This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/AENYJALANSjKlBoltdKemnCFKjs.roa
File:                     AENYJALANSjKlBoltdKemnCFKjs.roa (raw, json)
Hash identifier:          s2OVjDuX6iIGr8lYPRWiO+GCWriVBdcRjsgW+JAkKFY=
Subject key identifier:   00:43:58:24:02:C0:35:28:CA:94:1A:25:B5:D2:9E:9A:70:85:2A:3B
Certificate issuer:       /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial:       019B7C122D5A012EF834DAB69599D4E84424
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/AENYJALANSjKlBoltdKemnCFKjs.roa
Signing time:             Fri 02 Jan 2026 00:18:44 +0000
ROA not before:           Fri 02 Jan 2026 00:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213334
IP address blocks:        193.176.81.0/24 maxlen: 24
                          193.176.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:2d:5a:01:2e:f8:34:da:b6:95:99:d4:e8:44:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
        Validity
            Not Before: Jan  2 00:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0043582402c03528ca941a25b5d29e9a70852a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:26:5d:37:f0:59:08:da:3b:f6:ac:5a:27:af:
                    08:21:c7:8f:49:e5:2d:d0:90:f0:a8:d2:80:e5:e9:
                    6f:e5:5a:03:4b:f7:f6:79:dc:00:84:f1:f1:a5:28:
                    cd:52:61:4f:af:82:25:30:db:b5:57:5e:94:15:3f:
                    84:ea:59:69:58:5b:2c:4e:c4:08:ad:12:01:64:4c:
                    d7:31:f6:aa:d1:cf:fd:71:ec:e3:62:3c:29:a3:e4:
                    09:5b:47:f4:cb:fc:34:3c:b4:87:9a:70:c5:1a:7e:
                    14:32:73:0a:46:92:bf:a3:f3:5d:ed:b2:d0:85:fa:
                    44:42:b0:a5:c0:8a:b3:b6:8d:1d:ee:04:cb:fa:78:
                    3f:27:d2:e4:8e:4e:bc:1e:2d:fe:07:93:87:b0:c2:
                    ef:7e:95:d9:71:41:0f:3a:95:eb:cf:42:df:7e:22:
                    1b:b9:23:fa:a1:1e:f1:fd:b7:19:b0:5d:3f:a7:1c:
                    25:38:dd:35:87:f1:25:49:8b:01:ad:9e:a3:df:bb:
                    ce:fb:0c:d1:a0:4b:f9:e8:da:dd:8f:0a:a8:58:f7:
                    d5:f8:31:51:1c:90:1c:28:b0:b9:ee:dc:38:b5:f4:
                    ed:13:fb:b9:3e:07:41:3c:ec:de:e9:3e:1c:9f:db:
                    14:f0:30:c2:08:5d:f0:7c:87:48:89:cf:c3:79:cf:
                    31:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:43:58:24:02:C0:35:28:CA:94:1A:25:B5:D2:9E:9A:70:85:2A:3B
            X509v3 Authority Key Identifier:
                keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/AENYJALANSjKlBoltdKemnCFKjs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.176.81.0-193.176.82.255

    Signature Algorithm: sha256WithRSAEncryption
         14:52:1a:79:ba:e2:77:0c:22:7a:b5:af:23:12:d8:79:23:f8:
         8b:e4:eb:2c:b6:78:c0:cf:30:ff:a1:cb:db:dd:83:c4:b7:fe:
         fc:89:bb:db:d2:ad:d8:da:17:65:65:5f:16:49:91:a0:43:52:
         39:a6:78:10:05:14:24:7d:36:8d:d9:1f:55:ee:c4:29:85:21:
         ce:67:7b:d4:e3:d4:44:96:04:38:16:c4:45:35:5c:75:f4:8c:
         c0:c9:6e:1e:fa:e2:6b:45:3d:d4:8f:fb:e6:d8:e2:1c:f3:e3:
         78:25:91:32:dd:10:04:b3:ad:40:8d:a7:92:b5:e9:73:b2:f7:
         8e:ed:cb:75:3a:8f:05:e1:96:88:c7:ea:50:c3:24:79:09:8b:
         92:ef:02:47:de:8e:87:17:6c:07:99:20:fb:d8:3a:ee:8f:0f:
         99:28:4d:b3:7f:2c:d6:6b:08:6a:f7:18:ec:45:f2:af:de:49:
         f3:9c:7e:c9:ad:5f:43:ed:dc:41:8d:4a:48:34:20:56:cf:fc:
         bb:18:65:e8:d9:93:67:3d:88:41:db:1a:d5:c7:27:3d:4d:d1:
         e0:a8:c0:1d:8c:67:35:ee:56:ef:6f:e4:b4:7c:06:67:3e:3b:
         75:e5:57:b6:ec:c9:ea:95:9d:f0:16:c2:5f:9a:c2:70:49:cf:
         09:0b:1b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:24:52 2026 by rpki-client