This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/9b1WVB4SRbPnLJ7MMROFIOe7IyI.roa
File:                     9b1WVB4SRbPnLJ7MMROFIOe7IyI.roa (raw, json)
Hash identifier:          o6KKd6GFzp4x33O4H64EWtykpwPkOuUVM1rFQ860o14=
Subject key identifier:   F5:BD:56:54:1E:12:45:B3:E7:2C:9E:CC:31:13:85:20:E7:BB:23:22
Certificate issuer:       /CN=ef75517b3161a047762413301614217679a82608
Certificate serial:       019B797F0262BD5BBF64BE434A8221EC5976
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/9b1WVB4SRbPnLJ7MMROFIOe7IyI.roa
Signing time:             Thu 01 Jan 2026 12:18:45 +0000
ROA not before:           Thu 01 Jan 2026 12:18:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49556
IP address blocks:        185.93.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:02:62:bd:5b:bf:64:be:43:4a:82:21:ec:59:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef75517b3161a047762413301614217679a82608
        Validity
            Not Before: Jan  1 12:18:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5bd56541e1245b3e72c9ecc31138520e7bb2322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:ca:34:36:25:ef:2a:c1:70:63:96:16:5f:
                    b9:fd:12:0c:79:8b:49:ca:f5:ec:b4:e2:4c:ce:2c:
                    d5:e2:44:a6:c1:95:1c:83:94:7e:95:19:95:f8:03:
                    53:3a:87:21:e3:0f:30:5a:33:17:04:c6:c3:40:22:
                    1a:53:90:d3:4b:a3:e2:66:95:02:06:13:cb:85:7e:
                    58:12:e8:f7:1b:35:bd:75:4d:6b:9a:64:8f:18:e8:
                    49:ae:ee:1d:c3:15:93:05:a4:42:90:24:85:24:d6:
                    b9:a0:9e:3c:f9:f0:42:0b:03:5c:b5:b8:94:c0:80:
                    2d:de:65:78:2f:22:20:ca:ba:c9:fa:ca:1d:60:15:
                    dd:76:f5:9c:11:71:e3:a3:10:9a:aa:49:5f:4c:80:
                    c5:71:f2:4d:6b:49:d8:37:af:4f:58:36:b4:70:1e:
                    5f:58:1d:20:f3:c2:5f:52:c2:6e:23:6e:e2:35:51:
                    17:3f:e5:88:ee:56:ba:a1:75:57:f9:05:ad:e1:6c:
                    13:ab:ae:3a:48:1c:16:d1:a7:fd:85:4b:e7:b1:8d:
                    54:47:85:35:ed:b0:9c:17:bd:cc:df:e8:29:23:da:
                    81:e0:dc:2b:f5:83:63:c7:42:6c:4b:e0:d1:f9:e8:
                    e0:a3:a6:51:ed:f8:a4:83:46:95:ad:8e:c1:0c:91:
                    32:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BD:56:54:1E:12:45:B3:E7:2C:9E:CC:31:13:85:20:E7:BB:23:22
            X509v3 Authority Key Identifier:
                keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/9b1WVB4SRbPnLJ7MMROFIOe7IyI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.93.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:57:c0:5e:c8:1d:e7:f5:64:42:17:8b:e5:35:77:c4:bd:1d:
         52:7d:2e:2b:f2:fd:10:5d:c5:a4:73:c4:95:62:3e:7e:c7:6c:
         a3:5e:dd:2f:e0:6a:48:58:bb:ef:ad:e8:05:9e:d8:cf:92:d7:
         34:f7:58:ed:d2:ee:c9:4d:13:bc:7a:69:b3:98:84:c9:aa:9c:
         43:aa:82:da:19:bb:ca:62:07:d5:5b:5c:af:e7:4f:c6:9f:c6:
         f1:db:c6:70:69:d7:e9:0e:74:1d:17:5b:c1:bf:32:5b:15:6d:
         56:37:ed:27:95:da:f3:0a:ed:51:8a:62:d4:0b:49:21:56:73:
         fb:e9:5a:cf:56:c0:8f:69:13:42:3d:c5:5b:52:e1:52:2f:ff:
         73:98:06:4f:3d:8a:03:d4:6d:66:90:95:3d:ad:13:6f:a7:c9:
         77:8b:4c:56:b6:26:9c:09:84:68:a9:df:ca:43:a3:39:49:09:
         97:3f:7c:60:67:f9:33:b2:b5:93:9e:3e:21:fe:51:01:e9:81:
         16:7e:69:6f:24:94:e9:6d:f3:22:5c:0d:e6:a7:d5:66:ca:36:
         d7:52:c6:bf:52:4f:2a:78:5e:fe:ff:f2:04:3c:a5:3e:94:7f:
         5e:0a:61:18:bf:c6:8e:5e:b5:42:a5:ed:53:ef:33:9b:54:9b:
         12:9c:75:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5fwJivVu/ZL5DSoIh7Fl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNzU1MTdiMzE2MWEwNDc3NjI0MTMzMDE2MTQyMTc2Nzlh
ODI2MDgwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWJkNTY1NDFlMTI0NWIzZTcyYzllY2MzMTEzODUyMGU3YmIyMzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteTKNDYl7yrBcGOWFl+5/RIMeYtJ
yvXstOJMzizV4kSmwZUcg5R+lRmV+ANTOoch4w8wWjMXBMbDQCIaU5DTS6PiZpUC
BhPLhX5YEuj3GzW9dU1rmmSPGOhJru4dwxWTBaRCkCSFJNa5oJ48+fBCCwNctbiU
wIAt3mV4LyIgyrrJ+sodYBXddvWcEXHjoxCaqklfTIDFcfJNa0nYN69PWDa0cB5f
WB0g88JfUsJuI27iNVEXP+WI7la6oXVX+QWt4WwTq646SBwW0af9hUvnsY1UR4U1
7bCcF73M3+gpI9qB4Nwr9YNjx0JsS+DR+ejgo6ZR7fikg0aVrY7BDJEydQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPW9VlQeEkWz5yyezDEThSDnuyMiMB8GA1UdIwQY
MBaAFO91UXsxYaBHdiQTMBYUIXZ5qCYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzNWUmV6RmhvRWQySkJNd0ZoUWhkbm1vSmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lZWVhZWUtMDhkNy00ZTI0LTg0ZGQt
MzA3YjQ5NzFlMjY2LzEvOWIxV1ZCNFNSYlBuTEo3TU1ST0ZJT2U3SXlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9lZWVhZWUtMDhkNy00ZTI0LTg0ZGQtMzA3YjQ5NzFlMjY2
LzEvNzNWUmV6RmhvRWQySkJNd0ZoUWhkbm1vSmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV1YMA0G
CSqGSIb3DQEBCwUAA4IBAQCuV8BeyB3n9WRCF4vlNXfEvR1SfS4r8v0QXcWkc8SV
Yj5+x2yjXt0v4GpIWLvvregFntjPktc091jt0u7JTRO8emmzmITJqpxDqoLaGbvK
YgfVW1yv50/Gn8bx28ZwadfpDnQdF1vBvzJbFW1WN+0nldrzCu1RimLUC0khVnP7
6VrPVsCPaRNCPcVbUuFSL/9zmAZPPYoD1G1mkJU9rRNvp8l3i0xWtiacCYRoqd/K
Q6M5SQmXP3xgZ/kzsrWTnj4h/lEB6YEWfmlvJJTpbfMiXA3mp9VmyjbXUsa/Uk8q
eF7+//IEPKU+lH9eCmEYv8aOXrVCpe1T7zObVJsSnHUn
-----END CERTIFICATE-----
Generated at Mon Jan 26 23:22:57 2026 by rpki-client