This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/IxrbbUnr4NlEBFXv08akYoNTGj0.roa
File:                     IxrbbUnr4NlEBFXv08akYoNTGj0.roa (raw, json)
Hash identifier:          8fPL/kdOuu7kLO2qxK2P+1Epd0kmxJSFJNXEkM34RBM=
Subject key identifier:   23:1A:DB:6D:49:EB:E0:D9:44:04:55:EF:D3:C6:A4:62:83:53:1A:3D
Certificate issuer:       /CN=82f8d1d97b986939833194ee234e0c4d95b52893
Certificate serial:       019B79114196D76EC52458D4519FECB8603C
Authority key identifier: 82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/IxrbbUnr4NlEBFXv08akYoNTGj0.roa
Signing time:             Thu 01 Jan 2026 10:18:52 +0000
ROA not before:           Thu 01 Jan 2026 10:18:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47106
IP address blocks:        193.46.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:41:96:d7:6e:c5:24:58:d4:51:9f:ec:b8:60:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f8d1d97b986939833194ee234e0c4d95b52893
        Validity
            Not Before: Jan  1 10:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=231adb6d49ebe0d9440455efd3c6a46283531a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:d5:58:54:14:72:ed:6e:22:78:09:4c:f3:
                    65:33:02:e9:d7:53:06:01:f6:9d:ee:77:f2:f8:b1:
                    54:44:c8:bc:0d:3d:2a:6a:ea:30:a6:1f:1b:29:8f:
                    2e:7a:28:3e:4d:ba:ed:4a:7f:37:cd:25:04:e4:0e:
                    7f:5d:89:af:a1:b1:54:b9:35:90:77:1a:73:d6:14:
                    db:48:ca:db:34:8d:e3:51:b5:7f:33:a7:ed:53:d0:
                    3b:64:bd:e9:1a:10:af:b8:9c:b2:ed:27:cf:c6:44:
                    13:a0:07:33:d9:c2:38:67:9f:b0:36:05:fa:a8:09:
                    bf:8e:44:ae:af:e3:a1:c0:96:a2:7b:27:f9:64:c0:
                    05:97:22:4e:11:9d:15:9f:0e:2b:21:8a:23:a8:47:
                    6b:de:75:2f:36:de:07:15:20:14:16:f8:86:80:92:
                    3b:4b:1b:11:aa:f6:70:2e:47:14:2f:f3:13:b3:c6:
                    6b:08:39:90:49:7e:d5:b1:0e:93:fe:6b:25:2b:fb:
                    c1:fb:09:e6:af:d2:0a:b0:5a:6e:86:13:6c:db:52:
                    5d:b1:15:9a:f9:d0:b9:41:e3:37:e9:79:40:ef:b3:
                    bc:7d:b9:d2:b6:ed:ea:36:0a:7e:4a:f4:47:84:a0:
                    5c:69:f4:1f:9f:50:f3:06:eb:ae:a4:97:4f:ea:56:
                    78:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1A:DB:6D:49:EB:E0:D9:44:04:55:EF:D3:C6:A4:62:83:53:1A:3D
            X509v3 Authority Key Identifier:
                keyid:82:F8:D1:D9:7B:98:69:39:83:31:94:EE:23:4E:0C:4D:95:B5:28:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvjR2XuYaTmDMZTuI04MTZW1KJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/IxrbbUnr4NlEBFXv08akYoNTGj0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df072c-1caf-4f8a-a494-7e3439af486f/1/gvjR2XuYaTmDMZTuI04MTZW1KJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:a4:09:61:af:8c:54:6b:41:d1:63:19:9c:4f:8f:a7:b9:e7:
         13:73:43:54:b7:b7:4f:32:a6:0a:fb:9e:a6:48:91:4e:32:2b:
         73:14:e0:01:bf:e6:e3:b4:42:90:67:52:29:fd:18:d1:a2:18:
         86:61:9e:4c:67:bf:d8:85:8c:4c:d8:e8:86:61:64:ec:2c:60:
         7a:fd:74:ed:00:90:a0:a9:c0:46:c1:25:a2:9b:12:40:95:6a:
         51:fa:19:bb:21:f1:a6:63:8e:41:9e:a4:ba:cd:a4:18:99:35:
         7b:bf:b1:62:e3:05:15:35:4a:82:96:43:88:73:63:89:6f:cc:
         85:77:d5:2c:1f:70:d3:fc:00:e4:23:43:95:b0:ca:52:2d:d1:
         dc:b9:6d:2a:d9:11:86:b9:71:4d:5d:39:0d:5d:6a:4c:16:30:
         d0:ba:58:d6:94:22:b2:f1:38:ae:fe:57:ae:16:15:c8:d8:aa:
         2f:c2:fe:24:38:58:02:5e:37:81:fa:38:19:ac:a9:64:1e:25:
         83:66:82:fc:10:61:3f:c4:b5:40:62:ef:24:c6:ef:9d:5b:3d:
         19:cf:77:a5:49:e8:c0:73:58:18:42:4b:45:61:db:f3:1a:09:
         09:8f:16:af:84:ab:13:02:4c:b9:52:3e:46:1c:b9:50:23:6e:
         67:6a:67:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5EUGW127FJFjUUZ/suGA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZjhkMWQ5N2I5ODY5Mzk4MzMxOTRlZTIzNGUwYzRkOTVi
NTI4OTMwHhcNMjYwMTAxMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzFhZGI2ZDQ5ZWJlMGQ5NDQwNDU1ZWZkM2M2YTQ2MjgzNTMxYTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps/VWFQUcu1uIngJTPNlMwLp11MG
Afad7nfy+LFURMi8DT0qauowph8bKY8ueig+TbrtSn83zSUE5A5/XYmvobFUuTWQ
dxpz1hTbSMrbNI3jUbV/M6ftU9A7ZL3pGhCvuJyy7SfPxkQToAcz2cI4Z5+wNgX6
qAm/jkSur+OhwJaieyf5ZMAFlyJOEZ0Vnw4rIYojqEdr3nUvNt4HFSAUFviGgJI7
SxsRqvZwLkcUL/MTs8ZrCDmQSX7VsQ6T/mslK/vB+wnmr9IKsFpuhhNs21JdsRWa
+dC5QeM36XlA77O8fbnStu3qNgp+SvRHhKBcafQfn1DzBuuupJdP6lZ4dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCMa221J6+DZRARV79PGpGKDUxo9MB8GA1UdIwQY
MBaAFIL40dl7mGk5gzGU7iNODE2VtSiTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3ZqUjJYdVlhVG1ETVpUdUkwNE1UWlcxS0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9kZjA3MmMtMWNhZi00ZjhhLWE0OTQt
N2UzNDM5YWY0ODZmLzEvSXhyYmJVbnI0TmxFQkZYdjA4YWtZb05UR2owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9kZjA3MmMtMWNhZi00ZjhhLWE0OTQtN2UzNDM5YWY0ODZm
LzEvZ3ZqUjJYdVlhVG1ETVpUdUkwNE1UWlcxS0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS7RMA0G
CSqGSIb3DQEBCwUAA4IBAQBRpAlhr4xUa0HRYxmcT4+nuecTc0NUt7dPMqYK+56m
SJFOMitzFOABv+bjtEKQZ1Ip/RjRohiGYZ5MZ7/YhYxM2OiGYWTsLGB6/XTtAJCg
qcBGwSWimxJAlWpR+hm7IfGmY45BnqS6zaQYmTV7v7Fi4wUVNUqClkOIc2OJb8yF
d9UsH3DT/ADkI0OVsMpSLdHcuW0q2RGGuXFNXTkNXWpMFjDQuljWlCKy8Tiu/leu
FhXI2Kovwv4kOFgCXjeB+jgZrKlkHiWDZoL8EGE/xLVAYu8kxu+dWz0Zz3elSejA
c1gYQktFYdvzGgkJjxavhKsTAky5Uj5GHLlQI25namci
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:09 2026 by rpki-client