This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/4BIZ08i4JPFDDHVtvlfqNMnUnIc.roa
File:                     4BIZ08i4JPFDDHVtvlfqNMnUnIc.roa (raw, json)
Hash identifier:          AfKuZeKZY5PYd/h5BuonLEsckMORdl0M6uVn/t5CZGA=
Subject key identifier:   E0:12:19:D3:C8:B8:24:F1:43:0C:75:6D:BE:57:EA:34:C9:D4:9C:87
Certificate issuer:       /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial:       019AD731ADA831980A407995CEF7B8569931
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/4BIZ08i4JPFDDHVtvlfqNMnUnIc.roa
Signing time:             Sun 30 Nov 2025 23:55:48 +0000
ROA not before:           Sun 30 Nov 2025 23:55:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     213640
IP address blocks:        212.52.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d7:31:ad:a8:31:98:0a:40:79:95:ce:f7:b8:56:99:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
        Validity
            Not Before: Nov 30 23:55:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e01219d3c8b824f1430c756dbe57ea34c9d49c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:40:bb:4f:37:eb:0b:3d:0e:b1:ad:2a:3a:
                    a6:f1:11:3d:37:fb:cd:81:2c:fb:fa:90:8c:ea:3c:
                    7c:82:4d:35:46:7f:05:c1:21:66:c1:b7:a5:5c:53:
                    ad:8a:c4:76:67:9b:97:74:6b:8b:a0:3b:ed:b2:5a:
                    e5:cf:0d:40:50:31:35:9d:b5:29:96:8b:a5:fa:7c:
                    5b:59:d7:c5:55:44:7e:34:0f:c2:1d:e7:b7:e5:1c:
                    b5:e5:3e:27:e1:b5:0b:21:f6:dc:ca:35:b3:b5:1e:
                    9b:b2:e9:13:b2:28:05:79:0d:27:18:e2:e9:99:fc:
                    76:34:c1:ce:71:b8:5e:95:09:0f:ab:9c:29:7a:8c:
                    f6:38:b5:f0:0d:90:97:50:24:b9:ec:fa:14:c0:fb:
                    8d:da:9f:dd:e3:08:2e:76:02:5b:9f:3b:0d:8d:dd:
                    5e:39:2f:91:11:fa:6f:96:3c:90:04:6a:58:4a:80:
                    40:c3:5d:b4:1e:9f:8d:78:22:aa:92:1d:88:37:6b:
                    ab:14:10:44:ad:a1:cd:46:33:79:4b:b6:c9:9f:b5:
                    23:62:8c:8d:b6:80:5d:76:22:3a:ee:dc:73:c8:80:
                    97:e6:00:a8:8b:72:d6:ab:be:ce:1d:c9:64:10:db:
                    ef:7c:a5:f3:d6:d8:51:ed:18:e9:c2:ec:4e:bb:dd:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:12:19:D3:C8:B8:24:F1:43:0C:75:6D:BE:57:EA:34:C9:D4:9C:87
            X509v3 Authority Key Identifier:
                keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/4BIZ08i4JPFDDHVtvlfqNMnUnIc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.52.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:88:a1:a4:c6:50:0b:a7:96:22:b8:bf:d1:07:aa:42:ce:00:
         61:9f:b5:12:5c:12:ed:94:34:c5:62:db:f1:ec:88:08:8a:a7:
         32:84:fc:3f:aa:3a:d2:f1:0a:8e:dd:25:14:7d:d1:51:10:93:
         03:9c:34:dc:85:06:90:f2:10:ba:b3:69:56:b3:fe:f7:05:e2:
         d9:9e:3f:8c:76:0e:b3:25:d6:62:f7:e1:1c:61:97:8e:fc:b9:
         15:d4:3f:09:b2:1a:10:48:b9:bb:03:6a:05:a9:ee:c1:6c:0b:
         bc:7a:05:15:d5:4a:4d:e3:9c:42:65:e6:c4:31:17:95:72:5e:
         ec:59:8d:6a:88:5d:13:91:8c:e6:4c:a7:68:7b:3a:8c:50:f2:
         f3:f1:34:41:36:52:26:c9:ea:ad:25:fa:17:ce:d3:85:77:e6:
         61:2d:14:26:4a:f8:43:99:ca:2c:13:a0:46:69:47:c4:06:cc:
         04:e8:ef:8a:0a:26:55:94:47:86:08:55:00:7c:1c:12:a5:2f:
         cc:70:86:ae:5b:1c:51:71:33:75:16:59:82:4b:2e:c6:33:d6:
         df:d3:bb:8a:9d:00:71:d6:bb:8d:ed:8f:c5:5c:94:21:71:ae:
         7c:78:a1:0e:c4:9f:3d:a7:b5:7c:80:03:66:e0:a2:a2:2f:cb:
         4b:0b:e2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:22:52 2025 by rpki-client