This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/v4vgN5S5raK6CZzGiAArElrxR7M.roa
File:                     v4vgN5S5raK6CZzGiAArElrxR7M.roa (raw, json)
Hash identifier:          xT4jBApJuBPFeaE1dP9JBk2mZGCvg2bKp+Nh1yHS3XY=
Subject key identifier:   BF:8B:E0:37:94:B9:AD:A2:BA:09:9C:C6:88:00:2B:12:5A:F1:47:B3
Certificate issuer:       /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial:       019B79ED34E707B489F76F5A4F543505FC95
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/v4vgN5S5raK6CZzGiAArElrxR7M.roa
Signing time:             Thu 01 Jan 2026 14:19:07 +0000
ROA not before:           Thu 01 Jan 2026 14:19:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        93.191.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:34:e7:07:b4:89:f7:6f:5a:4f:54:35:05:fc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
        Validity
            Not Before: Jan  1 14:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bf8be03794b9ada2ba099cc688002b125af147b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:18:6b:99:d6:5f:63:fe:8b:45:da:ef:05:
                    76:86:33:b2:01:af:1c:a5:6e:98:3f:07:10:60:15:
                    70:ff:25:d8:8b:7c:e6:48:f2:a0:57:95:4f:f5:cc:
                    02:a2:ae:90:d3:87:6a:2d:7a:68:e8:b9:80:3e:9c:
                    8e:10:02:96:6c:32:a2:ba:32:a4:ac:8e:fc:51:bf:
                    66:71:67:22:c0:6b:ee:ca:f1:fe:63:22:3c:1b:1b:
                    68:05:09:f9:5e:da:29:c0:b9:1a:c5:f3:96:8f:39:
                    cb:bd:b0:d4:44:71:78:ad:67:b3:f9:0d:07:5f:f3:
                    20:26:6e:04:22:f6:9f:63:bb:b7:77:e3:4f:8b:22:
                    ee:4a:78:50:f5:c0:0d:49:de:1b:4e:9c:c8:17:3a:
                    1d:c3:8e:1c:3a:8b:44:68:8f:63:4e:02:70:3d:4a:
                    fb:c6:25:d1:2c:89:be:ce:80:d1:08:21:c8:47:c8:
                    22:08:68:3c:f3:58:62:8b:ce:7e:88:b8:77:c2:eb:
                    f9:27:75:bb:d5:86:6f:ba:15:ab:a3:91:0e:55:60:
                    16:f0:e0:82:e9:a8:19:1a:c2:64:7a:24:08:41:80:
                    b6:a8:35:1f:1d:0c:da:ff:31:88:ac:38:43:55:f3:
                    9f:56:56:9f:92:cd:5b:fa:ea:66:1b:db:45:2e:15:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8B:E0:37:94:B9:AD:A2:BA:09:9C:C6:88:00:2B:12:5A:F1:47:B3
            X509v3 Authority Key Identifier:
                keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/v4vgN5S5raK6CZzGiAArElrxR7M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.191.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:0d:32:19:f7:71:c6:ac:de:d3:29:84:50:5b:de:4b:f5:46:
         ab:3b:49:14:f6:d0:83:45:2e:55:3c:8d:96:4e:d0:e2:b7:45:
         eb:22:cc:b1:1a:f0:ff:c6:de:af:42:72:9d:42:d8:93:38:59:
         0c:a9:01:a0:8c:21:f3:3b:0e:10:fd:f6:04:67:ba:a6:ab:e1:
         f2:99:e4:69:c2:ab:ef:08:3c:59:de:b6:df:36:62:45:10:c0:
         7f:23:b7:cb:88:d2:4b:22:1c:dd:5b:b3:e6:cc:b3:fb:be:9c:
         b7:a7:ac:5a:04:a0:ec:69:2e:e5:0d:28:78:db:49:1a:31:1c:
         9a:61:c4:ff:8c:c1:18:6e:dc:aa:c1:33:2f:95:ae:bc:2c:fa:
         59:c7:54:78:4d:fa:e8:de:ea:d5:7c:cc:ca:28:16:15:8d:4d:
         ee:11:20:3e:05:8c:7f:47:a5:9a:1a:39:9b:69:53:a8:34:de:
         97:ab:c9:25:90:2f:00:ea:ad:5a:2c:a1:e3:d5:0a:a0:a4:40:
         9c:fb:9b:aa:c7:30:05:4b:97:32:59:4d:a4:f2:dc:33:ac:67:
         8b:dd:c6:2d:9d:62:1c:a5:e3:4c:68:cf:a7:8e:45:53:83:b9:
         09:fa:9f:a7:1d:fb:37:bd:05:bc:32:4e:76:d8:49:ff:af:21:
         91:63:fa:0e
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt57TTnB7SJ929aT1Q1BfyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOWUzOTBiZGNiZDk1YWZhYjRhNWZmOGM0ZWQ5ZWZjNDM2
ODdiZDEwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjhiZTAzNzk0YjlhZGEyYmEwOTljYzY4ODAwMmIxMjVhZjE0N2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjkYa5nWX2P+i0Xa7wV2hjOyAa8c
pW6YPwcQYBVw/yXYi3zmSPKgV5VP9cwCoq6Q04dqLXpo6LmAPpyOEAKWbDKiujKk
rI78Ub9mcWciwGvuyvH+YyI8GxtoBQn5XtopwLkaxfOWjznLvbDURHF4rWez+Q0H
X/MgJm4EIvafY7u3d+NPiyLuSnhQ9cANSd4bTpzIFzodw44cOotEaI9jTgJwPUr7
xiXRLIm+zoDRCCHIR8giCGg881hii85+iLh3wuv5J3W71YZvuhWro5EOVWAW8OCC
6agZGsJkeiQIQYC2qDUfHQza/zGIrDhDVfOfVlafks1b+upmG9tFLhWjbwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFL+L4DeUua2iugmcxogAKxJa8UezMB8GA1UdIwQY
MBaAFPueOQvcvZWvq0pf+MTtnvxDaHvRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01NDVDOXk5bGEtclNsXzR4TzJlX0VOb2U5RS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMy
LTcyNDI2ZDkyNjAxYi8xL3Y0dmdONVM1cmFLNkNaekdpQUFyRWxyeFI3TS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjQvZDkwMmNhLWNkZjMtNGYyOS1iMjMyLTcyNDI2ZDkyNjAx
Yi8xLzEtNTQ1Qzl5OWxhLXJTbF80eE8yZV9FTm9lOUUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFdv5Qw
DQYJKoZIhvcNAQELBQADggEBAFANMhn3ccas3tMphFBb3kv1Rqs7SRT20INFLlU8
jZZO0OK3ResizLEa8P/G3q9Ccp1C2JM4WQypAaCMIfM7DhD99gRnuqar4fKZ5GnC
q+8IPFnett82YkUQwH8jt8uI0ksiHN1bs+bMs/u+nLenrFoEoOxpLuUNKHjbSRox
HJphxP+MwRhu3KrBMy+Vrrws+lnHVHhN+uje6tV8zMooFhWNTe4RID4FjH9HpZoa
OZtpU6g03perySWQLwDqrVosoePVCqCkQJz7m6rHMAVLlzJZTaTy3DOsZ4vdxi2d
Yhyl40xoz6eORVODuQn6n6cd+ze9BbwyTnbYSf+vIZFj+g4=
-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:47 2026 by rpki-client