This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/8dwNjvL9MJgQI0OVV7woi3xWYxI.roa
File:                     8dwNjvL9MJgQI0OVV7woi3xWYxI.roa (raw, json)
Hash identifier:          pvzPPY8ueJkU8NUuAq5vy1y2A7mjLuLyMdlQjovqvLI=
Subject key identifier:   F1:DC:0D:8E:F2:FD:30:98:10:23:43:95:57:BC:28:8B:7C:56:63:12
Certificate issuer:       /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial:       019B775885385D8D1D6BD747F35FCECD8B2C
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/8dwNjvL9MJgQI0OVV7woi3xWYxI.roa
Signing time:             Thu 01 Jan 2026 02:17:28 +0000
ROA not before:           Thu 01 Jan 2026 02:17:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2089
IP address blocks:        193.48.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:85:38:5d:8d:1d:6b:d7:47:f3:5f:ce:cd:8b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
        Validity
            Not Before: Jan  1 02:17:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f1dc0d8ef2fd30981023439557bc288b7c566312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e9:6b:3f:de:0e:86:d4:29:bb:ef:f1:52:b2:
                    02:94:49:4d:25:99:f1:7f:3a:ea:4d:16:25:13:0e:
                    d8:d4:89:a9:e1:12:40:58:1c:3c:31:29:ab:78:d8:
                    e8:66:0a:87:22:d5:1c:0d:bb:4e:e5:1c:f6:2c:15:
                    34:7f:f2:cb:a2:16:6c:77:90:61:d7:60:d0:4c:4a:
                    a8:0f:19:e0:6e:9e:c7:0c:0e:fc:c7:50:5a:22:16:
                    2d:f7:23:b6:53:3b:c1:c7:93:bd:1e:9d:98:42:31:
                    f4:47:4c:18:32:6d:71:dc:55:c4:54:17:61:8b:dd:
                    df:05:23:e4:95:41:8a:2e:f1:1d:fa:fd:39:77:78:
                    a2:1f:81:3a:79:b5:62:92:3f:3a:89:ac:fc:ac:6d:
                    e8:4e:fa:5e:e7:99:06:aa:5f:09:18:c8:a8:6c:1c:
                    5a:4f:d9:52:c9:bb:2c:be:d9:3b:9c:25:72:09:74:
                    ef:a2:99:a2:90:74:ad:0a:10:86:7e:23:f1:b5:b6:
                    eb:46:92:cf:5f:5c:80:22:9e:3a:ac:b2:c0:ad:82:
                    48:ad:a7:f7:0b:44:f8:00:1e:21:e2:2f:5d:39:ee:
                    ab:88:c2:19:5b:a6:87:e0:ee:1b:4f:c4:2f:71:75:
                    db:06:f5:cc:2c:2a:86:e4:37:6d:22:05:0f:d0:2d:
                    71:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DC:0D:8E:F2:FD:30:98:10:23:43:95:57:BC:28:8B:7C:56:63:12
            X509v3 Authority Key Identifier:
                keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/8dwNjvL9MJgQI0OVV7woi3xWYxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.48.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:9b:44:d1:84:42:f6:ee:05:78:18:c9:f5:6c:67:e5:d3:16:
         31:cf:4d:29:b1:88:6d:50:5d:72:a8:1f:57:e0:cc:e6:20:7b:
         02:49:ee:01:e7:ca:99:e1:8b:4e:ed:03:a3:65:d3:0a:8a:2b:
         1a:ff:20:14:f9:15:07:c6:3f:10:ef:70:1a:24:a9:35:2c:e1:
         04:57:b2:d8:79:5c:32:3d:e2:0b:90:3e:12:e5:1f:f6:74:85:
         af:2e:3f:2d:92:32:66:4d:c8:dd:92:a9:50:c5:e6:e9:46:04:
         df:18:d4:08:b9:3c:ef:80:d2:c6:a5:1d:77:8a:21:5a:c5:5a:
         32:fd:56:a3:e6:b2:da:2b:93:a3:42:a7:1e:bf:c6:31:50:a7:
         2e:ea:00:2d:c0:e1:cf:51:2e:2c:1a:cb:b6:61:89:bc:bc:ce:
         46:36:c9:14:ed:a2:94:e7:16:07:69:65:69:2a:56:ad:86:63:
         58:cc:18:c6:30:0e:39:c3:66:9f:03:53:41:49:c4:75:41:14:
         cb:e7:67:3d:88:82:6b:ef:60:d0:85:f3:0d:36:19:ea:62:f0:
         cf:91:0d:19:a6:9d:1f:10:64:2e:9d:ec:8c:da:84:9f:4a:61:
         25:26:b9:8e:ac:13:4d:bf:37:54:c6:4d:49:d7:a3:ff:a6:94:
         51:51:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:38:59 2026 by rpki-client