This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/lQ47t4cinUX2Zd4lU-kVod80YBY.roa
File:                     lQ47t4cinUX2Zd4lU-kVod80YBY.roa (raw, json)
Hash identifier:          9fN+vypDbYHdWtZGhrsCb1aCBdMbisC6WmQVwPJJbhg=
Subject key identifier:   95:0E:3B:B7:87:22:9D:45:F6:65:DE:25:53:E9:15:A1:DF:34:60:16
Certificate issuer:       /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial:       019B7C7FBA5277862CCEDF467BC4C137212F
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/lQ47t4cinUX2Zd4lU-kVod80YBY.roa
Signing time:             Fri 02 Jan 2026 02:18:24 +0000
ROA not before:           Fri 02 Jan 2026 02:18:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210158
IP address blocks:        193.36.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:ba:52:77:86:2c:ce:df:46:7b:c4:c1:37:21:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
        Validity
            Not Before: Jan  2 02:18:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=950e3bb787229d45f665de2553e915a1df346016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c8:bb:00:64:f0:f8:68:df:fd:14:3b:b7:59:
                    65:da:6c:66:60:1c:6d:f9:e7:fc:b2:b8:9d:02:4f:
                    88:98:ec:53:c5:6d:36:df:c6:1b:61:6b:fd:aa:04:
                    09:3e:34:c2:d3:82:d2:fc:73:2d:4c:79:f6:96:9c:
                    35:d3:08:f0:33:81:26:46:b7:81:30:42:e0:c6:3f:
                    20:9c:47:1c:d2:8e:7e:31:90:16:ad:b2:87:a2:44:
                    68:db:bb:30:65:8d:11:73:80:f2:81:1a:cd:5e:ec:
                    1d:d3:ae:a7:17:1e:99:4f:f1:90:7f:87:6d:94:70:
                    25:62:3d:18:9b:12:f1:cb:26:4f:dc:78:7e:15:26:
                    54:0e:7e:e7:f5:5e:c9:23:33:8f:f4:26:01:12:79:
                    e7:3f:87:82:b1:7b:e1:1e:c8:2a:b4:eb:c4:bb:fa:
                    85:10:2b:70:bc:6f:73:3e:77:74:15:43:ab:35:b3:
                    a9:89:b5:0f:ce:b1:e1:33:48:2c:0a:7a:ff:7e:9d:
                    9a:5e:e2:cb:2b:d0:f2:b3:f2:73:60:bf:82:c2:61:
                    0f:cd:97:25:81:a4:d8:91:cf:55:b4:69:7a:a5:f5:
                    c3:01:24:46:43:d5:02:ec:df:88:fa:c0:c1:35:53:
                    ab:53:2a:24:1d:a1:62:1a:76:5d:06:f6:6e:0e:f8:
                    61:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0E:3B:B7:87:22:9D:45:F6:65:DE:25:53:E9:15:A1:DF:34:60:16
            X509v3 Authority Key Identifier:
                keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/lQ47t4cinUX2Zd4lU-kVod80YBY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.36.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:cf:42:5e:47:26:f8:28:1a:f0:72:9c:05:33:30:04:a3:10:
         1b:73:d0:70:01:9a:0d:ce:4f:90:7e:4e:ae:40:44:b2:09:86:
         b3:dc:30:67:ae:f9:69:41:2d:2d:98:a6:d2:a6:f4:b4:27:03:
         cd:15:42:46:f1:04:eb:6c:8e:cb:c3:7c:f8:b3:de:7a:bf:59:
         c7:30:9e:dc:c6:b7:2c:66:b6:f1:f2:b3:fa:8e:a5:a6:3f:a2:
         c2:24:0d:6c:61:5d:fb:da:17:76:b7:87:c0:c6:8a:42:66:dc:
         b3:0b:93:92:75:68:4e:84:b9:89:cb:6d:3f:fd:d5:af:ae:98:
         00:04:39:41:2b:80:d7:39:24:92:1d:21:b6:4b:f3:44:e2:5f:
         94:33:93:7f:c0:05:51:5b:bc:4b:6b:86:7c:9d:4c:04:35:ed:
         70:2d:c6:df:86:ac:c9:5a:ad:5d:8c:90:c9:9c:f8:f3:0f:a5:
         3b:d9:d7:29:a1:b5:7f:c3:17:25:c3:59:f9:f0:1d:b1:be:b4:
         3f:13:3f:07:b6:6f:0e:49:1b:42:59:2c:db:bf:a2:c6:c0:06:
         4a:fd:1d:f6:a4:17:bf:79:64:13:c8:9e:37:4f:c5:24:46:08:
         86:19:ac:a6:63:bb:00:85:07:dc:26:03:b0:22:46:a8:1f:a9:
         4d:72:a8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:06:12 2026 by rpki-client