This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa
File:                     mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa (raw, json)
Hash identifier:          cGf42p5lM09FOWIL9NbqXkxRKlJYCNacEJNXdW+oi2c=
Subject key identifier:   99:81:1F:ED:1B:92:A3:47:BE:8F:BA:E3:3C:BE:D0:F7:33:60:C4:57
Certificate issuer:       /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial:       019B7AC8881226297DFA784524531CA883D0
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa
Signing time:             Thu 01 Jan 2026 18:18:40 +0000
ROA not before:           Thu 01 Jan 2026 18:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42731
IP address blocks:        194.110.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:88:12:26:29:7d:fa:78:45:24:53:1c:a8:83:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
        Validity
            Not Before: Jan  1 18:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=99811fed1b92a347be8fbae33cbed0f73360c457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:11:e3:dd:06:17:23:de:81:a8:f2:79:ea:
                    ca:b8:34:86:d5:c4:cf:b8:c3:92:2b:a9:5e:84:31:
                    7b:06:c7:45:b2:ff:18:49:a9:da:10:7d:29:02:f0:
                    d0:9f:22:92:d8:32:fb:af:80:5e:cd:7a:01:5a:b2:
                    94:c8:83:37:95:ea:17:98:6d:bc:a7:4f:b0:14:bc:
                    ea:06:57:66:13:d9:8e:e7:33:5b:1a:4b:a2:cb:68:
                    d4:f1:5f:af:ba:5c:a0:8b:ee:c3:40:0b:ea:ba:7d:
                    fb:2a:5d:64:bb:2f:35:f6:30:af:5b:d5:71:89:70:
                    24:65:88:13:bf:35:c4:96:80:d2:ed:3f:de:81:1b:
                    1c:96:ce:dc:bb:06:da:8d:2d:b5:bb:c3:b4:82:cc:
                    b3:45:b7:af:e1:ff:eb:df:7e:64:7b:4a:3f:11:d9:
                    d3:cf:84:d7:6a:66:97:32:41:eb:a3:cd:ac:d0:33:
                    5e:5e:9d:71:d8:93:7f:c0:14:60:8c:56:e7:be:cb:
                    27:6c:eb:44:bc:88:17:9f:92:d4:a6:17:25:3b:78:
                    8f:6e:35:be:0e:35:2b:c9:34:e1:c8:c2:65:fa:30:
                    7d:b1:a6:3f:ae:a4:8f:b6:64:1d:9b:b1:b1:de:f5:
                    5c:0c:fa:48:f5:5f:cf:b3:18:26:0b:3c:08:9b:9e:
                    03:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:81:1F:ED:1B:92:A3:47:BE:8F:BA:E3:3C:BE:D0:F7:33:60:C4:57
            X509v3 Authority Key Identifier:
                keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/mYEf7RuSo0e-j7rjPL7Q9zNgxFc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:8a:e7:c2:1b:15:bd:aa:fa:74:c5:31:b7:f3:ca:bf:9f:54:
         c5:01:69:e2:b1:f4:21:82:fc:ee:70:d7:da:5a:05:f9:7d:a9:
         a4:88:9b:30:fa:4d:9e:29:9b:49:2c:4c:12:9e:6d:34:21:cc:
         3a:47:18:bc:50:c1:cf:1e:a9:82:05:49:94:20:53:68:a5:e9:
         09:bb:6d:a5:ff:2f:da:1a:36:e8:fa:60:1e:46:1a:03:62:d2:
         f1:0a:c0:29:af:c6:46:41:17:24:9c:19:8d:c1:d6:f7:9f:3f:
         8d:57:3a:fd:c5:fa:c5:08:e6:af:4c:c7:9c:de:1b:5c:e8:40:
         e0:ee:a0:38:98:50:93:49:83:a8:a7:b3:72:aa:d5:63:b6:5f:
         2d:c9:e0:d9:7a:1b:ce:8f:e4:84:b3:8d:bd:f6:69:43:2f:97:
         3c:93:c6:d5:65:d8:35:9c:c6:c6:22:8e:dd:e7:cf:ae:58:84:
         78:81:42:f1:c6:a2:a7:75:db:51:fa:ac:c7:d6:10:7c:b3:b8:
         43:da:03:c9:4a:6a:33:d3:11:2d:0d:bd:a1:05:cd:42:2f:3c:
         f6:d2:71:1c:4e:ce:09:41:19:01:31:07:9b:43:91:72:4f:c8:
         54:8b:ba:b6:47:44:ee:ff:ba:0d:eb:c0:85:48:d5:44:8f:a4:
         b7:42:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:28 2026 by rpki-client