This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/iRG6zhI_HArOTibBs1JV2QE0L_s.roa
File:                     iRG6zhI_HArOTibBs1JV2QE0L_s.roa (raw, json)
Hash identifier:          8mVwvZAIQVh0/wtwoWgJ8lPinuzQ8kyjmM21PvKhN0s=
Subject key identifier:   89:11:BA:CE:12:3F:1C:0A:CE:4E:26:C1:B3:52:55:D9:01:34:2F:FB
Certificate issuer:       /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial:       019B79104F6130C837FE53116365CD32768F
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/iRG6zhI_HArOTibBs1JV2QE0L_s.roa
Signing time:             Thu 01 Jan 2026 10:17:50 +0000
ROA not before:           Thu 01 Jan 2026 10:17:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24655
IP address blocks:        194.30.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:4f:61:30:c8:37:fe:53:11:63:65:cd:32:76:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
        Validity
            Not Before: Jan  1 10:17:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8911bace123f1c0ace4e26c1b35255d901342ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:16:c4:d6:bb:d5:b5:56:8d:2e:2b:a7:2c:
                    42:86:f6:d4:cb:75:bc:54:51:70:76:72:be:bd:ae:
                    8b:30:be:f5:a1:fd:25:41:68:c2:94:95:d6:b6:ba:
                    29:1a:17:c4:8c:40:ef:97:1b:16:c5:26:20:a6:2f:
                    94:c4:79:54:c4:1e:6e:ee:37:52:9b:dd:86:a6:32:
                    ca:bd:eb:70:1d:59:8a:b0:09:f9:49:98:9d:e4:2a:
                    77:e4:92:1a:5c:9d:89:3e:82:1a:8a:62:ba:c1:cd:
                    4b:c3:11:30:6c:e1:72:e6:09:02:ee:43:00:d5:4b:
                    3b:77:62:e7:27:72:3f:da:19:83:12:b9:a9:f6:9f:
                    67:4a:52:9c:92:5a:ca:1d:88:d6:d0:94:3d:a8:87:
                    37:50:71:10:dd:ac:49:f5:46:45:91:d2:05:4c:71:
                    8b:ce:04:34:a5:54:ed:31:78:4f:6b:e1:a7:ed:f0:
                    ba:b5:5e:72:ca:86:0c:84:9a:f0:74:8b:f7:69:61:
                    b3:9e:39:5e:14:6b:63:31:d4:d2:a9:5a:06:d1:1c:
                    8c:e1:11:ea:b2:1e:54:ca:03:a8:05:36:91:5e:da:
                    1a:31:22:d8:53:b6:1e:d9:53:4c:35:22:aa:04:7e:
                    8c:18:00:4b:21:34:ab:9d:31:a3:63:73:21:9b:5e:
                    9d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:11:BA:CE:12:3F:1C:0A:CE:4E:26:C1:B3:52:55:D9:01:34:2F:FB
            X509v3 Authority Key Identifier:
                keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/iRG6zhI_HArOTibBs1JV2QE0L_s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.30.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:9f:0c:4a:f0:44:7d:09:25:4d:cd:b3:2f:40:cf:d6:de:ce:
         a2:4d:f0:ce:3b:18:58:43:72:3e:d0:91:51:60:8b:e1:0e:07:
         ca:ad:d4:19:93:8e:d8:ee:b1:c4:d0:d4:74:8c:ff:a9:82:ad:
         85:e4:93:26:0e:9f:3a:7f:1e:e7:25:1f:f6:a2:a5:10:bd:15:
         91:6d:2a:3c:2a:76:a2:1d:b5:88:23:92:56:61:aa:c0:e1:d3:
         45:f2:0f:38:0b:10:2c:13:a5:5e:85:cb:15:d2:c6:ac:d6:32:
         ae:44:a3:70:0d:68:64:e5:16:5c:4f:60:b4:30:bc:02:ee:01:
         9c:c3:23:fc:71:b2:e2:e6:97:31:6a:cf:36:20:95:cd:53:68:
         60:66:2a:03:d3:f1:5f:0c:28:d6:ce:95:2c:60:cb:d5:e1:f8:
         b6:b0:66:d1:d4:cf:6a:46:5d:8f:ac:66:7e:1c:39:ba:68:33:
         dd:49:8f:87:3d:70:7e:c7:9c:1e:7c:6e:86:45:51:82:1b:d9:
         2f:0a:d3:78:7e:69:a1:b4:58:b2:f2:07:da:e9:19:7c:3d:a0:
         ff:c4:57:76:80:76:3c:d2:26:c8:ce:fd:5f:2d:36:92:90:de:
         8d:5f:fa:16:61:f7:49:bd:a7:33:6e:32:be:41:94:53:8c:76:
         1d:85:d5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:42:41 2026 by rpki-client