This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/ogybvPCYv0zaHbI7IAnfqKXESCM.roa
File:                     ogybvPCYv0zaHbI7IAnfqKXESCM.roa (raw, json)
Hash identifier:          LonaEgi/rXosvauw091QvQs3rhGZRi+ZXg091i9IY6A=
Subject key identifier:   A2:0C:9B:BC:F0:98:BF:4C:DA:1D:B2:3B:20:09:DF:A8:A5:C4:48:23
Certificate issuer:       /CN=3f296fe945a23180753f67f7748e6f299d2e672a
Certificate serial:       019B775937A2B4DF94FFCD00252AE869D031
Authority key identifier: 3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/ogybvPCYv0zaHbI7IAnfqKXESCM.roa
Signing time:             Thu 01 Jan 2026 02:18:14 +0000
ROA not before:           Thu 01 Jan 2026 02:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205826
IP address blocks:        193.19.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:37:a2:b4:df:94:ff:cd:00:25:2a:e8:69:d0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f296fe945a23180753f67f7748e6f299d2e672a
        Validity
            Not Before: Jan  1 02:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a20c9bbcf098bf4cda1db23b2009dfa8a5c44823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b9:65:5e:26:25:46:37:43:60:c0:18:d9:de:
                    2b:82:3d:76:0f:8d:ef:48:26:8c:8f:4e:7d:9e:f8:
                    13:b1:a6:92:71:d1:6d:7d:07:74:e9:cf:e4:f3:6a:
                    7c:d2:5a:d2:2e:c1:07:f7:4e:21:b4:f8:ac:86:6e:
                    fc:47:69:c7:1b:78:4e:17:ad:5a:96:1f:6b:3d:3e:
                    ab:b3:99:45:44:12:ac:59:f4:71:d8:d2:0f:fb:2f:
                    49:38:c6:df:c2:99:eb:1d:9c:78:f1:1b:ff:45:3c:
                    35:80:57:48:b8:9b:df:b5:e0:8b:28:7f:2c:38:ca:
                    4c:af:79:67:65:48:32:89:db:c1:16:70:a7:ab:a8:
                    77:34:d6:09:d4:3f:7f:3a:f4:4f:f5:b5:c6:d7:d8:
                    d9:0e:38:7e:5e:a1:ff:24:91:f5:a4:10:37:2c:49:
                    2b:a0:24:5a:1f:1e:cd:32:66:a8:e4:1d:e6:1e:5b:
                    ea:18:46:28:75:bc:26:41:2d:62:ba:99:fa:be:e8:
                    28:d3:93:1b:a8:8c:94:45:4c:88:73:87:d2:af:4a:
                    3e:d2:5c:ba:01:41:fd:20:30:18:ff:d4:f6:a8:5b:
                    f6:af:8c:22:9a:df:62:e4:4d:d9:37:31:fa:12:c8:
                    41:3d:d1:5b:99:de:84:cf:0e:c1:af:f2:bb:75:ee:
                    60:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0C:9B:BC:F0:98:BF:4C:DA:1D:B2:3B:20:09:DF:A8:A5:C4:48:23
            X509v3 Authority Key Identifier:
                keyid:3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/ogybvPCYv0zaHbI7IAnfqKXESCM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.19.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:c2:20:2f:8a:3d:a6:63:5c:e6:aa:ff:87:4d:4e:97:5c:41:
         e9:ef:8a:dd:09:6c:c4:57:d8:7f:6d:48:0b:a7:74:27:e4:7c:
         bf:52:ec:fe:a4:bc:37:24:d5:fd:49:a9:cd:75:53:16:94:96:
         06:12:cb:30:34:6f:14:5a:fd:3c:78:27:bf:62:1e:1b:db:8b:
         03:16:40:aa:0d:1e:d9:be:a9:bc:f1:82:b9:32:f2:c3:99:45:
         0b:e1:a7:2d:36:04:a2:3a:14:0b:43:e4:ac:f9:4d:0b:cc:97:
         3e:d3:b3:3a:55:df:9e:85:50:e9:73:95:5e:5a:47:5a:71:b8:
         e6:81:5a:b8:1f:43:d3:86:0f:16:c1:9a:82:30:96:ce:5d:70:
         ab:94:b8:f6:b3:67:5a:e7:b9:7e:fd:d0:c8:ae:f8:25:9f:5a:
         97:2f:ec:ff:68:f1:1d:72:8a:8e:a0:73:07:15:ca:7c:5d:ef:
         ec:63:76:bc:d2:80:16:67:45:79:d9:7b:51:3a:c1:54:f0:4f:
         0e:8b:bd:b8:7b:82:e5:69:44:0f:1e:34:e7:55:ac:8d:d1:41:
         9d:ca:53:80:43:de:bc:7d:46:7c:1c:73:7f:f3:f4:65:ec:72:
         1b:02:9e:86:96:72:0d:13:51:10:ab:20:87:a8:38:b8:ac:e4:
         12:10:0f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:18:07 2026 by rpki-client