This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/4T05fIk1IL5XmP-J7JePysAxRKE.roa
File:                     4T05fIk1IL5XmP-J7JePysAxRKE.roa (raw, json)
Hash identifier:          CZTtj6ljL4ZrRColIvs5nHru+2r0m25Gxfk+juu8BnA=
Subject key identifier:   E1:3D:39:7C:89:35:20:BE:57:98:FF:89:EC:97:8F:CA:C0:31:44:A1
Certificate issuer:       /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial:       019B77C674346C030BF28ED0809E002772E6
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/4T05fIk1IL5XmP-J7JePysAxRKE.roa
Signing time:             Thu 01 Jan 2026 04:17:33 +0000
ROA not before:           Thu 01 Jan 2026 04:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31083
IP address blocks:        89.187.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:74:34:6c:03:0b:f2:8e:d0:80:9e:00:27:72:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
        Validity
            Not Before: Jan  1 04:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e13d397c893520be5798ff89ec978fcac03144a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:1f:6b:7f:1e:00:99:69:f0:e0:84:82:c7:
                    59:ab:6f:f0:de:f9:b7:09:cb:56:08:2f:cd:ed:7f:
                    69:8b:91:6d:2d:79:09:35:93:d6:a6:c2:72:90:76:
                    7f:8b:bd:02:e0:0e:1d:76:64:21:44:12:2a:6d:48:
                    11:30:22:4d:cd:f4:d8:e8:ce:b1:83:ff:16:ef:c1:
                    59:68:38:cb:b3:1d:55:c8:b8:a7:95:26:c7:68:38:
                    26:56:09:5d:fd:0e:25:60:9a:5c:f0:d0:05:7b:35:
                    aa:bb:d0:39:97:53:db:60:08:60:b3:db:0f:80:fe:
                    cf:75:aa:55:e7:4d:ba:5c:21:c8:48:b9:3c:34:49:
                    63:e4:5a:18:20:ba:dc:a5:e9:c7:c0:cf:56:c7:e8:
                    54:a5:6f:5a:28:3f:66:8b:1a:fd:09:d9:b1:bf:32:
                    27:6e:4e:19:42:b5:35:3b:09:c2:a6:56:7e:66:15:
                    86:99:b3:f0:68:51:1e:a9:46:42:2b:f8:07:1f:00:
                    d8:9b:56:87:29:0a:31:07:d6:33:5d:35:17:74:74:
                    33:ca:0e:57:51:67:33:f0:eb:1c:51:20:47:db:b9:
                    3e:1e:c5:d7:65:f3:f2:76:8f:d5:29:ea:46:ff:b9:
                    07:1d:10:b3:64:c4:52:ca:c4:5b:1d:70:31:be:bb:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3D:39:7C:89:35:20:BE:57:98:FF:89:EC:97:8F:CA:C0:31:44:A1
            X509v3 Authority Key Identifier:
                keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/4T05fIk1IL5XmP-J7JePysAxRKE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.187.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:10:70:4b:3e:83:2d:cd:79:32:65:ad:71:f3:29:67:2c:7e:
         08:6b:bb:2e:e3:ec:fe:de:73:4a:22:2e:1a:a5:b2:91:7c:7c:
         c8:ca:bd:55:04:46:46:0f:ec:1e:28:34:b3:b4:8f:8b:e1:dd:
         0f:9a:3b:72:0f:a4:75:dd:b4:02:32:13:9b:31:90:ae:15:20:
         01:2a:de:51:9f:7e:d3:e6:56:01:94:38:ee:b6:e1:9c:96:b7:
         a8:6f:22:6f:87:d7:30:47:56:f9:c5:75:8e:e6:28:85:f7:26:
         e9:87:47:ec:37:9d:46:10:8e:35:d0:3a:6b:0b:f2:89:dc:30:
         72:78:c0:86:95:09:12:fa:f1:01:cd:c9:23:ca:fc:a0:49:a2:
         7b:54:e3:13:60:45:65:e1:53:cd:f8:25:95:68:6e:a0:03:11:
         50:4d:ba:91:d0:76:9a:51:d5:34:dc:e9:9a:38:31:18:7e:5b:
         c8:97:55:72:2c:7f:88:59:22:14:38:a7:fb:32:07:15:c6:f0:
         ae:4b:ea:61:39:dc:43:dc:49:cf:7a:c2:c5:e2:d4:f3:5a:39:
         c6:3d:e1:f9:d8:26:fb:78:4a:7e:1f:6f:05:a1:0d:ee:ac:46:
         13:ae:95:6f:a5:db:77:25:f3:90:cb:f3:b4:7b:e6:1d:9a:a1:
         8e:de:a5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:56:50 2026 by rpki-client