This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/L1Av8Agkg4BvWEWbPbNAsYEFxBk.roa
File:                     L1Av8Agkg4BvWEWbPbNAsYEFxBk.roa (raw, json)
Hash identifier:          v3b+ZpRVqPxC/PxnlvcYscfXPSpsRxuoNmW2s29gQ7E=
Subject key identifier:   2F:50:2F:F0:08:24:83:80:6F:58:45:9B:3D:B3:40:B1:81:05:C4:19
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       019B7C80A087F1335B8883E6DEC44FD70841
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/L1Av8Agkg4BvWEWbPbNAsYEFxBk.roa
Signing time:             Fri 02 Jan 2026 02:19:23 +0000
ROA not before:           Fri 02 Jan 2026 02:19:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208949
IP address blocks:        93.113.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:a0:87:f1:33:5b:88:83:e6:de:c4:4f:d7:08:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Jan  2 02:19:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2f502ff0082483806f58459b3db340b18105c419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:ee:16:57:96:b7:20:d3:08:89:10:f8:5b:
                    44:71:89:a8:03:e6:28:11:a7:ff:08:8d:9d:9e:ae:
                    3b:09:25:38:74:61:76:78:6a:51:e6:c5:27:4d:9c:
                    e9:aa:d0:67:0e:37:59:65:b1:93:a3:7e:71:de:93:
                    cf:b6:35:b0:3c:3a:30:a2:ed:0c:d1:af:e9:e4:17:
                    92:34:99:5a:57:5d:b8:53:f2:95:15:40:10:93:2c:
                    00:74:f7:a6:6f:c8:ee:18:3b:44:8e:d0:cd:a8:df:
                    8e:41:90:e2:b9:91:78:50:11:61:c2:c9:4e:3d:63:
                    fe:e7:29:29:7b:d3:d9:96:8f:2c:01:7f:8d:c6:8c:
                    d9:b3:d5:63:bd:75:e4:96:99:c1:3c:72:e1:dd:7b:
                    a1:82:52:05:5a:b1:a0:90:05:df:4b:3f:4f:9b:03:
                    49:51:b8:22:b6:d1:03:b8:d2:25:a0:3e:6e:4a:22:
                    88:98:98:00:4c:bc:42:97:90:29:29:40:86:de:a8:
                    6d:73:65:c7:dc:73:6c:cd:d1:bc:30:3d:22:76:91:
                    c9:75:d3:99:5e:e9:e5:57:9e:56:d6:1a:c6:14:60:
                    80:d2:fc:5d:84:6e:17:90:01:24:da:c7:8c:47:9a:
                    40:58:10:83:7c:27:27:32:06:d5:0c:b7:dc:21:eb:
                    a1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:50:2F:F0:08:24:83:80:6F:58:45:9B:3D:B3:40:B1:81:05:C4:19
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/L1Av8Agkg4BvWEWbPbNAsYEFxBk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ef:2f:fa:39:52:35:a2:2c:47:ad:74:dc:64:01:d9:7d:f1:
         00:ba:8d:52:84:13:3b:29:c1:24:92:5d:0f:fb:68:fd:71:da:
         50:f9:10:28:bb:8a:28:07:5a:52:05:71:d4:53:1b:ba:83:ee:
         b6:b8:90:bc:a4:44:e1:75:84:eb:a7:dd:53:7e:d6:61:3a:d7:
         c5:17:30:c5:d7:72:88:14:c2:99:34:a8:cd:97:0f:3c:09:33:
         23:a5:62:25:ed:50:82:75:5e:56:2c:ff:3f:40:d7:8d:de:27:
         bd:87:5f:8c:18:76:b5:18:af:8c:96:a3:c2:68:a7:19:4f:40:
         5a:3a:06:b3:a2:75:b5:38:49:17:a1:95:e8:8e:96:de:f4:2a:
         5b:4a:b0:dc:d9:d5:42:5f:fa:68:db:27:a7:52:51:8e:82:8d:
         a3:d6:b0:dd:5d:fa:87:02:69:bb:6b:ca:0d:f3:34:6b:1e:15:
         60:a8:4c:22:d5:3f:6c:39:c0:68:de:3f:f2:6b:2c:46:69:8d:
         e2:17:11:39:09:32:7d:51:7d:67:c1:e5:3c:09:9c:27:d4:39:
         03:08:7c:af:b5:8b:54:b5:f3:06:a7:f9:3d:bf:0e:2b:79:da:
         d7:32:59:bf:7f:45:92:f5:4b:de:2c:f9:15:e1:f3:64:f9:3b:
         b8:af:bf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:47:22 2026 by rpki-client