This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/U2VBzZjxuUEG7jBJne-b7fm_w5Q.roa
File:                     U2VBzZjxuUEG7jBJne-b7fm_w5Q.roa (raw, json)
Hash identifier:          8aRNgSR8HA+VvI/YQOm/0nr6qkxRB9YXLUxiFxn77ns=
Subject key identifier:   53:65:41:CD:98:F1:B9:41:06:EE:30:49:9D:EF:9B:ED:F9:BF:C3:94
Certificate issuer:       /CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
Certificate serial:       019B7F83094956A11C94813DB3A87EC794C4
Authority key identifier: 16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/U2VBzZjxuUEG7jBJne-b7fm_w5Q.roa
Signing time:             Fri 02 Jan 2026 16:20:52 +0000
ROA not before:           Fri 02 Jan 2026 16:20:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29119
IP address blocks:        188.93.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:09:49:56:a1:1c:94:81:3d:b3:a8:7e:c7:94:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1639ddbe0ff3a1870cdb455098dc42facfd549f5
        Validity
            Not Before: Jan  2 16:20:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=536541cd98f1b94106ee30499def9bedf9bfc394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:de:31:cf:2f:df:c7:ff:ea:a0:3b:27:03:de:
                    38:45:76:e4:d3:c3:0f:6d:32:73:09:a7:a2:62:53:
                    9c:9e:24:80:aa:93:ae:85:d3:67:79:a7:99:b5:2c:
                    03:52:fe:a2:8d:a4:82:97:b2:bf:c3:bd:62:fc:ce:
                    18:e9:9a:14:d9:c9:00:fa:02:ec:96:a6:9b:e7:f5:
                    90:89:88:67:90:7e:77:11:34:2d:ba:1f:df:45:15:
                    a7:c3:95:14:d8:bb:3b:08:0b:09:8d:0b:87:a1:1a:
                    5c:83:3a:46:74:10:cc:e4:e5:f4:de:c5:01:56:9b:
                    c3:90:69:d0:9c:e2:d0:00:eb:30:91:ea:18:62:da:
                    9d:a3:77:0d:55:20:2d:bf:93:70:7f:8b:18:d5:b5:
                    f4:3b:9f:3f:11:27:83:1b:ed:30:c7:c1:de:b5:79:
                    04:ef:1e:fc:4a:93:d2:35:fa:0e:c7:8a:6b:5d:4b:
                    18:5a:f0:72:96:06:54:9a:ad:69:74:96:48:86:f1:
                    c3:89:c2:c2:47:99:b2:3d:19:af:a6:a5:65:23:c6:
                    bc:27:18:2a:6f:84:d3:12:7a:f6:91:6d:b9:8b:28:
                    73:33:bf:25:e9:bc:67:69:2c:78:30:7c:03:77:99:
                    ae:bb:43:47:df:6d:72:6d:34:c2:ac:51:c9:b4:c2:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:65:41:CD:98:F1:B9:41:06:EE:30:49:9D:EF:9B:ED:F9:BF:C3:94
            X509v3 Authority Key Identifier:
                keyid:16:39:DD:BE:0F:F3:A1:87:0C:DB:45:50:98:DC:42:FA:CF:D5:49:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjndvg_zoYcM20VQmNxC-s_VSfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/U2VBzZjxuUEG7jBJne-b7fm_w5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/19c888-a2bb-4b6c-822e-c00a646d8031/1/Fjndvg_zoYcM20VQmNxC-s_VSfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.93.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:4d:33:b3:ec:d8:c6:94:b3:e0:cd:b9:f9:f6:6c:53:9a:83:
         e0:34:98:80:f0:b2:3e:3b:ae:41:d3:28:5a:c9:f6:4f:67:fe:
         b1:9d:5f:f9:d8:ad:b0:1a:58:f9:62:44:8a:d8:fa:74:11:63:
         61:e7:9f:65:09:0a:8d:72:d4:57:36:7f:74:fc:0b:b6:fa:c9:
         ed:1a:15:ff:9d:ec:cb:62:2d:e5:30:06:3d:6d:ca:29:59:18:
         1c:92:db:8c:4c:b7:e7:4f:f4:35:8e:2e:d9:2f:1b:6a:d3:fd:
         d1:c2:92:4e:34:26:cf:28:77:2a:94:5c:6e:53:61:5f:55:7d:
         d5:23:fd:05:ba:d4:ee:58:f4:a5:8f:bd:55:8c:3e:49:43:99:
         f2:f3:ec:99:9a:b2:a5:c2:35:f0:d5:4e:57:da:3b:cf:36:46:
         e7:f4:fc:06:4b:e5:5a:12:18:03:bf:a9:10:cc:ad:54:50:ba:
         12:ec:81:12:8d:b5:49:74:31:46:a7:2b:14:ca:14:fc:cc:0c:
         1a:97:54:c3:7f:a1:41:82:57:33:12:5a:f4:11:03:1a:22:1d:
         99:ea:4a:dc:18:ca:b7:5d:79:ca:5b:64:6e:bb:8e:10:0d:4d:
         87:87:bf:33:a0:21:c7:4d:b3:9f:97:f1:84:c0:ac:aa:fe:46:
         b8:6b:89:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:22:35 2026 by rpki-client