This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/JEnjE7YreKya_qWGdFeOPal3KPM.roa
File:                     JEnjE7YreKya_qWGdFeOPal3KPM.roa (raw, json)
Hash identifier:          PkmNzONgLG+ZDMsl0cAjAO927lHBGQ4OYB0QZ3l3aXI=
Subject key identifier:   24:49:E3:13:B6:2B:78:AC:9A:FE:A5:86:74:57:8E:3D:A9:77:28:F3
Certificate issuer:       /CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Certificate serial:       019B1D225BC73C3B29F81FBF10D6D3BC7481
Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/JEnjE7YreKya_qWGdFeOPal3KPM.roa
Signing time:             Sun 14 Dec 2025 13:52:29 +0000
ROA not before:           Sun 14 Dec 2025 13:52:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     57793
IP address blocks:        193.47.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:1d:22:5b:c7:3c:3b:29:f8:1f:bf:10:d6:d3:bc:74:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0
        Validity
            Not Before: Dec 14 13:52:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2449e313b62b78ac9afea58674578e3da97728f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:95:60:16:e0:7d:db:f0:59:5c:05:75:25:
                    da:ef:65:f6:71:a6:7c:c2:f8:71:ed:20:ac:1a:bf:
                    e4:9c:6c:34:15:85:1c:42:1d:da:c2:a7:ea:50:74:
                    d1:f2:ec:50:80:71:e3:ac:f7:81:5a:ce:12:68:c5:
                    da:2e:9a:03:3b:05:00:6d:9f:ef:d0:aa:c1:0b:89:
                    c5:f2:89:4e:7b:de:bb:e6:c9:89:1d:8e:98:06:4d:
                    50:e8:31:74:31:e7:3c:62:3a:70:b1:04:0f:14:83:
                    82:c6:78:9a:b7:8a:c7:0c:de:d3:f9:b0:94:98:fd:
                    7b:e6:04:6a:1d:27:62:d0:ae:08:50:90:92:fc:f9:
                    2f:b5:0e:a5:27:09:f0:e5:78:35:89:05:9d:1d:fb:
                    ed:f5:05:9f:d8:1a:43:e9:cb:05:cb:b7:50:ac:0b:
                    fe:f2:c5:a8:fd:2b:a9:f7:68:ff:56:50:34:4a:b5:
                    ef:d7:50:73:13:93:e6:15:8e:9d:fc:28:e8:b8:c1:
                    6c:92:08:7a:75:4b:db:86:fe:7f:89:19:bf:a3:70:
                    80:a1:15:3a:7f:2d:4b:4f:e0:c9:86:d7:34:48:71:
                    ff:57:3f:5b:16:22:59:2e:6e:32:51:02:97:12:e8:
                    f5:7c:0e:4a:fb:8e:3c:85:81:63:f8:e5:27:b6:7e:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:49:E3:13:B6:2B:78:AC:9A:FE:A5:86:74:57:8E:3D:A9:77:28:F3
            X509v3 Authority Key Identifier:
                keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/JEnjE7YreKya_qWGdFeOPal3KPM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.47.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:4f:4c:28:17:65:3e:a7:87:e8:31:37:5c:32:4c:06:b8:87:
         6e:11:ae:89:40:5e:99:72:64:bc:a2:b4:ce:27:5a:6f:28:fa:
         68:7e:3f:24:f7:81:fc:f6:74:ad:2e:44:db:b4:47:8d:12:69:
         80:40:f8:83:c6:5f:16:15:64:70:16:04:e8:b8:04:68:83:68:
         02:63:de:74:0b:df:3b:d5:d5:28:e8:69:5c:2f:96:c2:6c:ab:
         7d:fc:42:26:c2:d2:31:0c:fa:5f:d3:b1:3c:08:58:31:d1:28:
         f8:71:75:62:8e:62:da:8c:16:38:4c:f4:a2:63:3f:27:50:1d:
         08:b0:6f:2f:06:36:b1:a0:0c:b2:61:8f:4f:b2:45:76:cc:19:
         a1:7f:e0:a1:3d:46:59:20:aa:2e:8b:8a:9f:34:6e:be:78:8e:
         71:2e:e8:1d:97:96:8a:59:0b:f0:11:ce:aa:67:24:d5:ad:97:
         ac:d3:b1:2b:f5:9e:fb:62:34:74:4a:ee:c5:9c:80:6a:33:94:
         36:f4:cc:69:fd:1c:99:47:83:76:7b:0c:f3:7a:a7:75:5a:0d:
         f8:71:34:b3:ba:de:60:2d:6e:07:d9:e8:1c:dd:3f:48:80:f9:
         b6:1f:e3:28:d3:f4:70:85:aa:74:f4:76:fb:93:92:0e:6d:cd:
         df:20:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 14:17:15 2025 by rpki-client