This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/AlaUHxPXq3ieER5sys598dlOxkM.roa
File:                     AlaUHxPXq3ieER5sys598dlOxkM.roa (raw, json)
Hash identifier:          RZxV/h17P4vk9KS8WEdEwr+BTicC2yMkPA4IqVUF7TI=
Subject key identifier:   02:56:94:1F:13:D7:AB:78:9E:11:1E:6C:CA:CE:7D:F1:D9:4E:C6:43
Certificate issuer:       /CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
Certificate serial:       019B7F8376BCC7AE764697B8C172F6F3889D
Authority key identifier: B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/AlaUHxPXq3ieER5sys598dlOxkM.roa
Signing time:             Fri 02 Jan 2026 16:21:20 +0000
ROA not before:           Fri 02 Jan 2026 16:21:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9159
IP address blocks:        193.110.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:76:bc:c7:ae:76:46:97:b8:c1:72:f6:f3:88:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1693f1be657fb8c71bcbb9c77be54a9372db045
        Validity
            Not Before: Jan  2 16:21:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0256941f13d7ab789e111e6ccace7df1d94ec643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:1e:34:40:88:39:ad:c4:70:2f:76:c4:43:
                    a5:0c:8d:20:13:30:a6:aa:07:58:c4:bc:0b:d6:15:
                    58:0c:f7:01:f8:16:d9:0d:1c:17:a3:be:ad:17:7b:
                    c8:f1:62:ed:16:2d:39:7a:18:1c:1b:73:ef:1b:d3:
                    03:8b:d0:99:2b:cd:a1:18:ee:4b:ea:3a:e9:8d:b1:
                    d5:b6:f3:ee:10:3e:95:72:5d:fb:79:db:57:4d:70:
                    6b:18:d1:af:83:83:45:d4:d9:89:3c:81:bc:fd:7e:
                    00:94:cc:bc:4d:fe:43:50:42:d2:ec:25:42:68:23:
                    1c:18:55:6e:57:66:39:46:33:a2:59:0f:d8:da:07:
                    1d:4f:1b:61:8a:bd:bd:05:8e:b3:f1:1b:ce:2e:82:
                    a8:99:5a:19:a4:08:94:3a:44:bc:44:b7:6b:8d:a7:
                    b4:5a:e2:a5:51:dd:9a:74:e1:95:c8:7c:59:de:7f:
                    2a:2c:38:1d:96:ef:29:24:0b:61:ba:47:dd:4b:b0:
                    71:71:35:65:77:14:2f:03:b9:88:93:f9:e6:b5:a8:
                    c7:7d:77:99:eb:4d:9d:e9:cd:f3:45:52:a1:c1:49:
                    34:33:cb:99:ab:9e:c2:4a:54:bf:e9:ce:d7:d9:3b:
                    bf:d8:d4:90:a1:71:13:20:0f:6d:3f:89:a9:ca:5b:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:56:94:1F:13:D7:AB:78:9E:11:1E:6C:CA:CE:7D:F1:D9:4E:C6:43
            X509v3 Authority Key Identifier:
                keyid:B1:69:3F:1B:E6:57:FB:8C:71:BC:BB:9C:77:BE:54:A9:37:2D:B0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWk_G-ZX-4xxvLucd75UqTctsEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/AlaUHxPXq3ieER5sys598dlOxkM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/80f91f-1e4b-49e6-8d13-7cd146500b2d/1/sWk_G-ZX-4xxvLucd75UqTctsEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:dd:dc:c5:73:b3:3a:08:b3:15:07:37:54:23:45:5a:45:8e:
         a7:aa:c6:5a:c3:6c:10:4f:86:0c:54:e1:40:e8:74:89:86:74:
         a1:69:31:8d:28:d7:d5:61:fc:1a:a7:a9:2d:ad:e5:89:df:43:
         68:27:16:93:7f:ab:ca:e2:67:f9:4f:ea:9f:53:1a:57:bb:98:
         2d:8f:cc:36:86:1b:cc:34:42:62:22:07:10:c0:50:5e:bb:e1:
         d6:02:0f:68:af:bb:33:3f:8b:38:ac:0e:bf:e8:f7:96:48:2a:
         7d:0b:3a:6b:e2:00:6b:6f:ed:3e:6f:b5:1c:2c:e9:ff:04:ed:
         d9:7d:8a:45:06:a9:42:f4:24:d5:52:0f:b0:ba:5e:72:39:2e:
         f4:e1:6e:7c:bc:bc:1f:af:f2:5a:72:95:ac:3f:87:64:e9:76:
         04:47:f3:39:7e:5e:e5:c2:c8:28:ef:2c:20:11:fa:ed:6f:4a:
         bd:cc:44:12:15:a6:43:5f:f3:5d:40:3c:da:ec:e3:4d:2d:80:
         b8:3e:e2:2d:4e:7e:2c:6b:dc:39:99:ac:ef:84:34:05:cd:e5:
         61:18:f6:2f:09:96:32:7e:be:09:b6:84:a3:00:e7:b3:63:36:
         8e:6f:9f:90:eb:fd:8a:4e:e3:8d:c3:69:24:b5:34:83:06:e8:
         29:88:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:24 2026 by rpki-client