This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/HdaygFB4iSszAmMjo8uX2Se1nQA.roa
File:                     HdaygFB4iSszAmMjo8uX2Se1nQA.roa (raw, json)
Hash identifier:          UArj7jtroG3BsSDh4aM2iaAylpZS3vUew6s3b3GEueo=
Subject key identifier:   1D:D6:B2:80:50:78:89:2B:33:02:63:23:A3:CB:97:D9:27:B5:9D:00
Certificate issuer:       /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial:       019B7BA4B75C8E15208A1FBA931A1F9EC422
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/HdaygFB4iSszAmMjo8uX2Se1nQA.roa
Signing time:             Thu 01 Jan 2026 22:19:10 +0000
ROA not before:           Thu 01 Jan 2026 22:19:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25075
IP address blocks:        193.201.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:b7:5c:8e:15:20:8a:1f:ba:93:1a:1f:9e:c4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
        Validity
            Not Before: Jan  1 22:19:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1dd6b2805078892b33026323a3cb97d927b59d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:c8:0a:b5:0e:22:c3:5d:42:b0:6c:7e:fa:
                    cd:f4:3a:96:fd:0a:67:a3:38:f7:c0:72:d4:1f:c2:
                    94:cf:8f:25:94:6d:db:d9:c1:da:0b:26:de:46:18:
                    c1:c2:3f:73:7e:35:de:20:3c:d8:fa:16:3d:a3:b3:
                    f4:88:fb:47:5e:89:5e:5f:ed:ef:29:60:26:4d:23:
                    c5:8c:da:60:5e:d9:43:03:91:7c:47:74:46:7f:af:
                    a3:9d:b3:9f:9b:a9:d0:78:06:2e:f4:ac:45:b1:73:
                    43:b5:4d:30:93:0c:5e:93:83:c6:33:e8:98:db:66:
                    2b:21:54:53:12:78:38:05:2e:eb:57:0f:b4:24:e3:
                    6b:cb:5e:72:81:ea:42:06:48:90:18:dc:9c:2c:7f:
                    3b:e4:c8:1a:af:bc:c0:15:83:82:37:07:7d:0c:84:
                    34:ab:90:51:31:69:b0:ce:19:fc:d2:f3:bc:40:fb:
                    a4:3f:8b:8f:5e:f1:08:d9:89:a7:0f:c3:f9:2b:ea:
                    5a:24:7e:bd:24:4a:33:d2:8a:d4:c5:ab:3a:fe:02:
                    b3:34:ad:97:c4:b9:d6:ad:1d:00:61:40:50:f2:f8:
                    e3:b1:a0:93:44:69:4d:1c:01:82:97:71:d2:63:63:
                    47:b8:02:f4:76:1f:3b:37:8f:a7:61:ab:db:b7:55:
                    ef:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D6:B2:80:50:78:89:2B:33:02:63:23:A3:CB:97:D9:27:B5:9D:00
            X509v3 Authority Key Identifier:
                keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/HdaygFB4iSszAmMjo8uX2Se1nQA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.201.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:d5:07:2b:88:17:31:d0:f1:ed:36:37:68:f3:4c:d8:13:6e:
         e9:0a:d8:32:6b:e5:a3:77:fe:e4:a5:03:6e:d5:98:c0:28:d6:
         0b:2b:bf:94:e6:fb:08:65:50:4a:fd:64:01:13:82:1d:7f:3e:
         11:e3:02:6b:e3:12:52:71:ca:19:fd:cd:57:c2:88:f3:2e:02:
         38:be:ef:24:cf:56:cd:da:e3:dc:97:06:2f:36:70:35:6d:87:
         2d:38:b1:c7:77:29:fe:4a:af:3f:3b:30:e4:28:d5:9f:9a:23:
         57:c3:a3:32:ed:30:e7:e0:be:6a:11:6f:76:21:06:fa:8a:fa:
         ec:f9:b2:0f:19:6b:7e:26:63:7e:14:2e:62:8b:b9:01:46:ae:
         31:c1:a1:a2:f6:a6:e6:72:ec:64:0c:ff:6e:30:f9:b5:5a:a9:
         b0:bf:2e:4c:63:28:74:e3:6f:8a:b6:00:88:48:26:d7:e3:c9:
         8a:b3:ff:43:6e:7b:0f:ab:5c:5e:03:0b:b4:77:a7:c5:84:99:
         1f:3a:bd:23:3c:f4:dc:2f:d1:69:77:28:07:7f:66:85:b4:b3:
         b9:1b:b5:47:a4:45:63:4f:7f:bb:70:67:16:84:2d:c9:10:32:
         2b:e7:e2:85:ae:7d:03:33:49:5d:ce:ed:94:17:ca:a2:dd:cb:
         ea:6f:a0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:11 2026 by rpki-client