This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/b99zgvt4SkQ7lYEGS1axQCVk90s.roa
File:                     b99zgvt4SkQ7lYEGS1axQCVk90s.roa (raw, json)
Hash identifier:          g2TzQyRi4i5qaVipGHvM9BNAsT3BpeoakCROZNCElh4=
Subject key identifier:   6F:DF:73:82:FB:78:4A:44:3B:95:81:06:4B:56:B1:40:25:64:F7:4B
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       019B9259201B96C220222780815B9E5CE7F6
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/b99zgvt4SkQ7lYEGS1axQCVk90s.roa
Signing time:             Tue 06 Jan 2026 08:07:52 +0000
ROA not before:           Tue 06 Jan 2026 08:07:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     395374
IP address blocks:        93.88.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:92:59:20:1b:96:c2:20:22:27:80:81:5b:9e:5c:e7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Jan  6 08:07:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6fdf7382fb784a443b9581064b56b1402564f74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:3b:ea:35:76:96:88:9c:01:7c:7f:3e:3e:
                    5b:b7:76:e9:bc:d4:95:07:49:56:de:d0:c5:bd:df:
                    a9:80:f8:24:0e:10:21:62:29:96:dd:12:5a:99:6a:
                    ce:73:56:9b:16:e8:d4:a5:35:4b:e8:05:0e:f0:21:
                    87:7c:5c:e0:f7:9f:8c:ef:86:67:5d:af:8b:3c:6a:
                    c5:bf:d0:64:c9:df:6c:32:de:b2:c7:ad:8d:66:40:
                    de:de:66:b3:70:97:08:02:7c:5c:73:10:d2:8c:ea:
                    84:a5:0a:99:e5:31:62:eb:31:61:b7:3a:6b:2c:32:
                    0a:c8:94:5b:a6:39:44:af:df:26:3f:2f:84:97:b8:
                    0a:f5:28:01:98:d5:b2:f2:28:06:7e:65:ba:ab:b2:
                    fb:1d:d6:a1:8d:63:c8:01:93:2d:76:24:e2:ab:ff:
                    0b:84:fd:19:8d:71:cc:dd:ea:de:af:a9:55:3a:ff:
                    a1:2e:ad:a0:48:fe:ac:e8:b9:a0:81:26:c5:3f:fe:
                    e3:25:3e:b8:50:3f:d6:4f:22:b0:05:3a:5c:11:6c:
                    68:45:4f:46:63:df:d0:94:15:d1:76:67:ca:55:f8:
                    16:60:c4:bb:57:42:08:23:00:ae:ae:1b:fc:ce:b1:
                    dc:48:2e:be:7f:23:8f:9e:75:4a:80:e6:6e:0d:7f:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DF:73:82:FB:78:4A:44:3B:95:81:06:4B:56:B1:40:25:64:F7:4B
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/b99zgvt4SkQ7lYEGS1axQCVk90s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.88.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:14:c9:db:82:43:68:13:7f:f8:1e:bd:07:cd:db:16:78:5c:
         f2:34:5c:40:79:f2:48:aa:ce:97:25:74:90:32:40:de:de:67:
         2b:40:6b:9d:58:a1:d7:53:18:bd:69:ca:40:bc:01:b5:ce:0d:
         7b:fc:1f:5a:9e:68:3d:7d:50:37:cf:1d:b2:2c:52:0d:8f:70:
         0f:e4:a7:dc:1e:81:82:4b:0c:87:90:9b:4c:60:9d:67:dd:65:
         d8:21:04:f5:53:4a:67:aa:73:c5:1b:6f:88:3b:cd:8e:a3:8c:
         58:94:25:6b:f0:6a:e9:d1:19:86:a8:b4:b7:81:5b:bc:74:23:
         0d:c1:e8:cc:20:9d:95:a1:43:a2:65:fd:91:09:6e:05:8b:8e:
         7b:f9:31:82:dc:60:f7:b5:e7:55:ef:78:92:8a:82:a0:b0:09:
         f6:f3:fd:43:21:a2:51:83:dc:44:d5:bb:db:fd:c3:cb:07:7c:
         d2:18:76:53:62:60:71:b7:4b:fc:02:db:e8:c0:b4:3d:6c:a5:
         d4:8c:63:f9:ec:24:1d:4b:fb:1f:e4:fe:9c:e1:ae:4c:72:e9:
         75:20:31:3b:9f:31:57:06:d0:4e:b5:2d:6c:bb:d5:3a:cb:6a:
         73:fa:68:29:ed:c2:02:d6:87:ea:78:64:c8:ae:2b:71:05:e5:
         56:ea:0d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:33:04 2026 by rpki-client