This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/PlrUxGnUEiHdEwXChXkr73zDzkg.roa
File:                     PlrUxGnUEiHdEwXChXkr73zDzkg.roa (raw, json)
Hash identifier:          EMehwEJ8sMbKPMfB13BN85G2PxwvK02T0PjHEVbc+3c=
Subject key identifier:   3E:5A:D4:C4:69:D4:12:21:DD:13:05:C2:85:79:2B:EF:7C:C3:CE:48
Certificate issuer:       /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial:       019B7F812B0E47471527DD3316A5FB1542B8
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/PlrUxGnUEiHdEwXChXkr73zDzkg.roa
Signing time:             Fri 02 Jan 2026 16:18:50 +0000
ROA not before:           Fri 02 Jan 2026 16:18:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     27399
IP address blocks:        82.98.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 22:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:81:2b:0e:47:47:15:27:dd:33:16:a5:fb:15:42:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
        Validity
            Not Before: Jan  2 16:18:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3e5ad4c469d41221dd1305c285792bef7cc3ce48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cb:ad:cc:c5:98:1c:0a:58:8d:0c:ac:8d:d1:
                    b5:f7:60:c9:7a:7e:b0:bf:21:e3:49:c9:85:a4:e7:
                    08:eb:e3:0a:e0:5f:c8:8c:f9:33:88:3a:0a:97:fe:
                    73:03:e6:6e:33:6d:6b:dc:6d:2e:0a:e3:e3:ab:85:
                    bb:5c:ed:46:c8:d0:8a:c2:59:cd:8b:39:69:c3:0b:
                    0b:66:84:1f:40:c8:28:09:7b:ef:b0:8c:ce:f0:43:
                    7c:57:1d:94:5a:31:f8:40:1e:4e:37:36:d4:48:fc:
                    00:50:3c:9b:6c:11:b9:24:5c:89:25:a6:c8:eb:b7:
                    7f:5d:89:ff:3d:04:24:0f:ad:33:4b:e4:43:a3:5e:
                    fd:ce:c2:08:29:b6:38:f0:79:99:cf:89:79:88:32:
                    04:7d:9f:1d:7f:38:2c:24:73:2c:76:89:ea:6d:cd:
                    41:71:4c:2d:b1:da:eb:4b:25:5c:f3:04:f9:fd:b8:
                    94:45:63:b9:52:df:df:88:48:e4:32:ed:2c:0d:50:
                    29:13:f7:84:9d:37:9c:09:54:25:89:19:b4:e8:12:
                    34:de:2b:19:ff:1d:f0:79:07:cb:8c:7a:62:86:65:
                    ae:1c:8a:78:b7:4a:f4:8e:72:f1:fe:e4:84:14:9c:
                    5b:89:8f:17:1f:ba:ab:98:a3:26:bd:a0:c0:fb:2f:
                    b5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5A:D4:C4:69:D4:12:21:DD:13:05:C2:85:79:2B:EF:7C:C3:CE:48
            X509v3 Authority Key Identifier:
                keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/PlrUxGnUEiHdEwXChXkr73zDzkg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.98.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:2c:16:e5:17:28:63:94:c1:0a:99:b1:a6:ea:34:08:32:88:
         33:68:1f:c9:6b:ae:21:4f:61:77:41:ef:97:08:78:1a:f2:a7:
         39:13:ad:2e:55:5c:de:32:09:af:61:60:f3:22:3c:fe:d9:e5:
         7f:2b:96:b7:3a:5b:c0:00:c4:79:f6:8e:af:6c:8c:0b:c4:92:
         d7:f1:33:5d:d0:32:73:e5:f9:fa:1c:56:75:ed:bc:87:34:a6:
         8c:d8:a2:63:1b:a8:78:d0:f0:f4:f0:8a:4f:40:17:9c:e6:43:
         8f:5b:51:f7:f1:09:0c:8d:5d:03:49:e4:58:89:32:dd:30:a8:
         b7:57:7b:5f:84:bf:a0:15:df:93:53:ea:35:4b:33:5d:7c:0e:
         a9:e0:86:27:16:11:f8:a8:c1:82:45:9b:41:1b:fc:02:58:35:
         4c:0a:86:1e:15:d0:7f:86:42:33:86:d3:4a:8b:a1:f2:9d:16:
         27:33:02:08:7e:85:36:90:ff:c7:03:32:03:bb:66:3c:37:ce:
         ea:d6:de:16:06:c9:5f:f6:e1:e6:33:e3:3b:44:65:3b:ca:e3:
         f8:76:f7:38:2a:4a:d9:cd:e4:d6:3d:5f:f2:a5:c2:ec:b4:fa:
         ee:7a:c9:b3:9a:44:70:4d:75:7f:61:5e:03:87:ae:78:11:0f:
         f1:41:c2:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/gSsOR0cVJ90zFqX7FUK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl
YmUyNTcwHhcNMjYwMTAyMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTVhZDRjNDY5ZDQxMjIxZGQxMzA1YzI4NTc5MmJlZjdjYzNjZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMutzMWYHApYjQysjdG192DJen6w
vyHjScmFpOcI6+MK4F/IjPkziDoKl/5zA+ZuM21r3G0uCuPjq4W7XO1GyNCKwlnN
izlpwwsLZoQfQMgoCXvvsIzO8EN8Vx2UWjH4QB5ONzbUSPwAUDybbBG5JFyJJabI
67d/XYn/PQQkD60zS+RDo179zsIIKbY48HmZz4l5iDIEfZ8dfzgsJHMsdonqbc1B
cUwtsdrrSyVc8wT5/biURWO5Ut/fiEjkMu0sDVApE/eEnTecCVQliRm06BI03isZ
/x3weQfLjHpihmWuHIp4t0r0jnLx/uSEFJxbiY8XH7qrmKMmvaDA+y+1pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD5a1MRp1BIh3RMFwoV5K+98w85IMB8GA1UdIwQY
MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt
ZGI0ZjM1MmU5YWQzLzEvUGxyVXhHblVFaUhkRXdYQ2hYa3I3M3pEemtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz
LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUmLCMA0G
CSqGSIb3DQEBCwUAA4IBAQCzLBblFyhjlMEKmbGm6jQIMogzaB/Ja64hT2F3Qe+X
CHga8qc5E60uVVzeMgmvYWDzIjz+2eV/K5a3OlvAAMR59o6vbIwLxJLX8TNd0DJz
5fn6HFZ17byHNKaM2KJjG6h40PD08IpPQBec5kOPW1H38QkMjV0DSeRYiTLdMKi3
V3tfhL+gFd+TU+o1SzNdfA6p4IYnFhH4qMGCRZtBG/wCWDVMCoYeFdB/hkIzhtNK
i6HynRYnMwIIfoU2kP/HAzIDu2Y8N87q1t4WBslf9uHmM+M7RGU7yuP4dvc4KkrZ
zeTWPV/ypcLstPruesmzmkRwTXV/YV4Dh654EQ/xQcIe
-----END CERTIFICATE-----
Generated at Wed Jan 21 03:49:24 2026 by rpki-client