This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sYEwWlPe7NblI8DgWQZ3jhLaE8Q.roa
File:                     sYEwWlPe7NblI8DgWQZ3jhLaE8Q.roa (raw, json)
Hash identifier:          BaCQ4U5sK1pmK3P7a0ghqdEqH/T5vgtLCa1KzPrm5mI=
Subject key identifier:   B1:81:30:5A:53:DE:EC:D6:E5:23:C0:E0:59:06:77:8E:12:DA:13:C4
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019A9709DECFC6EDF425E9E707DAC1F8EFDD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sYEwWlPe7NblI8DgWQZ3jhLaE8Q.roa
Signing time:             Tue 18 Nov 2025 12:56:37 +0000
ROA not before:           Tue 18 Nov 2025 12:56:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9123
IP address blocks:        93.190.244.0/24 maxlen: 24
                          2a0a:3200::/29 maxlen: 29
                          2a0e:c781::/32 maxlen: 32
                          2a0f:1582::/32 maxlen: 32
                          2a0f:2ec0::/29 maxlen: 29
                          2a13:9580::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:97:09:de:cf:c6:ed:f4:25:e9:e7:07:da:c1:f8:ef:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Nov 18 12:56:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b181305a53deecd6e523c0e05906778e12da13c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:83:3b:87:0f:2d:d0:77:67:6c:4f:d7:2d:d0:
                    df:1a:a2:90:83:73:ab:a5:95:a0:b3:d4:ac:f5:12:
                    ba:50:40:63:fd:fb:28:b6:6c:00:a8:ef:3b:9c:28:
                    3e:d7:f3:5c:d7:4d:ce:28:c2:b6:1b:29:19:ae:d8:
                    82:75:08:8d:45:03:7f:06:03:03:b8:44:b8:1a:fa:
                    ee:98:6b:70:cc:d6:fa:cc:ec:03:1d:19:33:be:ba:
                    45:eb:83:cf:19:33:46:8c:b8:d5:9e:df:35:04:97:
                    b4:e4:1e:42:d2:05:ce:67:e3:cb:2b:53:d7:bd:25:
                    4c:d0:cb:84:e0:51:f9:4d:9c:0b:52:0e:b5:9a:87:
                    2f:9d:6f:42:23:f7:ef:89:d8:b4:fc:53:96:d9:9e:
                    68:33:d7:38:65:93:39:e7:07:1f:be:7e:a7:43:25:
                    45:74:c3:af:41:13:38:e9:62:98:9e:75:6f:ee:5d:
                    70:8f:2a:d5:db:d1:97:91:0d:a4:00:bc:7d:9a:e5:
                    32:5c:8d:69:fa:13:e9:6e:59:a8:3c:93:19:1f:20:
                    bc:cb:7d:29:6f:55:da:d1:6d:f9:cc:19:87:bf:e7:
                    e6:52:86:45:71:8f:4a:1d:13:e8:42:a6:a0:3b:be:
                    f4:91:c8:b4:17:2b:2e:fc:d0:b9:aa:f0:b6:fb:1b:
                    b6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:81:30:5A:53:DE:EC:D6:E5:23:C0:E0:59:06:77:8E:12:DA:13:C4
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sYEwWlPe7NblI8DgWQZ3jhLaE8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.244.0/24
                IPv6:
                  2a0a:3200::/29
                  2a0e:c781::/32
                  2a0f:1582::/32
                  2a0f:2ec0::/29
                  2a13:9580::/29

    Signature Algorithm: sha256WithRSAEncryption
         94:7d:24:37:1c:df:34:06:19:40:9e:95:84:bc:cf:d3:4d:9c:
         be:ff:91:be:b2:81:db:25:12:74:e8:47:f3:3d:ef:05:57:3d:
         af:84:8d:33:e3:13:b0:9c:4d:cd:e0:81:ea:bc:69:a9:d4:ec:
         0c:fb:01:59:5b:55:35:96:82:d4:0a:7a:57:ea:98:6c:79:da:
         67:bc:63:97:09:7e:2f:79:11:57:83:68:b8:52:3a:17:5c:41:
         d5:0f:c8:55:93:ec:22:a4:61:73:6d:c7:af:4f:c3:b4:0e:f6:
         c1:c0:60:de:3a:d4:ed:93:bf:f8:2a:98:97:09:d1:6f:bc:a1:
         ae:6f:16:e9:f8:cd:b6:ee:84:7c:45:ec:d7:f7:b9:85:a5:84:
         bf:cb:89:63:88:7f:9b:29:ce:21:ce:8f:e6:58:7e:3a:08:f0:
         78:e6:20:13:c5:7c:ed:5f:52:4f:24:21:56:4e:6b:17:f0:9e:
         61:a3:e7:10:9a:c1:13:32:6a:34:41:c4:04:bf:72:8e:10:c0:
         ce:26:82:b0:47:6b:ed:ce:3e:d3:e3:32:fd:de:ff:50:a1:30:
         e7:cc:cd:6d:d6:92:c1:53:d8:15:c7:76:f6:dc:d9:8c:97:3b:
         e7:8a:4a:cf:b3:16:c2:d8:df:e7:c0:f6:1b:0f:09:cd:ad:eb:
         cc:94:d5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:45:25 2025 by rpki-client