDQhxHckqO1RGSn8tUJDXN1r5R+/dQ1SvKV5ueg
bgTFbzHmT945hqsUH8oIo89vBLoZ2NORbj12auxTzWxd4AIqdsmjftEOxLCCd2uW
a/gpRjvbbyz8nNRSlwZpM1+V/SHMYR0C7hhvt0Bo9fSTOmPoHiBQVrh/ngxGK1qs
/smts0u6JzHZlRjoEc9c9bhEiz0Ohs7rOywE0AkrSAiSueKyltt6KWiCdTK8La0z
D0ZbzEMQrOYbnFkt2PMJ0oI3o+rAPHBpl4DSPylgiDyL
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:55:29 2026 by rpki-client