This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/x3YkXAPuFFAQU2qypU85h20QD78.roa
File:                     x3YkXAPuFFAQU2qypU85h20QD78.roa (raw, json)
Hash identifier:          2sWys96464RaFQza5Xomz0qM/22LLb+sW69zdCIvPPA=
Subject key identifier:   C7:76:24:5C:03:EE:14:50:10:53:6A:B2:A5:4F:39:87:6D:10:0F:BF
Certificate issuer:       /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial:       019B7AC8A5172F2F5CE64DDB2C35A2C2C142
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/x3YkXAPuFFAQU2qypU85h20QD78.roa
Signing time:             Thu 01 Jan 2026 18:18:48 +0000
ROA not before:           Thu 01 Jan 2026 18:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61315
IP address blocks:        93.101.0.0/20 maxlen: 24
                          93.101.4.0/24 maxlen: 24
                          93.101.5.0/24 maxlen: 24
                          93.101.16.0/20 maxlen: 24
                          93.101.32.0/20 maxlen: 24
                          93.101.48.0/20 maxlen: 24
                          93.101.64.0/20 maxlen: 24
                          93.101.80.0/20 maxlen: 24
                          93.101.96.0/20 maxlen: 24
                          93.101.112.0/20 maxlen: 24
                          93.101.128.0/20 maxlen: 24
                          93.101.144.0/20 maxlen: 24
                          93.101.160.0/20 maxlen: 24
                          93.101.176.0/20 maxlen: 24
                          93.101.192.0/20 maxlen: 24
                          93.101.208.0/20 maxlen: 24
                          93.101.224.0/20 maxlen: 24
                          93.101.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:a5:17:2f:2f:5c:e6:4d:db:2c:35:a2:c2:c1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
        Validity
            Not Before: Jan  1 18:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c776245c03ee145010536ab2a54f39876d100fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:46:16:64:dc:6f:81:b9:66:40:15:db:04:aa:
                    d3:a4:66:1c:9f:02:42:fa:44:cd:81:2f:60:6a:0e:
                    f5:f2:1e:7e:d6:4c:c4:12:87:b2:eb:87:4d:d3:93:
                    a2:6b:ac:29:67:e7:18:c4:74:87:4d:c3:fd:ee:67:
                    7d:18:22:e8:70:47:a3:49:82:e8:45:75:3d:a4:ab:
                    3c:cc:fa:3a:98:6f:23:cd:f5:f0:56:60:29:3f:84:
                    56:82:7a:35:25:cd:1f:93:c3:ae:32:09:f3:8c:58:
                    ac:bc:3d:d5:b1:7f:d4:3e:80:7b:81:f1:8c:76:7c:
                    8a:6e:4b:98:e2:b8:c7:88:43:a0:85:81:19:20:33:
                    d5:93:1f:15:17:a1:d6:a5:73:f1:58:7f:5b:46:aa:
                    ca:1c:a5:3f:10:b6:93:20:31:cb:50:a4:03:54:91:
                    23:81:90:fe:a1:09:ea:25:4b:9b:d5:bc:43:32:e3:
                    65:4c:15:0b:13:89:fd:7d:aa:b9:aa:27:7c:62:58:
                    f4:f6:61:c9:8b:41:56:d0:2e:d7:30:53:b7:6d:ee:
                    1c:9c:a4:8e:c5:89:b9:9d:bd:55:1c:20:5e:e8:41:
                    6e:21:f9:b7:5d:37:f8:4c:da:04:ec:ad:e3:25:84:
                    53:a8:97:03:d4:25:fc:c4:b4:66:04:ad:51:a0:6c:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:76:24:5C:03:EE:14:50:10:53:6A:B2:A5:4F:39:87:6D:10:0F:BF
            X509v3 Authority Key Identifier:
                keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/x3YkXAPuFFAQU2qypU85h20QD78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         34:6f:6f:f7:a8:61:b9:28:41:97:d3:0e:c2:27:b0:7c:65:3d:
         67:69:80:92:55:53:2e:2d:7c:df:b3:e5:fb:f7:a2:8c:ae:c4:
         71:f8:70:c7:b9:bd:16:78:25:f5:d5:31:28:22:44:6c:b4:b4:
         36:ce:b3:80:ee:cc:bc:1e:2c:1e:c2:57:d7:82:ac:96:17:16:
         aa:8d:1e:5e:b2:05:e2:9e:34:47:01:c0:eb:2b:64:58:1c:e0:
         2b:9f:79:d3:de:ac:93:49:e3:af:51:3d:12:cc:c7:c4:af:4f:
         66:c1:bf:1e:26:f2:a3:84:2d:f7:a2:92:5f:26:a4:2c:15:67:
         ef:73:91:80:ab:ed:b3:af:67:1d:a3:ed:b7:78:cd:42:55:ad:
         6d:a0:4c:32:88:44:7b:a9:0b:9b:34:a3:7d:8d:4b:fe:f3:b7:
         2c:fa:80:e7:62:90:8e:6f:f4:f4:fe:04:c9:c3:6f:64:43:64:
         50:eb:0a:87:54:55:25:f0:94:8c:f2:df:35:fd:b7:44:24:f0:
         76:ca:21:15:d7:0a:e9:a8:b5:4c:4c:0a:9a:8e:c5:a9:62:f6:
         51:17:f4:39:04:c6:55:5e:4a:a0:58:cf:51:f5:05:46:97:9d:
         3b:c3:34:52:13:d0:0b:45:cf:be:2d:f2:61:8e:29:1f:24:eb:
         9a:38:f1:c8
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZt6yKUXLy9c5k3bLDWiwsFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjY2YzNjBkZjlhMWY2MWUyMzMyN2RhMGQyYzA5MTEyZTBh
OWJkNjkwHhcNMjYwMTAxMTgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzc2MjQ1YzAzZWUxNDUwMTA1MzZhYjJhNTRmMzk4NzZkMTAwZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60YWZNxvgblmQBXbBKrTpGYcnwJC
+kTNgS9gag718h5+1kzEEoey64dN05Oia6wpZ+cYxHSHTcP97md9GCLocEejSYLo
RXU9pKs8zPo6mG8jzfXwVmApP4RWgno1Jc0fk8OuMgnzjFisvD3VsX/UPoB7gfGM
dnyKbkuY4rjHiEOghYEZIDPVkx8VF6HWpXPxWH9bRqrKHKU/ELaTIDHLUKQDVJEj
gZD+oQnqJUub1bxDMuNlTBULE4n9faq5qid8Ylj09mHJi0FW0C7XMFO3be4cnKSO
xYm5nb1VHCBe6EFuIfm3XTf4TNoE7K3jJYRTqJcD1CX8xLRmBK1RoGxXUQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFMd2JFwD7hRQEFNqsqVPOYdtEA+/MB8GA1UdIwQY
MBaAFGzPNg35ofYeIzJ9oNLAkRLgqb1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTIt
NzcxNDBkMDk3ODNjLzEveDNZa1hBUHVGRkFRVTJxeXBVODVoMjBRRDc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTItNzcxNDBkMDk3ODNj
LzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAXWUwDQYJ
KoZIhvcNAQELBQADggEBADRvb/eoYbkoQZfTDsInsHxlPWdpgJJVUy4tfN+z5fv3
ooyuxHH4cMe5vRZ4JfXVMSgiRGy0tDbOs4DuzLweLB7CV9eCrJYXFqqNHl6yBeKe
NEcBwOsrZFgc4CufedPerJNJ469RPRLMx8SvT2bBvx4m8qOELfeikl8mpCwVZ+9z
kYCr7bOvZx2j7bd4zUJVrW2gTDKIRHupC5s0o32NS/7ztyz6gOdikI5v9PT+BMnD
b2RDZFDrCodUVSXwlIzy3zX9t0Qk8HbKIRXXCumotUxMCpqOxali9lEX9DkExlVe
SqBYz1H1BUaXnTvDNFIT0AtFz74t8mGOKR8k65o48cg=
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:54 2026 by rpki-client