This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa
File:                     eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa (raw, json)
Hash identifier:          OdzMUAVnw7I56wJuOq/9aOkYjscK9Sg8yKOxq15PvwA=
Subject key identifier:   78:B4:73:0D:8A:47:E9:CB:49:A0:C6:CC:3E:D5:3E:50:B1:B1:44:8A
Certificate issuer:       /CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
Certificate serial:       019BFA55DCCBAF41357A2BC6A65DCF54BAD3
Authority key identifier: 03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa
Signing time:             Mon 26 Jan 2026 12:44:49 +0000
ROA not before:           Mon 26 Jan 2026 12:44:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203836
IP address blocks:        193.30.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:55:dc:cb:af:41:35:7a:2b:c6:a6:5d:cf:54:ba:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0327769c1a01e1250f1f28a605b5c9d9b6d3419a
        Validity
            Not Before: Jan 26 12:44:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=78b4730d8a47e9cb49a0c6cc3ed53e50b1b1448a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:85:72:72:8f:da:ac:d3:4d:85:0f:b4:d0:95:
                    76:e6:9e:12:97:8a:dd:b2:90:5a:3a:91:87:bf:11:
                    86:73:6d:96:6e:af:6d:9c:77:57:b2:e7:1a:22:6b:
                    02:bd:84:50:09:66:32:0e:db:f4:28:3a:9f:6f:3c:
                    11:0d:2f:c2:05:7d:63:64:c5:e8:2e:8c:fa:d1:e1:
                    43:6c:41:d0:12:d4:e8:3e:12:be:4c:4e:00:cb:b4:
                    3a:61:80:24:97:f1:59:ab:c9:8f:59:b0:b2:29:28:
                    3b:23:35:25:54:a0:42:3e:d4:f3:c3:41:d4:3c:51:
                    3b:ae:31:73:95:d7:b2:b3:0a:88:b7:a5:3b:e7:15:
                    f5:b8:a8:a5:89:ff:ce:a8:24:73:bd:aa:c8:fd:57:
                    d8:15:de:22:cf:ea:ef:11:8c:ea:9c:c4:38:b6:13:
                    cf:ff:5d:6d:0d:76:3a:f5:09:10:6c:f1:db:1b:68:
                    3c:01:5c:8c:43:8d:97:df:43:c8:6e:c9:10:02:69:
                    5a:ee:22:cf:42:9e:1b:0b:3c:2b:7f:95:85:8e:a0:
                    c9:bf:cc:c2:88:38:78:30:85:35:8d:fc:92:e7:bf:
                    6a:14:4b:a9:91:40:b2:50:93:84:ae:7c:96:9a:76:
                    ad:26:91:b9:a0:38:1a:d6:55:83:f1:b6:9e:b5:27:
                    4e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B4:73:0D:8A:47:E9:CB:49:A0:C6:CC:3E:D5:3E:50:B1:B1:44:8A
            X509v3 Authority Key Identifier:
                keyid:03:27:76:9C:1A:01:E1:25:0F:1F:28:A6:05:B5:C9:D9:B6:D3:41:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/eLRzDYpH6ctJoMbMPtU-ULGxRIo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d94e29-ad94-4b0e-afa2-6533b72c6a6b/1/Ayd2nBoB4SUPHyimBbXJ2bbTQZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ab:4a:e5:eb:f3:a3:58:bb:0a:42:f6:8b:e5:e1:73:60:1a:
         b0:53:e8:48:48:47:c6:56:f1:ae:d6:97:4a:8d:40:e8:a2:ac:
         bd:29:24:f2:d4:6f:bf:cf:60:76:60:a1:fe:b6:5e:57:22:48:
         37:db:7e:ad:4a:42:4a:b8:8f:54:fd:db:a9:93:7c:8f:d7:e0:
         05:73:25:27:18:e4:e1:c1:d7:c0:8d:53:6d:5b:15:4d:b3:08:
         8f:cf:40:af:15:29:93:e4:de:15:ec:0a:21:f3:70:7d:3e:56:
         71:c9:30:82:17:9d:ad:c6:49:d0:6a:da:54:89:5e:dd:3a:8e:
         8a:ba:89:ed:aa:28:6b:c0:1e:7e:52:06:82:cf:0f:2b:31:4d:
         d3:35:46:df:2b:7d:8a:fa:86:9e:38:10:40:e1:06:23:c8:c8:
         e2:f3:bf:61:15:6d:f1:6f:84:c1:c1:b1:0d:9d:2f:26:c1:d0:
         fc:cb:35:d4:84:f5:a2:f5:0a:83:78:1b:93:dd:f1:e0:38:29:
         f4:22:1a:56:6d:cf:ac:ee:43:37:4f:90:4a:2d:09:73:58:f0:
         26:36:52:7c:df:05:f3:e9:b4:6d:96:eb:f4:0b:8d:a3:d8:ec:
         fd:9b:f8:0a:ab:8f:f2:fa:83:e3:42:bb:df:32:37:e5:ad:0f:
         fd:57:92:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZv6VdzLr0E1eivGpl3PVLrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMjc3NjljMWEwMWUxMjUwZjFmMjhhNjA1YjVjOWQ5YjZk
MzQxOWEwHhcNMjYwMTI2MTI0NDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGI0NzMwZDhhNDdlOWNiNDlhMGM2Y2MzZWQ1M2U1MGIxYjE0NDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoVyco/arNNNhQ+00JV25p4Sl4rd
spBaOpGHvxGGc22Wbq9tnHdXsucaImsCvYRQCWYyDtv0KDqfbzwRDS/CBX1jZMXo
Loz60eFDbEHQEtToPhK+TE4Ay7Q6YYAkl/FZq8mPWbCyKSg7IzUlVKBCPtTzw0HU
PFE7rjFzldeyswqIt6U75xX1uKilif/OqCRzvarI/VfYFd4iz+rvEYzqnMQ4thPP
/11tDXY69QkQbPHbG2g8AVyMQ42X30PIbskQAmla7iLPQp4bCzwrf5WFjqDJv8zC
iDh4MIU1jfyS579qFEupkUCyUJOErnyWmnatJpG5oDga1lWD8baetSdOIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHi0cw2KR+nLSaDGzD7VPlCxsUSKMB8GA1UdIwQY
MBaAFAMndpwaAeElDx8opgW1ydm200GaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXlkMm5Cb0I0U1VQSHlpbUJiWEoyYmJUUVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kOTRlMjktYWQ5NC00YjBlLWFmYTIt
NjUzM2I3MmM2YTZiLzEvZUxSekRZcEg2Y3RKb01iTVB0VS1VTEd4UklvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9kOTRlMjktYWQ5NC00YjBlLWFmYTItNjUzM2I3MmM2YTZi
LzEvQXlkMm5Cb0I0U1VQSHlpbUJiWEoyYmJUUVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR5dMA0G
CSqGSIb3DQEBCwUAA4IBAQCMq0rl6/OjWLsKQvaL5eFzYBqwU+hISEfGVvGu1pdK
jUDooqy9KSTy1G+/z2B2YKH+tl5XIkg3236tSkJKuI9U/dupk3yP1+AFcyUnGOTh
wdfAjVNtWxVNswiPz0CvFSmT5N4V7Aoh83B9PlZxyTCCF52txknQatpUiV7dOo6K
uontqihrwB5+UgaCzw8rMU3TNUbfK32K+oaeOBBA4QYjyMji879hFW3xb4TBwbEN
nS8mwdD8yzXUhPWi9QqDeBuT3fHgOCn0IhpWbc+s7kM3T5BKLQlzWPAmNlJ83wXz
6bRtluv0C42j2Oz9m/gKq4/y+oPjQrvfMjflrQ/9V5J1
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:51:28 2026 by rpki-client