This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/B4ECW0jtt5KyrtkmlUhbFQBxuus.roa
File:                     B4ECW0jtt5KyrtkmlUhbFQBxuus.roa (raw, json)
Hash identifier:          Z8JjmJ/Yv+fCZ4euDC+I0rty80LYQ117ydvucBAt8Uw=
Subject key identifier:   07:81:02:5B:48:ED:B7:92:B2:AE:D9:26:95:48:5B:15:00:71:BA:EB
Certificate issuer:       /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial:       019B7AC7FD06CC0BEF7C2DE3E44DBB7652F6
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/B4ECW0jtt5KyrtkmlUhbFQBxuus.roa
Signing time:             Thu 01 Jan 2026 18:18:05 +0000
ROA not before:           Thu 01 Jan 2026 18:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20860
IP address blocks:        93.174.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:fd:06:cc:0b:ef:7c:2d:e3:e4:4d:bb:76:52:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
        Validity
            Not Before: Jan  1 18:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0781025b48edb792b2aed92695485b150071baeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:00:08:eb:f4:1f:14:21:64:ff:e9:9f:a2:
                    a8:3b:fe:d8:5f:2a:34:d4:99:d1:0f:7f:3f:df:6c:
                    ce:3c:7d:23:ad:52:ca:2c:67:34:c3:76:45:7c:bf:
                    9e:11:41:c6:cd:ad:d5:8c:d3:f1:b0:d2:30:3a:44:
                    ed:7a:fe:d9:42:c1:43:76:15:01:6b:6a:20:2d:a2:
                    6b:44:e9:5a:22:16:6f:cf:dc:60:b6:0e:d2:4f:16:
                    e5:0e:8e:7a:59:1e:5d:d7:42:0c:c0:ca:89:dc:29:
                    9a:60:74:f1:d3:f2:c5:85:5c:4c:f5:02:38:de:40:
                    79:64:e6:4d:85:33:23:f8:c0:7e:b9:2c:58:a2:f4:
                    d1:29:cb:cf:51:6d:0e:89:70:32:d5:66:42:cb:73:
                    71:9e:fa:f6:08:01:1c:48:9e:46:e5:db:02:d0:a2:
                    36:df:2d:be:1e:14:6f:64:fc:10:56:35:cc:4e:82:
                    ce:7f:8f:6b:dd:4d:57:6a:6a:49:5a:c4:3b:62:93:
                    2e:d6:a5:f3:88:7f:15:d2:52:37:0b:74:a3:a7:72:
                    66:b1:27:b7:15:ef:3f:b8:09:16:44:08:f7:ad:0d:
                    5b:ba:9c:76:94:48:e7:fc:4d:6b:0a:1a:1b:56:69:
                    aa:d6:01:9b:6c:5c:df:c1:c3:d6:41:a1:b0:45:6f:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:81:02:5B:48:ED:B7:92:B2:AE:D9:26:95:48:5B:15:00:71:BA:EB
            X509v3 Authority Key Identifier:
                keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/B4ECW0jtt5KyrtkmlUhbFQBxuus.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.174.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:21:1c:22:43:ff:d7:ee:12:1c:f1:66:fd:13:0e:d4:d3:1b:
         d3:90:d0:5f:05:20:8b:50:fb:95:21:7d:b6:3a:bb:5c:74:74:
         2f:f5:57:c7:dd:e2:97:ac:97:07:15:f1:9b:21:43:f6:ea:4d:
         37:2e:c1:ec:26:7c:03:73:85:3b:10:fa:0a:cc:97:57:83:79:
         ef:51:21:c8:72:33:58:8e:5e:00:cc:1f:b7:a6:ba:ad:30:30:
         22:91:b6:45:9e:21:d4:15:a3:83:eb:9f:4e:0d:5f:fd:cc:33:
         07:99:80:34:d1:3a:c0:20:ff:65:2d:76:ff:39:ed:1d:74:c5:
         ea:e4:67:1d:8d:4f:a7:35:35:b1:00:ce:45:29:5f:8d:b4:ed:
         cd:0b:44:1e:13:79:d5:66:c6:cc:fb:6a:84:7d:40:31:b7:7d:
         e9:aa:76:aa:3d:80:89:17:1c:6a:29:56:96:57:9a:59:b7:f2:
         da:7c:c1:61:c1:7c:56:1d:7e:1d:82:3b:43:9e:90:6c:2b:c2:
         7c:85:df:28:48:f6:86:6f:77:47:ea:6f:4c:bf:71:e1:cf:6f:
         2f:61:22:a2:10:94:22:bc:d6:64:26:97:55:c7:bb:33:85:6c:
         fd:63:e9:01:a0:6e:6b:2d:3b:00:f5:89:e1:d8:87:37:b9:6a:
         9b:83:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:31:25 2026 by rpki-client