This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Emgi9uVA0K2U8udhhuN-5E2ED9I.roa
File:                     Emgi9uVA0K2U8udhhuN-5E2ED9I.roa (raw, json)
Hash identifier:          aaqGCp3412X3YAMCyWJ0qF8Viw0cR9UGWglvjgQK4do=
Subject key identifier:   12:68:22:F6:E5:40:D0:AD:94:F2:E7:61:86:E3:7E:E4:4D:84:0F:D2
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B356F1BA6FC54F56A2A0A6A30E7D974
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Emgi9uVA0K2U8udhhuN-5E2ED9I.roa
Signing time:             Thu 01 Jan 2026 20:17:37 +0000
ROA not before:           Thu 01 Jan 2026 20:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42280
IP address blocks:        194.102.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:6f:1b:a6:fc:54:f5:6a:2a:0a:6a:30:e7:d9:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=126822f6e540d0ad94f2e76186e37ee44d840fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b3:cc:05:a5:39:84:ec:a0:a8:d3:56:42:35:
                    27:b6:f5:0c:b5:05:d6:b4:25:fa:4e:82:48:d0:93:
                    02:65:c1:35:2a:4a:a3:37:a3:fc:2d:46:2a:e1:1b:
                    22:dc:12:8f:e4:e4:54:ac:16:b4:2a:d7:fc:31:86:
                    c0:69:77:0c:ca:d7:17:70:ee:4a:3b:da:99:d0:57:
                    6c:50:d3:e3:1b:1e:ca:09:78:6d:d8:22:69:02:f7:
                    6d:8b:45:c3:20:ca:89:3e:a3:dc:98:4e:81:74:ac:
                    42:1e:75:51:a3:55:e0:7e:d0:64:99:d7:89:8f:a3:
                    c3:e9:4d:65:f5:2d:00:33:fd:d9:4a:3f:d1:51:71:
                    9f:b9:f3:f5:d6:c5:b4:b1:fc:f9:9a:9f:3b:61:36:
                    6c:60:36:bf:21:6a:96:f4:6e:b8:bf:03:d0:39:10:
                    84:fe:c5:76:4c:ca:08:67:bc:dc:9c:7e:50:1b:8f:
                    5b:f0:a3:9b:bd:9a:e7:d5:fe:ae:34:d6:75:ea:f4:
                    0e:39:14:90:12:ac:88:ae:3b:e9:8c:9c:d3:3f:9d:
                    c2:41:77:63:60:f7:7b:a8:d7:38:72:70:55:22:1c:
                    d6:42:78:77:85:51:44:38:61:b4:19:ff:32:1b:a4:
                    aa:59:0a:71:d5:56:9a:b7:0c:a1:30:7f:b1:5b:be:
                    b8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:68:22:F6:E5:40:D0:AD:94:F2:E7:61:86:E3:7E:E4:4D:84:0F:D2
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Emgi9uVA0K2U8udhhuN-5E2ED9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.102.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:0a:c3:52:4b:c4:0d:18:8f:80:63:24:59:41:e0:d3:05:d8:
         3b:58:c7:6d:ff:67:d9:5b:0e:46:51:9c:0e:58:87:da:0e:c0:
         69:33:de:e1:38:72:37:60:b1:6c:d7:b0:e7:7d:90:0f:de:bd:
         43:8e:1e:42:52:5c:3b:9e:2a:3e:d9:97:10:e4:8f:ad:d3:e9:
         f6:cb:ff:58:60:9e:44:47:8a:f3:55:ea:9b:50:c5:65:86:d3:
         5a:0e:76:5a:f6:b8:66:00:b4:27:da:07:3d:b9:0a:f3:29:55:
         c7:a2:1c:69:5c:d3:6e:af:e8:25:8d:8a:20:68:99:65:d3:81:
         20:f6:92:b4:7a:6a:47:44:46:3c:f2:16:d5:16:89:9c:98:ae:
         ca:a9:62:b4:b1:7c:58:3a:83:13:73:a4:82:8c:9c:8b:36:fe:
         53:2b:98:71:e0:74:56:da:3c:c6:91:7f:ca:80:cc:ec:75:a8:
         1c:ec:d6:85:78:6f:12:d1:34:28:bd:d2:35:48:b3:d4:82:04:
         f6:e4:9f:be:ee:62:15:e0:56:8c:5d:2e:37:5e:7c:91:78:f5:
         6b:7a:96:73:ad:7f:06:3f:64:1f:da:2b:ec:a4:9b:69:2c:de:
         3a:6b:13:9c:c9:ba:0b:10:68:c0:3f:51:03:3b:3f:3b:d3:0f:
         05:d9:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:00 2026 by rpki-client