This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/93mj_4G89m1H5MptNhMcIgQCNnM.roa
File:                     93mj_4G89m1H5MptNhMcIgQCNnM.roa (raw, json)
Hash identifier:          qxInOCQTbUadXQby4nbhG7RugxwEJLlCXphI8F3Z4X0=
Subject key identifier:   F7:79:A3:FF:81:BC:F6:6D:47:E4:CA:6D:36:13:1C:22:04:02:36:73
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       019B7E38B2C1367CFB6E66B51FEA1FD5FFE2
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/93mj_4G89m1H5MptNhMcIgQCNnM.roa
Signing time:             Fri 02 Jan 2026 10:20:03 +0000
ROA not before:           Fri 02 Jan 2026 10:20:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60246
IP address blocks:        193.109.160.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:b2:c1:36:7c:fb:6e:66:b5:1f:ea:1f:d5:ff:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: Jan  2 10:20:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f779a3ff81bcf66d47e4ca6d36131c2204023673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1c:15:f5:ba:69:56:11:28:09:93:25:f8:48:
                    d9:97:bf:78:e6:18:f9:31:5e:18:27:69:7d:65:58:
                    94:8d:dc:89:f6:99:56:3b:36:89:3a:4c:91:ed:3e:
                    8a:1b:0e:a4:bb:32:38:a3:da:02:a1:97:6d:98:b6:
                    4b:a6:73:74:16:89:76:a4:63:27:14:95:b9:4c:37:
                    c5:67:61:d7:a1:50:a0:ce:ea:15:6e:03:ab:28:20:
                    73:48:94:84:33:71:92:4b:25:82:51:6a:ac:c0:b8:
                    f7:49:9d:0e:2e:ee:5d:5c:ce:4e:1f:2a:5e:e2:ec:
                    9d:10:ab:14:3d:af:f5:b6:3e:c6:0b:ad:6b:bd:4d:
                    42:7d:ba:3a:b6:86:7d:d0:fe:49:1a:54:5d:8a:87:
                    83:c1:d3:a7:1d:b7:8f:f6:50:b2:15:93:87:31:45:
                    c5:18:c8:44:c2:ae:02:c2:c4:04:bc:2b:70:b0:17:
                    0f:37:a8:34:ee:97:ed:5c:f3:5c:0d:67:0c:86:40:
                    c5:6d:8a:9d:04:cf:dc:19:7c:1f:06:90:fe:9a:12:
                    4f:d8:f3:6a:e6:1d:10:4a:56:7b:04:19:33:e0:83:
                    29:da:4e:6b:e0:e2:59:7a:db:cd:f5:a5:d9:a8:8e:
                    2a:24:cd:ec:96:c9:8a:7c:09:bd:ea:31:88:1a:c9:
                    fe:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:79:A3:FF:81:BC:F6:6D:47:E4:CA:6D:36:13:1C:22:04:02:36:73
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/93mj_4G89m1H5MptNhMcIgQCNnM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:cd:d7:1e:84:fe:72:32:bd:2b:80:e1:e8:4d:93:a8:9e:81:
         9f:86:79:58:14:66:ae:c4:04:4e:6e:28:a2:01:57:d4:09:53:
         9b:d5:08:8d:d9:c1:3b:69:03:fc:22:bb:2a:6a:19:f1:b7:25:
         73:21:06:02:27:75:65:51:0d:86:97:96:4f:93:73:c6:cf:e7:
         99:bd:1b:f7:7a:ca:46:34:cc:e3:eb:98:1b:c6:bd:90:66:94:
         a6:8c:94:78:d5:b5:52:61:40:ef:ea:a5:40:f7:8a:d7:34:8c:
         dd:5b:51:77:4d:15:42:7a:99:6e:e6:96:72:3d:87:e0:19:8c:
         8f:b5:48:62:d9:5b:5c:30:f5:ba:4b:2f:e4:1a:c1:b5:48:e3:
         d8:0d:d7:4d:45:e3:b9:fe:34:58:bd:27:c1:49:15:c4:21:14:
         3b:83:e7:ae:67:54:79:97:8d:61:b4:b4:60:b9:e4:77:6d:65:
         66:0e:51:2b:55:04:8d:a8:af:b5:b1:47:e6:c9:c0:ad:30:b4:
         9c:27:46:e7:a6:fc:1c:cb:33:8b:ff:6f:62:1e:ed:f9:03:7f:
         26:31:14:bb:d9:dc:8c:68:fd:fa:93:a3:e0:7e:a5:5f:d6:c9:
         fe:fa:1e:a5:66:0a:89:77:1d:e5:39:a8:2d:dc:ef:bb:a6:5c:
         93:ae:c1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:28:32 2026 by rpki-client