This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/inAZqVvbiAHgmsVOQao9R4JbZso.roa
File:                     inAZqVvbiAHgmsVOQao9R4JbZso.roa (raw, json)
Hash identifier:          zU0uu0t4HLwKrI9w1yyx4XrHakdpeUbRFtc2CbGyHCM=
Subject key identifier:   8A:70:19:A9:5B:DB:88:01:E0:9A:C5:4E:41:AA:3D:47:82:5B:66:CA
Certificate issuer:       /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial:       019B7E3932712D8B06374BB9FF4BCE3AA44A
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/inAZqVvbiAHgmsVOQao9R4JbZso.roa
Signing time:             Fri 02 Jan 2026 10:20:36 +0000
ROA not before:           Fri 02 Jan 2026 10:20:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209242
IP address blocks:        193.57.116.0/24 maxlen: 24
                          193.57.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:32:71:2d:8b:06:37:4b:b9:ff:4b:ce:3a:a4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
        Validity
            Not Before: Jan  2 10:20:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8a7019a95bdb8801e09ac54e41aa3d47825b66ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:df:d8:e4:c9:c9:1d:06:fb:64:64:6d:0b:a8:
                    b0:0a:44:cd:9e:f0:9c:d2:5e:bb:10:7f:1e:0d:c0:
                    41:b8:e5:5e:ee:93:99:14:89:0d:38:31:ee:74:0a:
                    11:3b:63:94:5e:4c:0e:09:ef:20:ca:05:73:06:25:
                    e8:50:80:ce:48:62:d3:29:a8:be:3b:e1:78:2e:0a:
                    9f:30:db:1d:f3:14:55:3c:97:6c:a7:70:b3:b0:79:
                    5b:48:d3:c6:0f:89:cd:10:6f:05:c0:0b:3c:08:34:
                    21:64:eb:f0:de:df:85:43:3a:ac:f9:28:68:a0:08:
                    dd:41:3f:dd:14:b1:89:ea:fd:88:6a:e4:b8:79:b0:
                    09:c4:b2:4f:8b:ac:3f:ff:ea:84:9a:08:cd:d9:94:
                    13:b5:f2:94:54:31:1d:9e:5b:07:ad:6d:de:5e:81:
                    67:f6:7b:47:b3:3f:f9:8b:b8:e7:8b:5c:14:80:c9:
                    00:0f:76:1b:15:e2:5b:c5:93:da:67:be:59:ee:aa:
                    93:e6:2c:e6:f6:f3:92:95:70:46:11:d0:6f:68:20:
                    f7:a5:e9:45:e1:63:9c:4f:47:f0:aa:4f:39:4a:63:
                    ec:3b:c7:85:7b:88:0a:90:25:e3:28:29:03:9c:38:
                    39:6f:33:8e:86:bb:dc:6b:1f:01:a2:85:54:ea:0d:
                    92:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:70:19:A9:5B:DB:88:01:E0:9A:C5:4E:41:AA:3D:47:82:5B:66:CA
            X509v3 Authority Key Identifier:
                keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/inAZqVvbiAHgmsVOQao9R4JbZso.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.57.116.0/24
                  193.57.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:3c:75:fe:52:fd:97:50:c5:0e:4e:88:1d:19:70:09:ee:4d:
         80:8b:aa:8c:df:ba:1f:23:84:bd:67:bc:2c:99:cb:96:4c:c9:
         dd:7d:89:9c:23:e4:a5:7b:31:57:33:f8:1a:cd:45:94:d2:da:
         d6:71:12:bb:8a:63:1b:50:aa:0f:43:8b:4b:b5:71:18:76:32:
         8b:e5:9a:e5:56:15:6e:71:cd:97:f1:14:89:2b:f7:05:3a:a8:
         4a:a1:0c:fc:e5:55:1d:b8:2e:42:6c:0e:56:99:46:fc:0d:bd:
         18:e6:b3:25:ab:60:00:6b:90:a7:9f:c8:9d:6f:17:6a:9c:14:
         93:cd:06:1b:1a:23:d8:b4:8f:f4:2f:d3:a5:e8:17:44:88:21:
         42:a8:6d:78:bd:6f:34:42:e9:a4:97:30:bd:3d:96:d6:0d:1d:
         e6:1f:7f:22:73:bd:ff:f9:99:bc:1d:6e:18:38:54:43:f9:64:
         9f:07:cf:0a:eb:d3:d4:76:17:71:d5:19:68:a4:d1:03:c3:5f:
         40:18:3c:cb:e8:5d:f2:a1:7b:92:5c:8a:43:c6:c8:ad:f1:5d:
         de:fb:5c:b8:37:de:8a:2e:56:88:9a:c7:33:0a:c0:be:84:f3:
         d9:34:5c:9d:45:b3:cb:3c:6d:a5:22:01:f5:df:a6:1d:7b:a2:
         72:2a:aa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:41:06 2026 by rpki-client