This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/AUmE2YbKzYGKohczr4jMETToilY.roa
File:                     AUmE2YbKzYGKohczr4jMETToilY.roa (raw, json)
Hash identifier:          HU9CxUgtmqm30Tk4KPw7deDUwU0eCp+soz3LnSEevJY=
Subject key identifier:   01:49:84:D9:86:CA:CD:81:8A:A2:17:33:AF:88:CC:11:34:E8:8A:56
Certificate issuer:       /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial:       019B77C67B6DB30BDD0915F3B8A0CF90E849
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/AUmE2YbKzYGKohczr4jMETToilY.roa
Signing time:             Thu 01 Jan 2026 04:17:35 +0000
ROA not before:           Thu 01 Jan 2026 04:17:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210058
IP address blocks:        93.175.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:7b:6d:b3:0b:dd:09:15:f3:b8:a0:cf:90:e8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
        Validity
            Not Before: Jan  1 04:17:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=014984d986cacd818aa21733af88cc1134e88a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:14:ba:fc:c6:a6:2e:ae:dc:d1:60:22:40:
                    ac:36:00:e2:ca:0d:87:43:a1:c3:80:0d:41:c4:80:
                    dc:2a:ee:5a:dd:7b:77:8e:3d:a9:e9:69:df:c6:fa:
                    9b:bb:f2:9e:78:39:bd:e9:e8:ac:8a:ea:8e:e2:e5:
                    bd:81:ae:54:f1:68:a9:cf:b7:bc:7d:29:f9:54:99:
                    f7:76:5d:5a:d0:35:e1:3f:d0:c6:8e:44:7b:e3:c8:
                    af:83:6c:76:d0:ca:ce:0b:5a:ff:de:4d:f3:f8:f0:
                    54:f0:da:fb:a3:e7:72:0d:6b:09:50:6f:25:c3:3d:
                    70:69:dc:91:48:81:27:c4:88:f9:ac:83:d0:b5:2d:
                    55:97:f5:fb:26:de:2b:55:a8:29:77:28:4f:5a:e0:
                    9f:af:3c:c1:d0:11:b1:2c:81:d4:2a:c7:c4:b4:ab:
                    69:9d:93:8e:3b:19:bc:83:b6:3b:95:f6:85:66:54:
                    cc:cb:5d:a4:06:10:94:bc:78:e7:a8:dc:f4:ec:08:
                    73:94:37:2c:ca:35:4b:ec:66:a0:3f:b2:65:3c:5a:
                    d5:18:ce:f6:39:49:dd:88:cf:88:bc:2a:9b:ac:6d:
                    4b:ec:64:f8:a2:14:43:70:c4:ee:06:7f:88:d1:b4:
                    3a:52:52:39:87:37:f4:bb:d3:b1:ec:32:96:1d:ca:
                    7a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:49:84:D9:86:CA:CD:81:8A:A2:17:33:AF:88:CC:11:34:E8:8A:56
            X509v3 Authority Key Identifier:
                keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/AUmE2YbKzYGKohczr4jMETToilY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.175.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:21:5a:8c:2b:54:52:49:04:d4:de:c5:c8:79:16:fb:59:b8:
         ca:41:2b:78:9b:f8:63:a8:06:9f:2c:75:f9:5b:82:9c:6a:ca:
         35:c6:13:e3:74:c1:07:83:47:3d:4a:49:62:13:50:7c:39:94:
         fb:4b:4e:44:36:4a:f7:c0:de:13:49:eb:3b:36:33:f7:44:9e:
         de:b0:ac:27:c6:33:51:32:71:b1:f8:02:00:4c:78:35:95:d7:
         35:1b:0d:8d:b3:fe:cc:7a:48:68:ea:42:8e:91:61:c3:f8:ec:
         d1:ce:66:0a:41:15:9f:b8:84:de:d4:13:62:dc:10:00:d7:bd:
         ab:dc:80:44:61:26:04:6f:f1:56:01:4d:cc:25:7f:51:7b:0f:
         6d:61:37:f6:18:b7:b9:65:8f:85:20:52:16:62:97:e4:11:86:
         ff:49:7d:d8:a9:de:c6:64:32:dc:f2:38:0e:42:0d:a3:c1:4f:
         97:c3:8a:2a:86:39:30:72:0f:8b:b3:45:b9:db:d6:2d:16:ab:
         09:69:a5:1c:6b:c6:5a:a5:af:8f:e3:84:4c:2a:10:b4:0c:e2:
         ac:14:65:8e:f8:3e:ef:45:2e:93:d2:64:84:cd:f1:76:91:26:
         67:bf:57:d5:00:a6:30:cd:68:c9:cc:e2:f0:58:31:57:d1:21:
         12:2c:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:54:28 2026 by rpki-client