This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/poleM__KgerSigoGNjL1HDmHPlU.roa
File:                     poleM__KgerSigoGNjL1HDmHPlU.roa (raw, json)
Hash identifier:          uZBWl6v68DL2gdHCc0x9TYJ3yTXVxvI3n/lECuCiOCc=
Subject key identifier:   A6:89:5E:33:FF:CA:81:EA:D2:8A:0A:06:36:32:F5:1C:39:87:3E:55
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       019B7A5ABEBD4A77091DD9F279D9ABFC5101
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/poleM__KgerSigoGNjL1HDmHPlU.roa
Signing time:             Thu 01 Jan 2026 16:18:46 +0000
ROA not before:           Thu 01 Jan 2026 16:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207594
IP address blocks:        194.105.84.0/22 maxlen: 22
                          194.105.92.0/22 maxlen: 22
                          212.38.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:be:bd:4a:77:09:1d:d9:f2:79:d9:ab:fc:51:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan  1 16:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a6895e33ffca81ead28a0a063632f51c39873e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:20:fc:15:fd:bb:d2:a6:19:ad:3b:6b:07:
                    ec:c1:44:f6:36:5d:dd:ea:37:72:83:52:1d:83:ac:
                    4e:17:c5:8d:f4:ee:61:22:7e:7a:76:d4:e7:d1:e7:
                    6e:b0:a6:3e:36:b7:76:16:02:fa:34:d2:81:29:e4:
                    fb:1b:25:57:b8:5d:c2:5e:a9:ef:54:0b:08:62:54:
                    27:f2:ab:6c:91:30:e7:8f:4b:8f:c6:4a:7d:9d:71:
                    4c:51:50:45:36:70:e1:0e:c8:fd:51:14:ce:38:3e:
                    11:49:31:2f:0d:20:3d:79:17:2f:12:9a:ae:09:f1:
                    93:0b:f6:d9:c3:66:f0:30:e0:fb:fb:16:cb:9b:45:
                    e7:b3:2c:d8:db:3e:e8:2b:ad:a3:9b:24:de:ca:3c:
                    02:11:92:69:bb:4c:36:c7:54:e3:9d:ae:a6:80:c8:
                    4a:75:73:07:a2:d3:29:c3:af:7c:3d:3e:df:f9:c2:
                    6c:13:07:5d:5f:20:e7:a5:05:bf:f3:5e:08:99:e8:
                    66:54:2b:a1:0e:82:f1:e9:93:d6:a8:78:6b:71:54:
                    36:4d:5a:e1:d2:e1:ef:d4:53:55:0f:aa:04:bc:27:
                    80:a7:d2:75:c8:1c:ac:91:fb:08:ba:84:54:1e:e4:
                    a3:f0:84:f1:56:11:5a:02:37:ce:b6:d9:d8:d8:d5:
                    b9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:89:5E:33:FF:CA:81:EA:D2:8A:0A:06:36:32:F5:1C:39:87:3E:55
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/poleM__KgerSigoGNjL1HDmHPlU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.105.84.0/22
                  194.105.92.0/22
                  212.38.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:19:c6:2a:ce:bc:ca:6b:18:3e:dc:0d:04:7c:f3:b3:4e:db:
         2d:b6:67:1c:c8:1c:03:f4:08:ed:95:c1:b4:f8:ce:6e:3e:35:
         f2:cf:33:b8:39:2f:77:9e:65:15:1f:eb:84:c4:74:4f:43:be:
         c6:4c:cd:f5:77:15:e8:dc:f2:3a:af:e0:e7:c2:f2:e5:ee:e3:
         2d:0b:ce:47:55:36:66:1e:72:0b:77:df:05:df:ad:a5:ba:4a:
         84:2f:e2:a6:8a:fa:7c:d9:63:7b:f7:5d:2f:4f:02:c8:52:1e:
         36:e7:61:3b:6e:96:b9:57:dd:88:ad:64:14:96:e2:3d:dd:97:
         12:dd:50:48:5e:1a:bc:c4:81:f4:76:56:b5:20:2a:c2:b3:79:
         a6:da:7c:91:a9:a3:81:4e:ca:65:1a:55:2b:66:3d:b8:5a:82:
         21:bb:21:36:00:37:e1:11:09:fb:e2:15:2e:41:7b:6b:6e:09:
         57:55:fd:7b:35:3d:00:71:a9:82:7d:21:9f:d7:41:f5:e8:35:
         fb:54:93:0d:b1:a4:42:a0:db:f2:eb:44:b7:32:95:b6:fb:26:
         62:85:1c:4f:fc:61:2d:7d:29:ec:94:a7:e8:ed:79:d8:d5:e6:
         3b:11:fe:de:2f:39:25:33:85:cd:e0:ef:d5:cf:e3:43:64:1c:
         e6:08:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:48:01 2026 by rpki-client