This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/knLrELnamRbYKI_hmZ4VPtqQHec.roa
File:                     knLrELnamRbYKI_hmZ4VPtqQHec.roa (raw, json)
Hash identifier:          KpZhnOp+uvDR1vqjA12HnP6hCAQUJOuMRCA2L33u3s8=
Subject key identifier:   92:72:EB:10:B9:DA:99:16:D8:28:8F:E1:99:9E:15:3E:DA:90:1D:E7
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       019B7911178A075B1C6DB2F3714F1B4A2EFA
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/knLrELnamRbYKI_hmZ4VPtqQHec.roa
Signing time:             Thu 01 Jan 2026 10:18:41 +0000
ROA not before:           Thu 01 Jan 2026 10:18:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42440
IP address blocks:        94.183.58.1/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:17:8a:07:5b:1c:6d:b2:f3:71:4f:1b:4a:2e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: Jan  1 10:18:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9272eb10b9da9916d8288fe1999e153eda901de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:c8:8a:50:ae:39:77:be:e5:8a:94:9f:59:
                    fd:25:8e:96:ff:6e:72:cd:c1:2d:cb:71:43:2e:1e:
                    f2:42:15:1b:9a:49:97:3b:c7:19:49:2a:fe:66:8b:
                    7b:af:dc:cf:d1:2d:11:e7:b8:9a:38:97:19:61:1f:
                    f5:c4:e8:05:2c:b4:a4:36:5a:75:3e:06:37:49:3e:
                    58:ac:3d:f2:14:db:ae:47:44:85:af:07:4a:23:c6:
                    aa:7e:a2:27:90:07:92:7c:b7:e7:15:c0:18:62:bd:
                    29:74:5b:cd:93:a1:de:57:3c:cc:77:7c:f7:66:da:
                    0d:71:e2:7c:3d:9b:f3:a5:29:98:1f:b4:57:ea:05:
                    ce:74:1a:f1:8b:c9:db:48:49:9e:e7:00:73:7c:67:
                    1e:c4:c1:2f:96:f3:1e:6c:9b:d4:48:3d:fb:ec:aa:
                    f2:03:2d:20:6f:84:05:3b:32:10:93:41:eb:4b:c2:
                    ae:35:4d:ab:3a:52:f0:07:d1:9f:e6:ad:6b:0c:cb:
                    d8:2c:52:6a:8f:06:57:82:a9:7f:2a:a6:1a:14:53:
                    d6:87:d4:fe:8a:49:f1:b0:a1:aa:6e:7e:82:4c:1c:
                    6e:97:d6:31:28:dd:73:71:2e:49:ee:9f:ce:57:4d:
                    8f:0d:20:6f:bc:69:da:ce:85:ca:5c:44:82:55:c2:
                    74:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:72:EB:10:B9:DA:99:16:D8:28:8F:E1:99:9E:15:3E:DA:90:1D:E7
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/knLrELnamRbYKI_hmZ4VPtqQHec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.183.58.1/32

    Signature Algorithm: sha256WithRSAEncryption
         46:28:14:38:a3:d2:90:44:87:ab:9e:ae:e0:ce:7f:57:4f:ea:
         d6:c3:3f:ca:71:19:13:76:b0:7d:b7:3f:91:80:fb:c2:0d:95:
         ad:99:52:f7:9b:1a:74:f3:14:0a:8d:84:b3:75:38:e8:47:78:
         89:2a:85:9c:da:e1:c6:d4:11:3c:78:37:1e:06:15:6e:fb:dd:
         61:44:d6:d7:e1:d9:c1:8e:b7:6c:c0:d7:bd:cb:f4:7c:18:5f:
         bf:e4:30:07:a4:a1:1b:c6:fb:4d:28:60:3e:ed:eb:e2:eb:7b:
         c9:9d:9f:64:ba:8c:cb:42:aa:b7:63:70:d2:33:7e:6b:91:6f:
         f7:8c:a7:f8:ea:81:14:c6:35:5a:9a:38:9e:6b:72:f6:1d:35:
         51:00:0b:c7:80:6e:42:38:67:26:f0:0f:34:0b:e5:0c:3e:87:
         4a:64:92:66:8d:f5:1f:d9:2b:e9:4c:3e:e2:e6:44:07:fe:65:
         44:11:9c:2e:90:18:60:06:8e:67:79:af:19:4d:92:b3:87:bb:
         da:ef:be:7b:1a:9e:ba:2b:24:d1:9e:89:39:3b:6b:27:65:63:
         6f:ff:e4:6c:ca:ca:63:3e:e4:fe:4c:c7:bf:5f:4f:a4:67:3a:
         d8:39:ad:5f:27:92:3f:6a:f6:e3:97:b8:6d:b4:49:27:83:c9:
         ef:14:d2:ff
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZt5EReKB1scbbLzcU8bSi76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy
ZGM2NmUwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjcyZWIxMGI5ZGE5OTE2ZDgyODhmZTE5OTllMTUzZWRhOTAxZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrPIilCuOXe+5YqUn1n9JY6W/25y
zcEty3FDLh7yQhUbmkmXO8cZSSr+Zot7r9zP0S0R57iaOJcZYR/1xOgFLLSkNlp1
PgY3ST5YrD3yFNuuR0SFrwdKI8aqfqInkAeSfLfnFcAYYr0pdFvNk6HeVzzMd3z3
ZtoNceJ8PZvzpSmYH7RX6gXOdBrxi8nbSEme5wBzfGcexMEvlvMebJvUSD377Kry
Ay0gb4QFOzIQk0HrS8KuNU2rOlLwB9Gf5q1rDMvYLFJqjwZXgql/KqYaFFPWh9T+
iknxsKGqbn6CTBxul9YxKN1zcS5J7p/OV02PDSBvvGnazoXKXESCVcJ0FQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJJy6xC52pkW2CiP4ZmeFT7akB3nMB8GA1UdIwQY
MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt
MGJlZTA2MTI2YjFhLzEva25MckVMbmFtUmJZS0lfaG1aNFZQdHFRSGVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh
LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAXrc6ATAN
BgkqhkiG9w0BAQsFAAOCAQEARigUOKPSkESHq56u4M5/V0/q1sM/ynEZE3awfbc/
kYD7wg2VrZlS95sadPMUCo2Es3U46Ed4iSqFnNrhxtQRPHg3HgYVbvvdYUTW1+HZ
wY63bMDXvcv0fBhfv+QwB6ShG8b7TShgPu3r4ut7yZ2fZLqMy0Kqt2Nw0jN+a5Fv
94yn+OqBFMY1Wpo4nmty9h01UQALx4BuQjhnJvAPNAvlDD6HSmSSZo31H9kr6Uw+
4uZEB/5lRBGcLpAYYAaOZ3mvGU2Ss4e72u++exqeuisk0Z6JOTtrJ2Vjb//kbMrK
Yz7k/kzHv19PpGc62DmtXyeSP2r245e4bbRJJ4PJ7xTS/w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:57:32 2026 by rpki-client