This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/RL-eZBtLpxaBQ-5YuIvqntEMuKw.roa
File:                     RL-eZBtLpxaBQ-5YuIvqntEMuKw.roa (raw, json)
Hash identifier:          TSHPY7BwTTX7TS8z+UItG/ro0Zvg2N4BKXVug688uKo=
Subject key identifier:   44:BF:9E:64:1B:4B:A7:16:81:43:EE:58:B8:8B:EA:9E:D1:0C:B8:AC
Certificate issuer:       /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Certificate serial:       019B7C7F5A2E0C251CC8EA4706FD901A69B1
Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/RL-eZBtLpxaBQ-5YuIvqntEMuKw.roa
Signing time:             Fri 02 Jan 2026 02:17:59 +0000
ROA not before:           Fri 02 Jan 2026 02:17:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3215
IP address blocks:        193.222.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:5a:2e:0c:25:1c:c8:ea:47:06:fd:90:1a:69:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
        Validity
            Not Before: Jan  2 02:17:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=44bf9e641b4ba7168143ee58b88bea9ed10cb8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:86:d2:b9:7d:46:9f:99:a8:19:08:46:b8:
                    6a:b2:09:dd:a8:1b:d1:2a:63:79:59:5c:0a:c6:63:
                    5c:c5:46:c0:b2:e7:fb:73:b6:5e:e8:88:58:05:89:
                    0d:72:10:e2:4e:d2:be:9e:0b:9b:b6:ef:94:5c:f2:
                    fb:dc:19:3a:f4:2c:e0:02:8c:1d:ac:13:3f:d3:ce:
                    dc:85:a0:25:9e:89:31:31:ff:af:e7:f0:7b:ff:a0:
                    d7:80:30:3b:44:ed:a2:5c:d8:b9:8a:ad:3c:0c:27:
                    ed:b0:12:ae:36:ed:9c:0c:eb:43:eb:36:9f:50:01:
                    fe:ab:44:04:ab:82:fd:0b:75:07:97:01:d0:f1:bc:
                    18:e2:d4:05:2e:9b:ee:c6:73:af:f7:57:e0:ff:db:
                    74:0c:c2:85:82:68:02:99:65:4c:21:26:2a:eb:1d:
                    a4:ce:ac:da:98:de:ea:fe:4e:aa:72:82:28:28:43:
                    aa:65:d5:dd:59:11:08:02:3e:31:9e:5e:63:11:94:
                    61:cb:b9:7c:92:b6:68:8d:64:ab:6e:a4:6d:8d:cb:
                    9a:1c:c1:82:3a:17:55:c5:a4:78:10:52:3c:fa:0b:
                    0d:55:07:fe:d0:f5:b6:5b:3a:a7:38:de:7f:54:f0:
                    24:0c:a8:46:7a:8a:9d:1d:f0:e7:cc:08:36:39:7f:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BF:9E:64:1B:4B:A7:16:81:43:EE:58:B8:8B:EA:9E:D1:0C:B8:AC
            X509v3 Authority Key Identifier:
                keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/RL-eZBtLpxaBQ-5YuIvqntEMuKw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.222.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:24:67:e9:e1:e2:ce:a5:d5:2f:99:2c:25:7c:73:dc:ea:9c:
         4f:da:8c:de:2c:25:e3:7f:fb:6e:f4:ef:c0:fb:62:a2:31:fd:
         be:a1:07:7f:a7:db:29:7f:15:bc:87:e8:7f:64:e7:38:3a:1d:
         50:95:0a:b3:8d:dd:6e:9f:5e:a6:98:e3:1a:0d:b7:32:e3:b5:
         a9:84:76:ea:16:aa:4d:15:96:dc:d0:69:e8:8b:23:95:c0:2e:
         ed:54:1c:a5:2c:d3:5d:34:7a:3d:09:8f:30:a4:ab:1d:2d:7b:
         e8:22:9c:8e:d1:a2:ae:ce:50:23:d4:2c:3d:c4:4e:bb:39:cd:
         b4:94:cb:0c:d8:b5:ea:7f:f0:5c:4a:d2:ef:22:b3:08:3a:54:
         68:7f:f2:92:ad:69:c8:28:d1:8c:21:19:cb:42:2d:be:32:62:
         74:01:b4:90:40:68:cf:c3:e7:1c:43:c4:6d:b7:de:0b:8b:a8:
         de:69:a7:cd:70:a7:7b:77:3c:92:bd:2b:b8:52:db:08:c0:78:
         8b:2c:86:d6:5f:b8:0e:da:85:b2:44:5a:b2:d2:04:00:2f:76:
         d2:14:45:81:e9:5d:f2:98:b4:5a:26:67:dc:ab:fe:88:0e:25:
         40:09:17:50:6a:74:8a:7d:38:9e:67:21:b6:55:cc:4b:d9:cb:
         f8:ee:e4:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8f1ouDCUcyOpHBv2QGmmxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NzNiOGZjYjhhZTdhZGM5YTc5OTllMTM2N2RiOTVhOTg1
YWMxZTYwHhcNMjYwMTAyMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGJmOWU2NDFiNGJhNzE2ODE0M2VlNThiODhiZWE5ZWQxMGNiOGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukOG0rl9Rp+ZqBkIRrhqsgndqBvR
KmN5WVwKxmNcxUbAsuf7c7Ze6IhYBYkNchDiTtK+ngubtu+UXPL73Bk69CzgAowd
rBM/087chaAlnokxMf+v5/B7/6DXgDA7RO2iXNi5iq08DCftsBKuNu2cDOtD6zaf
UAH+q0QEq4L9C3UHlwHQ8bwY4tQFLpvuxnOv91fg/9t0DMKFgmgCmWVMISYq6x2k
zqzamN7q/k6qcoIoKEOqZdXdWREIAj4xnl5jEZRhy7l8krZojWSrbqRtjcuaHMGC
OhdVxaR4EFI8+gsNVQf+0PW2WzqnON5/VPAkDKhGeoqdHfDnzAg2OX9F5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFES/nmQbS6cWgUPuWLiL6p7RDLisMB8GA1UdIwQY
MBaAFIlzuPy4rnrcmnmZ4TZ9uVqYWsHmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ODE4MTYtODg2MC00YzJlLWFkZjYt
MGQwYmYyYjU2ZDU5LzEvUkwtZVpCdExweGFCUS01WXVJdnFudEVNdUt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ODE4MTYtODg2MC00YzJlLWFkZjYtMGQwYmYyYjU2ZDU5
LzEvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd6GMA0G
CSqGSIb3DQEBCwUAA4IBAQCDJGfp4eLOpdUvmSwlfHPc6pxP2ozeLCXjf/tu9O/A
+2KiMf2+oQd/p9spfxW8h+h/ZOc4Oh1QlQqzjd1un16mmOMaDbcy47WphHbqFqpN
FZbc0GnoiyOVwC7tVBylLNNdNHo9CY8wpKsdLXvoIpyO0aKuzlAj1Cw9xE67Oc20
lMsM2LXqf/BcStLvIrMIOlRof/KSrWnIKNGMIRnLQi2+MmJ0AbSQQGjPw+ccQ8Rt
t94Li6jeaafNcKd7dzySvSu4UtsIwHiLLIbWX7gO2oWyRFqy0gQAL3bSFEWB6V3y
mLRaJmfcq/6IDiVACRdQanSKfTieZyG2VcxL2cv47uTL
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:35:58 2026 by rpki-client