This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/R84wROoCeZRCPbUs7Ib0UyTuxC4.roa
File:                     R84wROoCeZRCPbUs7Ib0UyTuxC4.roa (raw, json)
Hash identifier:          Q6YMEZButrOoIhObHP4dYcfrrzpuagES1oIBIzupcEU=
Subject key identifier:   47:CE:30:44:EA:02:79:94:42:3D:B5:2C:EC:86:F4:53:24:EE:C4:2E
Certificate issuer:       /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial:       019B7F13B73E431E8CAD16A90825D6742B7B
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/R84wROoCeZRCPbUs7Ib0UyTuxC4.roa
Signing time:             Fri 02 Jan 2026 14:19:17 +0000
ROA not before:           Fri 02 Jan 2026 14:19:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51088
IP address blocks:        93.190.124.0/24 maxlen: 24
                          193.110.189.0/24 maxlen: 24
                          2a0f:d440::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:13:b7:3e:43:1e:8c:ad:16:a9:08:25:d6:74:2b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
        Validity
            Not Before: Jan  2 14:19:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=47ce3044ea027994423db52cec86f45324eec42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:05:62:c6:99:a7:1d:a1:09:c3:cf:a4:7d:
                    95:c7:99:8c:12:dd:06:15:7c:d4:fb:8f:c9:75:16:
                    cd:f2:93:c0:f9:d0:72:7f:e0:a2:b3:7f:3b:bf:c6:
                    06:f7:04:aa:28:d1:b4:6a:71:a4:46:7f:9b:eb:9f:
                    44:b9:c5:23:55:eb:47:64:f9:b9:1e:62:f7:16:16:
                    fa:45:6d:f4:30:e1:36:72:df:1e:e6:2e:8b:25:4a:
                    b6:ad:78:59:70:e5:b3:2a:0c:00:ba:2a:86:c5:1c:
                    4f:a7:f1:0c:66:39:75:83:82:1c:fa:52:04:d9:85:
                    94:48:21:1e:6d:d1:c9:44:ec:f3:31:63:ac:47:fc:
                    b1:95:07:a2:5a:da:80:b7:36:ef:67:f5:36:3d:74:
                    14:4a:08:bf:9a:59:39:9d:29:5a:7e:55:dc:7d:86:
                    8c:ca:4b:ea:85:25:95:f3:49:62:b8:62:a1:10:2a:
                    48:bf:53:1e:43:d1:1d:e8:c4:19:0b:c6:ce:9d:50:
                    8f:b1:8b:9b:0d:dc:12:14:cb:11:7a:54:d5:a4:dd:
                    4a:c4:5f:3e:14:f4:5f:34:f6:2a:64:da:21:9f:63:
                    13:ce:3f:87:42:ae:46:8d:61:99:2f:31:03:d7:15:
                    98:ef:1a:22:c4:46:aa:5e:9a:b2:25:0f:57:1f:6b:
                    54:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CE:30:44:EA:02:79:94:42:3D:B5:2C:EC:86:F4:53:24:EE:C4:2E
            X509v3 Authority Key Identifier:
                keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/R84wROoCeZRCPbUs7Ib0UyTuxC4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.124.0/24
                  193.110.189.0/24
                IPv6:
                  2a0f:d440::/29

    Signature Algorithm: sha256WithRSAEncryption
         0d:9b:98:d0:e3:c1:68:37:39:91:16:60:15:af:6c:49:6f:7b:
         30:95:13:c2:d8:cb:7f:2f:4f:63:45:8d:5e:1b:0f:96:4a:88:
         cf:21:a1:a8:7c:43:c1:36:ac:fd:70:63:7f:c6:85:4c:06:55:
         2a:7d:fd:43:70:43:df:3e:7b:93:6d:a0:95:2c:1e:8a:76:91:
         34:2e:b8:95:0d:67:5b:6f:26:9c:48:3f:80:f2:18:98:8f:35:
         2c:19:ac:44:66:19:55:29:c9:9e:97:fa:05:8f:26:5d:b7:ff:
         01:85:a5:86:cc:ab:97:8d:1d:4e:71:92:46:28:78:4f:92:cc:
         70:a6:62:59:7b:04:f9:e0:4d:ec:e2:8b:2b:77:b9:5e:1b:f4:
         84:88:53:8a:dd:37:c7:13:2b:a8:4a:91:0e:4d:50:4b:b8:f6:
         51:f7:e7:1d:b6:25:5d:21:f6:cb:5a:05:9a:5d:19:a4:32:a7:
         8e:30:b4:18:f2:29:a2:92:b6:77:25:80:62:77:cd:f8:7d:db:
         dd:9c:65:d3:9d:27:c9:04:7b:56:83:a8:4a:72:6e:49:0c:0a:
         8f:c3:b6:2b:c3:2b:79:1f:00:e9:57:ca:ca:b8:42:5b:26:4f:
         02:a2:6d:e4:01:2a:0b:f6:b7:c5:f5:23:3f:a6:4e:b0:eb:67:
         04:b0:a6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:05:24 2026 by rpki-client