This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/SLONluzu2xwR72NqplrGtpQrZpo.roa
File:                     SLONluzu2xwR72NqplrGtpQrZpo.roa (raw, json)
Hash identifier:          NPfEmtRHn9vSpI84XMYUKyQXNZvZB0z0PHOCtt/9Ui4=
Subject key identifier:   48:B3:8D:96:EC:EE:DB:1C:11:EF:63:6A:A6:5A:C6:B6:94:2B:66:9A
Certificate issuer:       /CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
Certificate serial:       019B7C801A20B9E732768259BA7B4A4377CD
Authority key identifier: D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/SLONluzu2xwR72NqplrGtpQrZpo.roa
Signing time:             Fri 02 Jan 2026 02:18:48 +0000
ROA not before:           Fri 02 Jan 2026 02:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50978
IP address blocks:        194.30.167.0/24 maxlen: 24
                          195.93.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:1a:20:b9:e7:32:76:82:59:ba:7b:4a:43:77:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ba32024e2cb6142295112fe61f6b1bc3457bcb
        Validity
            Not Before: Jan  2 02:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=48b38d96eceedb1c11ef636aa65ac6b6942b669a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:07:9b:49:02:b0:74:a7:2d:43:a8:f7:65:8b:
                    89:1a:d4:33:1b:d9:83:81:d3:1b:26:6f:41:81:ac:
                    e6:80:fc:9e:70:d0:1c:54:89:c3:2e:a6:b6:16:b1:
                    42:6f:c0:a2:33:95:f1:63:c6:a5:10:8d:16:d1:05:
                    f3:95:c9:40:b6:3b:89:a9:8d:66:2d:bd:66:8f:e2:
                    14:bf:6d:07:43:dc:fa:79:26:5b:ed:81:94:14:0e:
                    aa:95:9a:e3:55:c2:86:ae:1b:52:ba:40:9c:eb:b6:
                    2b:46:aa:c8:47:a1:e8:8b:fc:68:c1:72:5d:5e:5a:
                    4d:7b:c5:60:e9:04:4c:00:e8:6c:f5:6a:67:e6:6c:
                    42:e2:10:3b:89:10:c7:7c:c8:d0:e1:28:b3:70:30:
                    4f:85:b2:3c:2e:c6:26:39:e6:48:28:c1:6d:29:d9:
                    79:c8:9e:69:ba:dc:c2:77:9a:db:73:27:82:c7:8f:
                    24:6a:65:e8:1a:5e:26:4e:cc:d5:c8:82:ab:f5:6f:
                    10:21:be:20:7c:5f:84:ac:b7:6d:a9:3a:0a:a3:38:
                    85:54:c1:75:6d:af:1c:cd:fe:0c:3a:3e:e8:1a:f9:
                    c9:d7:ba:a5:12:de:3e:26:54:06:04:d2:fc:34:6d:
                    8c:e3:74:c1:f5:f4:d7:0a:64:9b:3b:f8:74:8f:c1:
                    51:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B3:8D:96:EC:EE:DB:1C:11:EF:63:6A:A6:5A:C6:B6:94:2B:66:9A
            X509v3 Authority Key Identifier:
                keyid:D9:BA:32:02:4E:2C:B6:14:22:95:11:2F:E6:1F:6B:1B:C3:45:7B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2boyAk4sthQilREv5h9rG8NFe8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/SLONluzu2xwR72NqplrGtpQrZpo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f63303-176d-4176-abbf-7df9e4a238cc/1/2boyAk4sthQilREv5h9rG8NFe8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.30.167.0/24
                  195.93.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:fb:88:4c:93:9b:4c:79:53:1e:8d:da:85:bd:fe:2d:b5:26:
         85:78:cf:58:2b:14:ba:c6:ba:e0:81:0c:75:8f:3c:01:29:36:
         1f:4d:7e:b5:98:96:46:8b:53:2b:7b:74:b2:bb:22:32:69:10:
         59:33:d9:5c:69:00:a8:56:79:cf:80:0a:58:c1:eb:06:29:12:
         a0:aa:b7:27:9c:1d:c1:57:93:8d:ac:21:59:07:70:ec:fe:87:
         95:76:8b:77:13:13:ab:68:a0:23:f7:45:04:a4:aa:39:15:32:
         04:67:3a:2b:f7:92:8d:85:95:b5:16:47:02:b9:8f:1e:d7:d2:
         b9:d6:7d:9f:a0:a6:d6:f1:73:43:dd:dd:8a:59:f7:10:20:82:
         ae:6e:1d:06:f0:58:22:82:05:47:5c:21:2c:2f:8e:95:a8:16:
         1f:db:92:fb:ed:dd:0e:dd:bc:51:97:df:05:77:82:0a:1e:24:
         27:bf:99:dd:0b:07:be:72:4b:fc:51:d1:7b:3d:cb:44:3b:c1:
         09:40:52:2a:8c:7d:d0:96:0d:41:f9:3f:36:0d:db:d9:01:6a:
         87:df:9b:fc:3e:42:ec:7c:c2:0a:57:8b:57:f0:84:05:3f:70:
         c0:f1:e2:76:b9:4a:52:be:3c:a0:78:ae:c5:3a:32:aa:06:51:
         dd:15:8f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:59:53 2026 by rpki-client