This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/IA8useNuoOrWWWwBPykqHsLqh6Y.roa
File:                     IA8useNuoOrWWWwBPykqHsLqh6Y.roa (raw, json)
Hash identifier:          lquWyou9b2Q0ggtq7A86pgdp3JufuHZ02PUKPrrHbo8=
Subject key identifier:   20:0F:2E:B1:E3:6E:A0:EA:D6:59:6C:01:3F:29:2A:1E:C2:EA:87:A6
Certificate issuer:       /CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
Certificate serial:       019B7D5D24FA41A5DEFE190A12B77C272F94
Authority key identifier: D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/IA8useNuoOrWWWwBPykqHsLqh6Y.roa
Signing time:             Fri 02 Jan 2026 06:20:14 +0000
ROA not before:           Fri 02 Jan 2026 06:20:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8426
IP address blocks:        193.193.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:24:fa:41:a5:de:fe:19:0a:12:b7:7c:27:2f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
        Validity
            Not Before: Jan  2 06:20:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=200f2eb1e36ea0ead6596c013f292a1ec2ea87a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cb:53:24:2d:09:b2:14:18:a4:71:06:d5:b5:
                    6f:b6:ea:0c:5a:58:d2:2f:f2:c5:15:ce:f8:2b:36:
                    c5:0e:e9:67:28:b0:7a:2d:d4:7e:26:10:f1:cc:1e:
                    e9:2e:ea:27:93:68:60:70:3f:25:82:ad:5d:c8:38:
                    4a:9b:ae:a8:32:0b:82:de:6f:e4:04:ca:55:f1:33:
                    38:85:5f:00:28:b4:7a:87:b5:29:32:e2:3c:7b:46:
                    7f:42:91:66:c9:95:04:1a:0e:c0:76:93:41:cb:d4:
                    fc:82:a0:c6:d6:70:41:36:6a:0c:ad:c1:1e:69:f4:
                    fe:34:7f:3d:df:72:09:65:3d:7c:2a:28:a9:6e:df:
                    08:18:3b:52:b5:95:84:ac:57:96:37:ac:ec:ae:46:
                    05:a8:a7:c4:d1:aa:77:84:46:c6:1e:2d:1c:29:9c:
                    ef:d4:0e:d0:79:ed:ef:57:6b:9e:0c:aa:0b:f4:ef:
                    49:22:00:d4:ed:76:c3:1e:f3:4a:25:d9:72:21:01:
                    83:d2:19:32:5c:f6:c1:23:8a:88:e6:e3:5e:af:4b:
                    93:a1:30:5d:22:58:bd:41:35:75:5a:fd:c5:34:24:
                    0e:fd:ac:b2:96:c0:f7:e3:25:d5:74:58:d9:ea:17:
                    4b:c5:1a:da:a9:e4:65:44:6b:72:e3:8d:5b:f5:ae:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0F:2E:B1:E3:6E:A0:EA:D6:59:6C:01:3F:29:2A:1E:C2:EA:87:A6
            X509v3 Authority Key Identifier:
                keyid:D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/IA8useNuoOrWWWwBPykqHsLqh6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.193.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:0c:2a:8c:b5:b0:75:30:64:f9:d8:5a:40:a0:a9:ce:8d:95:
         7c:bd:8e:52:d0:e6:b8:63:e6:5a:75:ea:4f:89:0d:3f:1c:93:
         56:63:6d:f4:41:f5:ee:4e:6c:c5:19:54:09:18:7c:67:a3:f0:
         0e:79:85:aa:28:b2:14:bc:7a:1c:c3:9a:63:da:ac:f1:c3:52:
         dd:d0:f4:60:a3:ff:91:8f:f2:77:c8:24:86:3a:d6:2e:e5:fd:
         d4:7c:27:0d:9c:dc:3e:3e:46:83:cf:6f:af:6a:01:77:71:77:
         d3:18:44:d5:cf:24:bc:d5:68:5f:53:1d:5d:ab:d6:5c:19:78:
         fe:ef:fa:b4:85:6e:8e:c6:31:53:65:73:e4:40:82:54:6f:46:
         70:fa:6f:20:2d:1c:5d:71:7c:06:49:b4:af:a3:8f:73:12:09:
         89:c4:5a:d9:33:1d:16:af:58:7d:4f:20:76:71:a4:a1:f3:cc:
         67:85:d6:37:00:64:59:d0:d8:97:97:57:74:bf:5b:8b:db:3c:
         99:ae:aa:07:1f:3c:4e:f0:99:c9:32:a4:ed:b3:71:71:4b:1e:
         e4:64:af:8c:24:28:d6:6e:73:22:4f:9c:7d:c6:f4:95:1f:d4:
         40:a6:ef:be:e5:88:4c:e2:ee:80:aa:be:7c:0b:9c:22:5c:af:
         d4:23:51:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:27 2026 by rpki-client