This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/64C-lmFzLjn1ZGVi6ZD6iYUqf4c.roa
File:                     64C-lmFzLjn1ZGVi6ZD6iYUqf4c.roa (raw, json)
Hash identifier:          qi19ajHZAJU0u0s+k0ps4/pC6tSa3d4Pj2zqEMub4I0=
Subject key identifier:   EB:80:BE:96:61:73:2E:39:F5:64:65:62:E9:90:FA:89:85:2A:7F:87
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       019B7C801B617F340D352E9D72D06C1F4501
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/64C-lmFzLjn1ZGVi6ZD6iYUqf4c.roa
Signing time:             Fri 02 Jan 2026 02:18:48 +0000
ROA not before:           Fri 02 Jan 2026 02:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48266
IP address blocks:        92.118.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:1b:61:7f:34:0d:35:2e:9d:72:d0:6c:1f:45:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  2 02:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb80be9661732e39f5646562e990fa89852a7f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:d3:d1:b3:86:a1:58:e2:31:d6:10:f9:61:
                    af:b9:5c:27:b7:94:5a:c1:62:df:26:47:e0:2b:dd:
                    5e:23:35:fb:3a:20:60:0d:58:ae:ee:eb:01:d2:12:
                    b0:06:f3:63:6e:60:b6:dd:d0:65:49:7e:df:55:ec:
                    e1:8a:33:90:af:12:4a:36:44:37:e5:3c:5a:fa:f8:
                    08:a4:18:4c:fd:05:5f:83:b3:9a:51:23:8b:18:fb:
                    0e:2d:95:b2:e3:6a:41:c6:43:02:cf:bc:ce:71:f5:
                    4a:72:c2:db:9e:50:1a:9c:73:5d:ae:62:42:00:83:
                    3b:23:4c:a7:50:17:d5:a0:9d:fe:9b:ec:d6:5c:53:
                    6d:54:69:1b:78:a9:27:6a:da:ce:5b:a9:a0:94:8b:
                    1e:07:52:e2:56:2e:f8:59:50:f8:c3:f2:81:a6:3b:
                    0b:ef:15:b0:5a:7e:56:88:df:41:c0:ff:1a:16:1a:
                    f9:4e:79:6c:e5:4c:12:8d:f3:a2:af:b1:eb:a0:f2:
                    65:f0:90:ac:6b:f8:24:03:07:22:a7:2d:04:b6:f2:
                    b6:76:c9:77:45:56:b6:45:63:4d:df:2f:62:44:01:
                    db:6a:be:a0:82:78:46:18:27:9e:c5:8d:b7:12:56:
                    65:0f:88:d2:67:2a:3d:c6:1c:43:cb:33:cf:a9:6e:
                    06:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:80:BE:96:61:73:2E:39:F5:64:65:62:E9:90:FA:89:85:2A:7F:87
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/64C-lmFzLjn1ZGVi6ZD6iYUqf4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:66:c0:e9:b6:8d:c2:7f:ac:c3:39:69:60:d4:bd:99:23:e1:
         b2:c9:2f:6b:95:a7:c9:68:df:98:f7:6d:38:82:80:85:1d:8d:
         b7:2f:1e:29:34:19:36:95:de:2c:85:75:50:45:02:93:ee:3f:
         99:a7:f5:2e:00:fc:c7:50:d3:79:a3:af:31:77:bd:e1:c6:c0:
         3b:62:d3:da:32:3e:01:51:7e:d8:aa:54:5c:97:eb:10:c9:8a:
         b1:6d:6c:88:c1:1e:c4:ab:f1:0a:1f:21:38:73:64:5d:e6:e1:
         60:b2:50:79:e6:6f:15:92:5d:01:9b:7d:ff:29:7b:b4:ac:3a:
         58:0c:63:06:f5:a5:a3:1f:c1:4e:d5:2c:5a:c0:7e:a5:0e:16:
         c9:bf:30:01:af:b7:7b:a7:3c:ae:bf:9a:fb:aa:69:47:58:20:
         76:45:85:94:9e:b4:f2:44:83:da:7a:97:b4:33:5d:68:52:2e:
         81:c9:fe:c8:7f:fd:de:11:df:ab:9f:d5:91:31:9a:d3:10:4f:
         c2:82:c5:21:45:56:db:c0:45:3e:95:77:aa:64:49:4e:c6:ff:
         29:53:ad:2d:76:ef:17:e3:67:49:e5:f4:16:93:50:86:d8:15:
         2b:43:90:2c:43:54:07:7c:f3:e8:af:c0:96:bd:78:98:5d:28:
         ef:80:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:55 2026 by rpki-client