This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/TMnA4OzjFSc5PKpazYmWHcCAACk.roa
File:                     TMnA4OzjFSc5PKpazYmWHcCAACk.roa (raw, json)
Hash identifier:          gSu9KbW6rtahrOrQHfiR6JyTob/6jze4lexbTQbl0SI=
Subject key identifier:   4C:C9:C0:E0:EC:E3:15:27:39:3C:AA:5A:CD:89:96:1D:C0:80:00:29
Certificate issuer:       /CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
Certificate serial:       019B78A20F4B74BD46B64B7ADBAB8BF3AED0
Authority key identifier: 12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/TMnA4OzjFSc5PKpazYmWHcCAACk.roa
Signing time:             Thu 01 Jan 2026 08:17:25 +0000
ROA not before:           Thu 01 Jan 2026 08:17:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34762
IP address blocks:        193.109.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:0f:4b:74:bd:46:b6:4b:7a:db:ab:8b:f3:ae:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
        Validity
            Not Before: Jan  1 08:17:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4cc9c0e0ece31527393caa5acd89961dc0800029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:26:9f:08:4a:dc:ae:40:d1:cf:17:e6:fd:75:
                    af:75:55:b6:18:86:3a:c5:68:3b:6a:07:a8:15:cc:
                    f2:01:18:5a:1f:d7:fd:c6:0a:52:b1:29:77:c6:b0:
                    39:f0:af:80:3f:16:0e:97:2b:0a:4f:1e:e4:2f:3c:
                    34:58:b3:23:d0:3c:9a:93:9d:62:3f:55:23:b4:a6:
                    a9:c3:0c:eb:b6:f7:75:d5:0e:44:db:5c:ab:1c:11:
                    73:51:4f:4b:58:a6:10:8c:7e:b7:0b:e9:37:f8:6c:
                    50:cb:9a:eb:18:49:d4:6e:fa:ec:4b:f6:d4:1a:71:
                    3c:ea:eb:b3:30:3a:92:48:6b:d1:4a:bc:f9:36:51:
                    14:68:1c:96:ba:e8:c1:fa:8c:8a:f1:cc:62:63:19:
                    88:d9:f8:e8:58:41:f0:13:aa:82:20:d3:53:12:da:
                    e2:63:7a:68:93:f9:10:04:20:10:83:1f:18:ca:2a:
                    02:35:3b:09:a3:6a:8b:88:80:66:b5:a7:15:82:4b:
                    d8:f8:27:52:58:4d:74:c4:99:68:7a:bb:5f:da:2b:
                    a1:7d:16:78:da:89:31:ff:85:3e:6f:36:98:10:6d:
                    99:68:8d:f8:a5:05:b0:a3:b1:11:b6:a9:75:68:a1:
                    99:ec:3f:32:51:94:db:b8:44:b9:6c:ec:f2:fe:66:
                    27:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C9:C0:E0:EC:E3:15:27:39:3C:AA:5A:CD:89:96:1D:C0:80:00:29
            X509v3 Authority Key Identifier:
                keyid:12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/TMnA4OzjFSc5PKpazYmWHcCAACk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:84:d9:c8:da:93:cc:8b:42:13:3a:a9:bd:da:ff:5d:22:06:
         a0:1d:00:24:8e:2a:de:af:21:1d:55:e2:ae:ea:3c:06:3e:bb:
         cd:5a:fa:d6:38:1a:48:5d:41:3c:2b:9d:4f:3f:56:3b:58:e7:
         c9:27:09:72:4c:37:f6:aa:8c:e1:10:1d:1e:0a:41:d5:57:83:
         c4:ef:52:44:84:84:5a:dc:9a:9b:f7:06:b9:b3:a1:7a:ca:e6:
         c5:07:fc:06:02:16:6c:2b:cb:7b:3f:10:06:2c:9d:60:83:af:
         97:20:06:7d:4f:45:31:ce:65:be:fb:2f:fc:ef:39:59:e0:eb:
         2b:da:5a:d8:63:54:59:12:82:8e:bf:ac:40:72:24:61:d7:81:
         f9:b2:4a:ce:2c:bc:20:9d:30:e3:ec:b7:8b:1e:28:57:e7:9f:
         fa:6e:85:a8:26:a2:64:db:21:93:ac:22:b8:0d:3a:1d:f9:ae:
         58:a1:84:8a:bb:25:e1:29:02:83:98:89:e5:41:e0:e7:56:b2:
         b1:2f:e1:26:1e:bd:2d:75:72:a8:14:81:04:0d:b5:07:3a:2c:
         f4:22:77:1e:89:a7:c5:5a:a2:1f:64:fa:da:63:ff:25:2e:1b:
         bc:57:71:b4:f6:99:64:05:71:21:1b:f7:03:ab:83:32:8c:de:
         dc:98:e8:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4og9LdL1Gtkt626uL867QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYWEyYzFlZTQzNDlhMDg2Yzc2OTAxM2E0MmU4YjRhYzJi
YTE5YmYwHhcNMjYwMTAxMDgxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2M5YzBlMGVjZTMxNTI3MzkzY2FhNWFjZDg5OTYxZGMwODAwMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiafCErcrkDRzxfm/XWvdVW2GIY6
xWg7ageoFczyARhaH9f9xgpSsSl3xrA58K+APxYOlysKTx7kLzw0WLMj0Dyak51i
P1UjtKapwwzrtvd11Q5E21yrHBFzUU9LWKYQjH63C+k3+GxQy5rrGEnUbvrsS/bU
GnE86uuzMDqSSGvRSrz5NlEUaByWuujB+oyK8cxiYxmI2fjoWEHwE6qCINNTEtri
Y3pok/kQBCAQgx8YyioCNTsJo2qLiIBmtacVgkvY+CdSWE10xJloertf2iuhfRZ4
2okx/4U+bzaYEG2ZaI34pQWwo7ERtql1aKGZ7D8yUZTbuES5bOzy/mYnUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEzJwODs4xUnOTyqWs2Jlh3AgAApMB8GA1UdIwQY
MBaAFBKqLB7kNJoIbHaQE6Qui0rCuhm/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXFvc0h1UTBtZ2hzZHBBVHBDNkxTc0s2R2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82MDc3YTEtY2VjNi00MzdjLWJjOTAt
ZDEyMGRhM2U4ZTkyLzEvVE1uQTRPempGU2M1UEtwYXpZbVdIY0NBQUNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82MDc3YTEtY2VjNi00MzdjLWJjOTAtZDEyMGRhM2U4ZTky
LzEvRXFvc0h1UTBtZ2hzZHBBVHBDNkxTc0s2R2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW3kMA0G
CSqGSIb3DQEBCwUAA4IBAQBAhNnI2pPMi0ITOqm92v9dIgagHQAkjireryEdVeKu
6jwGPrvNWvrWOBpIXUE8K51PP1Y7WOfJJwlyTDf2qozhEB0eCkHVV4PE71JEhIRa
3Jqb9wa5s6F6yubFB/wGAhZsK8t7PxAGLJ1gg6+XIAZ9T0UxzmW++y/87zlZ4Osr
2lrYY1RZEoKOv6xAciRh14H5skrOLLwgnTDj7LeLHihX55/6boWoJqJk2yGTrCK4
DTod+a5YoYSKuyXhKQKDmInlQeDnVrKxL+EmHr0tdXKoFIEEDbUHOiz0InceiafF
WqIfZPraY/8lLhu8V3G09plkBXEhG/cDq4MyjN7cmOhP
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:06:07 2026 by rpki-client