This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/mI2eJ7owlng-a2RTBGJSB2dC0xc.roa
File:                     mI2eJ7owlng-a2RTBGJSB2dC0xc.roa (raw, json)
Hash identifier:          Mtyhcf44MGwkMCoMpod+PD8wPTtDOMEI8pvJgEO7E5k=
Subject key identifier:   98:8D:9E:27:BA:30:96:78:3E:6B:64:53:04:62:52:07:67:42:D3:17
Certificate issuer:       /CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
Certificate serial:       019B7C7F4572565AEC10E1E929C7A87B553F
Authority key identifier: C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/mI2eJ7owlng-a2RTBGJSB2dC0xc.roa
Signing time:             Fri 02 Jan 2026 02:17:54 +0000
ROA not before:           Fri 02 Jan 2026 02:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197805
IP address blocks:        193.142.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:45:72:56:5a:ec:10:e1:e9:29:c7:a8:7b:55:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c63be75374678db3a049f6a3ef2afab70d4f6f27
        Validity
            Not Before: Jan  2 02:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=988d9e27ba3096783e6b6453046252076742d317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d7:21:65:89:28:72:00:69:61:a0:46:3f:a4:
                    15:ef:b2:b8:c5:04:35:64:d5:d5:16:55:5e:f2:37:
                    a3:23:5a:80:d6:71:90:3d:2d:ae:70:4f:21:84:aa:
                    01:b5:9d:73:6f:7e:04:d5:47:f0:58:ac:f1:29:9b:
                    0f:3e:eb:f1:8d:2f:e8:d3:82:48:e4:6b:21:95:7b:
                    7b:39:cd:c2:ce:0e:e4:69:3f:f3:c2:a3:ea:e4:d9:
                    08:bc:89:63:f6:c3:55:4a:27:72:3d:ac:28:c3:49:
                    d6:82:5b:01:ac:19:4e:17:f7:4f:0f:7f:21:db:d5:
                    46:c4:c4:e8:1b:9e:f2:02:0a:25:e0:d5:49:33:d3:
                    a1:aa:79:6e:d9:1b:eb:da:98:ee:df:0b:42:00:27:
                    b0:03:ac:7a:f8:62:98:bc:64:bf:87:6e:85:53:31:
                    14:ea:f4:4f:20:4e:95:ac:04:8c:2b:a7:cd:58:9c:
                    96:89:6f:ea:b2:bd:45:f0:46:db:75:08:78:f4:68:
                    dc:51:8f:39:db:9f:48:e5:ac:94:3e:77:84:57:d0:
                    ee:18:94:7c:92:26:e3:58:c5:ca:28:31:f7:69:11:
                    2f:e2:2f:60:e1:d5:30:0d:44:7a:d3:b0:c1:20:ed:
                    c3:b6:ba:de:98:64:c7:38:a8:0d:58:21:c0:dc:35:
                    f6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8D:9E:27:BA:30:96:78:3E:6B:64:53:04:62:52:07:67:42:D3:17
            X509v3 Authority Key Identifier:
                keyid:C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/mI2eJ7owlng-a2RTBGJSB2dC0xc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.142.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:42:e6:ee:88:dd:76:dc:4e:5b:d6:5a:34:01:1b:42:c3:ec:
         da:d3:4e:55:85:e0:4c:46:49:b5:38:17:82:ea:a1:d4:77:31:
         38:c7:a4:0b:3d:38:e8:99:49:9f:dd:5e:30:09:78:07:26:2e:
         73:6e:fc:38:7e:e6:fe:34:ee:da:f1:fe:68:b3:e6:21:85:8f:
         0f:cf:1c:33:1a:7d:67:ed:8f:a7:d2:49:76:a8:7d:b0:e2:90:
         a6:36:5b:73:17:33:0d:39:f8:0a:06:e1:23:ae:ff:2c:7c:c4:
         91:8e:f3:44:10:1a:8b:22:b2:b9:8b:14:c4:a4:64:a3:9a:ff:
         ed:b0:19:82:ab:22:41:a7:8a:e4:52:33:e6:07:70:8c:80:b2:
         a4:fe:bf:8d:53:7a:a0:46:2d:b9:68:75:79:cf:7b:9a:46:0e:
         d9:c2:bc:ae:0a:d2:96:f0:3e:0d:58:fc:bf:1a:c3:d7:d5:72:
         3f:40:80:c4:55:c4:7d:56:e1:e0:fa:07:33:e8:d2:24:7c:00:
         0e:b7:8e:db:bc:0d:f1:52:64:1f:48:cc:a3:0f:ec:75:91:3d:
         d0:3f:3d:a3:b7:b0:76:da:a5:e6:94:f9:dd:5d:c7:a3:c6:0b:
         d7:f9:ad:12:c3:e3:b0:9b:67:df:f1:ed:45:95:fd:80:98:74:
         b5:6e:c0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:08:58 2026 by rpki-client