This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/polvb4mWJFtYlmCnCQgjC3KNjFM.roa
File:                     polvb4mWJFtYlmCnCQgjC3KNjFM.roa (raw, json)
Hash identifier:          ok6ZqIcHmI5POEVYtqUr4M7uhrPkkTSbl73JjPBOL34=
Subject key identifier:   A6:89:6F:6F:89:96:24:5B:58:96:60:A7:09:08:23:0B:72:8D:8C:53
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       019B7BA3C33DC664F108E7DFF0FBC7A6F6F0
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/polvb4mWJFtYlmCnCQgjC3KNjFM.roa
Signing time:             Thu 01 Jan 2026 22:18:08 +0000
ROA not before:           Thu 01 Jan 2026 22:18:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48391
IP address blocks:        93.126.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:c3:3d:c6:64:f1:08:e7:df:f0:fb:c7:a6:f6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: Jan  1 22:18:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a6896f6f8996245b589660a70908230b728d8c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:db:76:b1:c2:b6:d8:6b:13:11:a4:b7:14:
                    e7:66:cf:98:04:b5:d2:65:13:79:4e:c9:79:f9:f7:
                    fd:4b:83:e6:16:16:60:29:b1:e2:83:52:c2:11:2b:
                    62:dc:cf:63:83:d5:1a:1f:e4:7c:39:61:dc:a3:d7:
                    00:0d:8a:fd:26:a0:01:c9:cc:2f:c6:83:2d:39:06:
                    61:7b:85:c1:b2:4a:de:0f:fa:43:cf:e4:ad:36:a6:
                    a2:20:7b:1a:5e:94:ed:ae:1d:a4:6e:35:a4:b1:07:
                    8d:be:52:b4:1d:7b:fb:81:bd:ad:bf:e4:5d:d8:17:
                    7c:d0:0c:66:b8:2c:6b:fe:1c:cd:d5:c1:c2:1a:72:
                    48:13:0f:5f:e8:91:4c:6c:7e:57:47:98:f4:46:11:
                    3e:23:a8:36:f6:8e:cd:61:0a:36:e9:eb:0b:68:2c:
                    e9:e1:b8:64:f3:04:a4:4b:3f:51:dd:17:d1:6c:01:
                    42:14:58:c2:81:cc:93:99:cd:aa:5a:97:ce:e4:c9:
                    88:ed:9a:c2:48:55:a0:91:32:02:14:88:71:20:29:
                    27:fd:b4:80:d3:be:4b:b5:f3:b5:78:85:fe:cb:94:
                    a7:99:8b:a2:5d:f8:30:43:f9:af:8f:c6:db:52:c8:
                    cc:ba:ef:f8:07:f8:86:f9:ec:d6:c3:3a:ca:f3:f8:
                    34:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:89:6F:6F:89:96:24:5B:58:96:60:A7:09:08:23:0B:72:8D:8C:53
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/polvb4mWJFtYlmCnCQgjC3KNjFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.126.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:42:9c:6f:9c:72:c1:1f:45:1d:c1:47:51:b6:8d:4e:f9:28:
         30:f6:f5:a7:9d:85:39:d5:02:05:db:6d:9b:5e:d1:74:b7:92:
         e2:55:36:19:f2:8b:ef:f2:d6:f5:fb:cf:e2:80:b1:fd:b5:06:
         e2:58:22:7b:d1:b1:ba:d9:3c:f3:8d:7e:63:d1:9a:0d:38:94:
         08:de:12:d8:21:a3:a2:47:b2:d0:b9:a6:be:d5:13:08:36:5f:
         4f:7f:9f:a8:60:ea:be:17:f3:99:ce:ad:d3:d4:cd:1c:1c:76:
         3c:b0:ee:90:18:da:c6:43:44:7f:68:9a:79:e4:8a:21:ca:d1:
         86:68:57:8a:6d:be:0e:be:55:fe:d1:86:21:31:ce:2f:4b:b5:
         71:d6:8a:f9:8c:f3:e4:88:ae:f2:b0:a9:76:28:d8:a5:1c:ba:
         91:74:e6:2a:cd:6c:3b:0f:90:3f:c9:4f:1b:1e:53:69:17:31:
         d9:89:64:ba:96:5c:48:ff:33:f0:67:b0:89:72:fc:32:2d:5d:
         ac:5d:e0:bc:49:f6:3e:2c:4d:20:08:df:ed:fb:b2:86:4f:a5:
         f9:78:a8:6b:10:ce:0e:19:0e:74:b7:47:a3:c5:c1:19:d2:26:
         8a:a4:5a:8c:ea:4c:e3:cd:95:ed:30:21:07:f6:94:d6:ae:7e:
         08:cf:fe:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:33:27 2026 by rpki-client