This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa
File:                     MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa (raw, json)
Hash identifier:          istn7N2mEs3jOD7elIicwlt/+tBN05Ns7e3r/o7hswk=
Subject key identifier:   32:2A:8B:AA:CA:45:4F:0B:97:54:99:CD:43:EC:4D:D4:C2:2A:E8:20
Certificate issuer:       /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial:       019B77C6F91965C23FAC743A6E98308CA17E
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa
Signing time:             Thu 01 Jan 2026 04:18:07 +0000
ROA not before:           Thu 01 Jan 2026 04:18:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9145
IP address blocks:        193.30.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:f9:19:65:c2:3f:ac:74:3a:6e:98:30:8c:a1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
        Validity
            Not Before: Jan  1 04:18:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=322a8baaca454f0b975499cd43ec4dd4c22ae820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:a1:94:98:16:30:80:45:4f:01:b9:4b:3d:
                    b4:c7:41:26:cd:3d:4d:a6:a5:53:3e:7f:ca:86:1c:
                    4b:82:df:c8:6a:7e:69:87:17:b4:67:93:9d:9a:36:
                    67:18:c2:b7:3f:cc:ab:61:58:d6:88:75:d1:e2:19:
                    71:5e:44:cc:3f:0b:d1:9f:e4:9a:56:ce:03:2d:2c:
                    63:ae:f7:d5:13:c3:18:33:7b:75:95:34:1b:35:80:
                    93:f5:bb:c9:23:00:80:a9:28:4e:9f:9c:08:0c:53:
                    71:4d:73:fb:fd:ff:11:0a:43:40:b7:9f:0a:e2:0b:
                    de:57:c5:f8:e4:bd:ff:13:b5:1b:0a:3a:f2:30:55:
                    74:89:2b:bd:e6:15:bc:8f:3e:29:1a:0d:b2:45:dd:
                    49:7d:a8:5d:0b:2a:6c:89:09:d9:f1:da:5f:64:9d:
                    b2:88:5f:eb:fe:4c:09:c1:cf:25:0d:c7:87:22:35:
                    2e:0a:41:07:3f:10:68:11:4f:5e:34:bd:bd:42:b9:
                    fb:b2:bf:aa:fb:2a:1e:e6:9f:dd:06:de:c7:92:3a:
                    27:84:60:83:c3:c7:07:b4:1d:fe:83:0c:38:57:fd:
                    05:c1:cc:4c:fa:5a:6e:65:6f:6c:9b:45:32:d4:1c:
                    6b:23:b0:2c:5a:b5:40:cb:f6:ca:16:08:a0:8e:4b:
                    86:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2A:8B:AA:CA:45:4F:0B:97:54:99:CD:43:EC:4D:D4:C2:2A:E8:20
            X509v3 Authority Key Identifier:
                keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/MiqLqspFTwuXVJnNQ-xN1MIq6CA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:25:b7:0f:2e:ca:f1:df:3e:dd:d0:d3:38:a4:23:26:d8:0b:
         02:d0:88:b1:77:33:c6:6a:6e:52:d6:68:01:3d:7f:20:a5:67:
         0a:e4:e9:cc:bf:3d:60:10:c8:15:5e:3f:17:1e:8a:3f:44:1b:
         45:18:9d:e1:50:f3:fb:0c:f4:ed:ef:68:2f:75:a4:67:6c:84:
         cd:8c:31:7e:09:a4:a1:6f:d7:71:19:3e:a7:c6:3a:54:db:56:
         ab:d3:0a:65:1b:f5:9e:70:35:c0:ff:43:09:5c:73:c9:bf:d7:
         8a:67:46:89:37:cc:bc:55:ad:08:36:0b:9c:a0:15:d1:96:c8:
         a8:d6:4d:79:50:33:2f:30:0d:b0:42:e6:f0:09:07:9c:09:48:
         6d:b9:34:74:cb:5b:7a:cf:1f:4a:10:bd:6d:c3:5b:d3:a2:61:
         3e:8b:40:cb:2f:c0:90:b8:29:35:29:d9:bd:39:a8:e9:56:78:
         11:5d:60:75:86:a0:f1:06:a8:70:ba:a8:0f:b6:61:b9:f4:1a:
         91:13:a6:32:85:99:d4:ca:e1:3b:18:0b:19:41:48:ee:6c:09:
         05:da:2a:3a:5b:d6:d9:3d:07:35:c8:83:30:62:93:d1:36:60:
         8b:b1:4b:6b:6a:29:28:3a:a7:1a:78:ea:c2:66:af:1e:e3:05:
         2f:30:87:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:26:02 2026 by rpki-client