This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa
File:                     v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa (raw, json)
Hash identifier:          cy9aHhG1D4qb9Mf0MFLR+yCKxTnlEwaqz4cPpj+WG3w=
Subject key identifier:   BF:8F:16:4D:12:40:FA:DD:2A:E5:51:7D:35:B7:01:90:DB:DF:E8:18
Certificate issuer:       /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial:       019B7D5C5F8D4FF7AFD3F3DC4455E946B400
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa
Signing time:             Fri 02 Jan 2026 06:19:24 +0000
ROA not before:           Fri 02 Jan 2026 06:19:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        188.92.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:5f:8d:4f:f7:af:d3:f3:dc:44:55:e9:46:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
        Validity
            Not Before: Jan  2 06:19:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bf8f164d1240fadd2ae5517d35b70190dbdfe818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:7c:ed:fa:bd:aa:01:5e:cd:97:ac:a7:7c:
                    27:eb:16:ea:31:ed:15:bc:a7:ed:09:06:b5:40:cb:
                    c2:50:c4:38:2f:e4:69:ed:11:ee:83:46:a3:32:0c:
                    fa:2b:86:1e:a5:1d:dd:cf:16:51:00:35:48:80:c5:
                    7f:a1:60:dc:2b:07:94:ad:9c:3a:33:b1:d5:93:1b:
                    64:17:21:ac:b8:5a:4c:bf:08:f4:41:3a:c8:1d:b0:
                    d8:bb:0b:90:51:0d:69:d5:3a:65:fd:74:d7:a5:e8:
                    ca:d0:6b:53:1a:2f:9a:05:17:38:8e:ed:bd:b7:11:
                    0c:fd:ad:02:92:a5:d1:e0:01:0b:bd:bf:92:cd:bd:
                    0c:0e:a3:c5:90:2e:77:f8:2d:52:19:67:1a:7d:16:
                    89:09:87:76:51:d0:a2:dd:1f:fc:86:2f:27:c7:58:
                    9d:d7:6b:0b:97:24:15:ca:df:4e:e9:cd:83:a8:5f:
                    ea:d2:56:29:eb:24:3b:5d:31:14:7c:ee:c1:cb:fe:
                    56:d0:0e:b8:8c:a4:38:38:28:2c:54:b5:1f:72:08:
                    bb:36:4d:31:82:a5:c4:b1:c9:be:c5:67:60:82:c1:
                    7f:76:78:0b:dd:4f:8c:b6:32:32:93:76:af:8d:a4:
                    be:dd:b6:c2:d4:cc:a9:8a:4d:38:0e:2e:e7:f3:b0:
                    6d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8F:16:4D:12:40:FA:DD:2A:E5:51:7D:35:B7:01:90:DB:DF:E8:18
            X509v3 Authority Key Identifier:
                keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/v48WTRJA-t0q5VF9NbcBkNvf6Bg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.92.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ad:8e:05:e5:5b:87:42:6b:bf:9d:ab:73:bb:e4:23:88:5b:
         d4:d4:c0:34:e1:ff:5a:de:ba:f2:0c:b6:e7:02:24:af:08:60:
         e4:15:5b:2e:83:b8:a5:4d:a1:07:36:b0:06:8f:e8:11:94:07:
         e2:47:b4:d0:42:aa:6e:a6:77:c1:8e:34:d3:74:9c:e1:7e:2c:
         5d:af:e1:22:ac:2c:c7:19:a2:45:7a:79:11:71:08:10:85:9b:
         e2:18:40:1b:6f:6f:1b:55:d1:7c:3f:e5:7c:aa:79:35:60:b5:
         28:0c:98:82:f0:95:4c:bc:0c:5d:41:9e:0b:7e:73:bf:8e:eb:
         34:8a:53:59:14:3e:20:e5:4f:a9:63:aa:b1:ae:b3:c1:b3:df:
         7a:56:7f:92:8e:cf:15:68:5b:b5:c4:60:06:f2:92:cb:fe:3c:
         d6:94:6d:71:1b:72:f4:56:66:ff:fd:20:76:da:86:6e:6e:5a:
         df:9c:9e:f8:c3:73:c3:b3:e9:60:c4:fe:b9:99:d7:24:3e:c4:
         22:43:bc:53:7f:a4:92:9b:a6:56:ba:28:e8:9c:b3:35:46:1e:
         7c:3d:5f:00:18:fb:dd:3d:02:16:ef:dd:5b:ac:da:22:76:53:
         b7:c3:2e:09:bc:13:b3:3b:84:28:97:1f:04:f6:f4:38:ef:fd:
         ff:01:f9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:51:43 2026 by rpki-client