This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/M52AATjdXBgxajzktnux2QbLdug.roa
File:                     M52AATjdXBgxajzktnux2QbLdug.roa (raw, json)
Hash identifier:          S4m/c7OnNxor+S/UX1Qxo2msu+sB/UbCE+Y/qKNHiQo=
Subject key identifier:   33:9D:80:01:38:DD:5C:18:31:6A:3C:E4:B6:7B:B1:D9:06:CB:76:E8
Certificate issuer:       /CN=ee8b27904d11bcf536774d541542082cfafe8eaa
Certificate serial:       019AFE2BB8C19E0CAD4EEABC476EBEB3EDE0
Authority key identifier: EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/M52AATjdXBgxajzktnux2QbLdug.roa
Signing time:             Mon 08 Dec 2025 13:34:29 +0000
ROA not before:           Mon 08 Dec 2025 13:34:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        193.109.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fe:2b:b8:c1:9e:0c:ad:4e:ea:bc:47:6e:be:b3:ed:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8b27904d11bcf536774d541542082cfafe8eaa
        Validity
            Not Before: Dec  8 13:34:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=339d800138dd5c18316a3ce4b67bb1d906cb76e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:5b:78:17:c0:4e:3d:51:19:8b:fb:17:9a:
                    67:8b:af:8f:f1:a9:e6:9b:b2:38:bf:b3:dc:b9:21:
                    5c:ca:ee:7c:87:c6:a6:f1:d9:14:54:28:f8:39:44:
                    9d:f1:a2:ff:22:7c:71:3b:99:c0:ff:58:8f:d1:4e:
                    80:37:ea:d6:8c:e4:5a:5e:bc:ca:ab:48:27:75:37:
                    72:9a:d9:cc:18:a7:55:7f:da:f8:c4:7d:e0:b2:77:
                    a9:e4:85:d1:b3:f8:8a:d7:e3:7d:cc:d1:35:e8:98:
                    21:87:06:1c:2c:b9:07:f9:6d:8e:6e:82:f8:f9:2f:
                    77:77:d5:bc:3f:c3:ce:20:08:53:c8:ac:52:50:93:
                    39:71:4e:0d:30:42:a7:3a:5e:a4:85:b1:0e:2d:80:
                    98:ab:77:52:c7:87:ed:dd:88:85:2a:4e:ed:d8:06:
                    dd:c7:5a:78:83:7b:11:80:32:ef:0e:37:ee:23:17:
                    1f:f3:0f:90:eb:02:f1:a4:e4:bf:0f:49:99:17:ee:
                    49:1c:51:e9:1a:9e:82:80:ad:3f:9b:22:cd:87:e7:
                    4f:99:ff:b2:f4:48:0d:dc:01:c7:2c:63:e1:ef:d1:
                    fb:34:f1:ef:cb:cb:53:33:a9:aa:f3:1f:50:2f:7a:
                    e2:4f:a5:38:be:b3:62:f4:a5:a5:14:a4:d5:0a:4b:
                    49:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9D:80:01:38:DD:5C:18:31:6A:3C:E4:B6:7B:B1:D9:06:CB:76:E8
            X509v3 Authority Key Identifier:
                keyid:EE:8B:27:90:4D:11:BC:F5:36:77:4D:54:15:42:08:2C:FA:FE:8E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7osnkE0RvPU2d01UFUIILPr-jqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/M52AATjdXBgxajzktnux2QbLdug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/db4d38-a514-427e-8d76-cc64d13a612c/1/7osnkE0RvPU2d01UFUIILPr-jqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:47:53:51:cf:1a:6c:98:f3:ce:76:79:55:f5:1c:a2:18:df:
         2b:34:46:7d:40:f6:b6:dd:64:af:de:66:86:6c:0a:6d:9b:bd:
         fa:8b:61:81:3f:d1:ee:e6:30:48:73:1a:2e:0a:37:7f:d6:fa:
         00:84:4d:6c:8c:0f:33:28:53:03:62:56:d6:32:3a:d2:37:48:
         0a:0a:36:ce:a8:4f:32:7b:77:6a:e8:40:d1:26:93:23:97:cb:
         d0:bc:01:1c:02:84:58:4f:dd:35:f1:a7:c4:5f:11:38:cd:c1:
         b2:c5:04:cf:23:b3:d0:db:09:ca:81:50:5b:75:d0:10:98:57:
         c0:24:99:d2:ff:fd:9c:f8:a6:0f:86:9b:39:05:3b:12:86:76:
         84:e8:8d:de:0d:17:9c:77:47:2a:43:05:d2:5e:3f:f2:fb:31:
         09:ac:83:f3:8a:c7:51:9e:df:da:2b:63:99:63:95:7c:7c:56:
         57:16:17:6c:97:07:67:e2:3f:2e:3e:a8:27:6b:19:01:2c:2a:
         01:fc:c9:58:22:ad:03:4c:14:af:ad:98:cf:a3:57:19:40:52:
         8d:ce:83:15:61:08:73:fd:b9:86:2c:b4:92:75:e2:67:51:b1:
         ab:7b:45:e8:59:ad:4d:4c:67:c5:4c:25:5f:22:79:f1:19:45:
         b5:fe:15:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 18:14:02 2025 by rpki-client