This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/IENG8_E9HCJFskPGDqoJ03-CUpc.roa
File:                     IENG8_E9HCJFskPGDqoJ03-CUpc.roa (raw, json)
Hash identifier:          V5DDY41B+l7qa25OaZxvf+p/xy1NPbH+gA7jQzTp5fY=
Subject key identifier:   20:43:46:F3:F1:3D:1C:22:45:B2:43:C6:0E:AA:09:D3:7F:82:52:97
Certificate issuer:       /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial:       019B7C7EDEE01EE06FBDB658DD2A14FAA4A4
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/IENG8_E9HCJFskPGDqoJ03-CUpc.roa
Signing time:             Fri 02 Jan 2026 02:17:27 +0000
ROA not before:           Fri 02 Jan 2026 02:17:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60909
IP address blocks:        93.114.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7e:de:e0:1e:e0:6f:bd:b6:58:dd:2a:14:fa:a4:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
        Validity
            Not Before: Jan  2 02:17:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=204346f3f13d1c2245b243c60eaa09d37f825297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:8f:34:cd:63:9e:77:01:fa:b6:8a:a1:53:
                    35:01:42:e5:64:16:98:5d:b9:71:48:f1:0d:2c:f1:
                    7e:56:4f:cf:ec:d6:25:04:91:59:f8:8c:b9:d7:d9:
                    d6:7b:93:b6:3f:d6:8c:5a:43:b2:2f:f0:7b:bd:4d:
                    81:59:f4:b8:50:2e:cf:0c:54:ad:72:b4:b5:23:73:
                    74:58:a2:10:cc:93:ac:fe:73:4d:c2:bd:63:81:77:
                    b3:ae:2b:3e:14:a9:05:5e:be:25:c1:45:fa:2f:46:
                    d2:87:94:e8:8f:e2:8e:0e:3e:25:2f:f4:6c:3e:d1:
                    f7:2d:47:bf:ea:f2:26:7f:eb:92:8d:25:79:a1:e4:
                    46:45:0a:71:dc:24:ce:6f:ec:01:10:44:93:84:47:
                    10:01:50:c0:fc:95:1e:2c:6d:cb:bd:38:08:3b:fb:
                    c3:61:d0:0b:09:b8:aa:38:2d:db:93:98:31:f5:b5:
                    b7:26:23:c6:0b:61:47:e6:3c:7b:b3:48:19:b1:9f:
                    95:0a:f2:60:b5:b1:11:0d:e0:45:35:9f:b6:ac:67:
                    d7:c2:84:c6:df:a8:b5:29:ac:0d:85:ef:37:0e:b1:
                    43:49:39:ec:c3:6e:0a:73:a3:05:8a:d4:dc:76:da:
                    f8:83:ff:69:c9:09:92:0d:a9:11:b5:87:bd:a4:1f:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:43:46:F3:F1:3D:1C:22:45:B2:43:C6:0E:AA:09:D3:7F:82:52:97
            X509v3 Authority Key Identifier:
                keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/IENG8_E9HCJFskPGDqoJ03-CUpc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.114.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:99:a1:be:16:f6:0a:38:95:0c:d9:45:5b:5a:7a:48:4f:6d:
         d1:7b:7b:37:39:3b:81:2d:45:d0:16:12:09:90:09:fc:78:52:
         0a:e7:d8:cb:15:e7:99:86:d3:4f:d9:ca:32:42:7e:b8:79:50:
         23:1a:a5:0f:79:15:21:90:a1:be:3c:26:9b:81:4f:f2:c9:7e:
         3f:74:4b:d1:d8:5d:9e:cf:4f:75:20:24:78:8d:06:da:99:ea:
         8f:b3:a7:c8:72:8d:c3:97:6f:1f:5b:32:23:8b:74:09:79:8b:
         f7:87:03:3c:54:e2:27:7c:5c:1a:b1:66:9c:cd:ca:bc:0c:40:
         74:54:70:a7:f6:bc:df:d3:9e:36:eb:73:8d:fc:6a:92:2f:da:
         6a:39:5f:69:20:18:fe:0f:cf:33:82:d2:c0:b0:b7:e3:f0:fd:
         62:88:bb:c7:eb:f1:dd:63:06:61:f9:16:5c:c2:62:43:d3:eb:
         21:23:ec:2e:14:e6:0d:71:b9:89:d4:37:6f:ce:39:0b:96:3a:
         3d:8c:3f:13:49:d9:20:15:3c:a2:14:28:97:9c:47:b5:56:83:
         6a:ca:97:75:d1:a9:f8:3e:4d:a5:45:39:00:d2:08:86:e5:2c:
         a5:b1:53:f1:63:95:ad:ce:c5:e1:89:3f:b5:d8:a6:2a:d9:de:
         d7:5b:1d:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8ft7gHuBvvbZY3SoU+qSkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NzkwYzdlY2YyNGQyOGJlMmUxM2ZlMDY5MTE4Y2VlMjdk
NTgwMDIwHhcNMjYwMTAyMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDQzNDZmM2YxM2QxYzIyNDViMjQzYzYwZWFhMDlkMzdmODI1Mjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLKPNM1jnncB+raKoVM1AULlZBaY
XblxSPENLPF+Vk/P7NYlBJFZ+Iy519nWe5O2P9aMWkOyL/B7vU2BWfS4UC7PDFSt
crS1I3N0WKIQzJOs/nNNwr1jgXezris+FKkFXr4lwUX6L0bSh5Toj+KODj4lL/Rs
PtH3LUe/6vImf+uSjSV5oeRGRQpx3CTOb+wBEESThEcQAVDA/JUeLG3LvTgIO/vD
YdALCbiqOC3bk5gx9bW3JiPGC2FH5jx7s0gZsZ+VCvJgtbERDeBFNZ+2rGfXwoTG
36i1KawNhe83DrFDSTnsw24Kc6MFitTcdtr4g/9pyQmSDakRtYe9pB8cJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCBDRvPxPRwiRbJDxg6qCdN/glKXMB8GA1UdIwQY
MBaAFHV5DH7PJNKL4uE/4GkRjO4n1YACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFhrTWZzOGswb3ZpNFRfZ2FSR003aWZWZ0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80OTZkNTYtODZmZi00OGJlLWJkZTMt
MjcxZmRlMmRjNjU1LzEvSUVORzhfRTlIQ0pGc2tQR0Rxb0owMy1DVXBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi80OTZkNTYtODZmZi00OGJlLWJkZTMtMjcxZmRlMmRjNjU1
LzEvZFhrTWZzOGswb3ZpNFRfZ2FSR003aWZWZ0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXXLYMA0G
CSqGSIb3DQEBCwUAA4IBAQCamaG+FvYKOJUM2UVbWnpIT23Re3s3OTuBLUXQFhIJ
kAn8eFIK59jLFeeZhtNP2coyQn64eVAjGqUPeRUhkKG+PCabgU/yyX4/dEvR2F2e
z091ICR4jQbameqPs6fIco3Dl28fWzIji3QJeYv3hwM8VOInfFwasWaczcq8DEB0
VHCn9rzf054263ON/GqSL9pqOV9pIBj+D88zgtLAsLfj8P1iiLvH6/HdYwZh+RZc
wmJD0+shI+wuFOYNcbmJ1DdvzjkLljo9jD8TSdkgFTyiFCiXnEe1VoNqypd10an4
Pk2lRTkA0giG5SylsVPxY5WtzsXhiT+12KYq2d7XWx0w
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:40 2026 by rpki-client