This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mEY7F4hDq0QCtaWx29gW-G65rJo.roa
File:                     mEY7F4hDq0QCtaWx29gW-G65rJo.roa (raw, json)
Hash identifier:          G2QyvqyRpQ9cs5dbTojaU82ElF/pU6mbGUwhjeGU1AM=
Subject key identifier:   98:46:3B:17:88:43:AB:44:02:B5:A5:B1:DB:D8:16:F8:6E:B9:AC:9A
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F84D74C0E15102B2463BDD66EA75B1F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mEY7F4hDq0QCtaWx29gW-G65rJo.roa
Signing time:             Fri 02 Jan 2026 16:22:50 +0000
ROA not before:           Fri 02 Jan 2026 16:22:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60337
IP address blocks:        93.170.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:d7:4c:0e:15:10:2b:24:63:bd:d6:6e:a7:5b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:22:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=98463b178843ab4402b5a5b1dbd816f86eb9ac9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:bd:10:ca:43:2f:be:64:b4:02:2b:44:57:
                    cc:c6:26:92:70:f3:ea:6b:ed:a2:3c:e5:2f:43:90:
                    3e:bc:49:58:ff:39:4a:f4:47:73:39:70:1b:25:e8:
                    e5:02:a7:e6:bf:66:0c:b0:53:c0:df:34:65:37:66:
                    36:d9:4d:ad:d6:c2:29:4d:a1:53:1d:63:a5:43:78:
                    d9:7e:1d:30:86:d3:bd:96:13:b2:7b:dd:43:a0:7d:
                    24:d8:32:44:22:e7:7a:a1:1c:f2:ee:c0:37:92:51:
                    d2:02:1a:6e:7a:f1:1b:ba:ed:88:fb:87:c0:4f:13:
                    6a:ae:a6:e6:b3:0a:68:39:c5:92:b7:56:e7:64:d4:
                    54:50:c2:d1:9d:b4:0f:ea:13:04:f1:71:98:dc:5f:
                    f5:b2:62:9c:50:45:59:3b:c5:07:1c:e3:8a:09:0b:
                    cc:9a:6d:b8:b3:0d:36:14:c6:65:42:8d:0d:59:21:
                    aa:47:6c:01:70:a2:72:bf:5e:86:c4:ed:e0:ed:c0:
                    c4:02:02:27:62:33:85:5e:c1:a6:73:d2:b4:d6:e5:
                    f4:d2:57:ad:99:96:5f:47:74:8b:11:cc:49:0e:e0:
                    58:87:c4:06:57:2c:d3:61:a0:c3:53:65:4f:1f:f1:
                    92:77:9d:dc:53:6d:28:66:10:8e:69:4b:41:21:78:
                    83:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:46:3B:17:88:43:AB:44:02:B5:A5:B1:DB:D8:16:F8:6E:B9:AC:9A
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mEY7F4hDq0QCtaWx29gW-G65rJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:6b:20:85:22:c6:c9:65:2c:46:fc:3a:b0:45:e2:bf:fe:59:
         a1:6a:ae:1b:6f:d6:2d:f8:b3:95:51:72:d6:a9:19:d5:63:0a:
         f5:d8:df:6f:19:ea:99:4e:db:38:ba:75:20:35:10:33:3e:46:
         a0:6b:46:96:b7:be:5d:78:8a:00:e8:d7:6e:8c:11:a6:fc:20:
         5c:9c:43:a2:38:0d:34:cb:41:9c:31:ec:95:94:e3:11:f6:fc:
         8f:17:aa:a1:00:f7:5c:79:8c:74:40:bb:10:1b:b5:b8:87:64:
         a0:e2:fb:46:4f:26:2b:51:00:e2:45:e8:12:f4:17:ed:81:17:
         1a:91:99:fb:f7:97:74:d4:7b:3d:0a:21:6f:bd:c6:e6:3c:04:
         b6:67:be:69:04:03:ec:e2:d4:f1:b2:56:c6:74:e1:01:d4:5a:
         40:45:8d:5e:cb:90:0b:c5:d9:26:3f:12:60:42:9f:76:2c:6f:
         b3:17:4b:78:da:29:7a:4b:3c:21:60:02:a4:ab:08:a8:04:35:
         37:38:38:ef:c4:00:b7:b7:54:4c:c3:6c:ef:c0:06:f9:d0:16:
         c6:5b:6c:e4:39:07:f0:fa:19:4f:d4:d9:6f:98:2b:07:fb:75:
         67:d5:36:41:3f:2f:34:f6:fc:a2:29:69:79:16:0c:12:81:9c:
         8f:13:c2:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hNdMDhUQKyRjvdZup1sfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjYwMTAyMTYyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODQ2M2IxNzg4NDNhYjQ0MDJiNWE1YjFkYmQ4MTZmODZlYjlhYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsK9EMpDL75ktAIrRFfMxiaScPPq
a+2iPOUvQ5A+vElY/zlK9EdzOXAbJejlAqfmv2YMsFPA3zRlN2Y22U2t1sIpTaFT
HWOlQ3jZfh0whtO9lhOye91DoH0k2DJEIud6oRzy7sA3klHSAhpuevEbuu2I+4fA
TxNqrqbmswpoOcWSt1bnZNRUUMLRnbQP6hME8XGY3F/1smKcUEVZO8UHHOOKCQvM
mm24sw02FMZlQo0NWSGqR2wBcKJyv16GxO3g7cDEAgInYjOFXsGmc9K01uX00let
mZZfR3SLEcxJDuBYh8QGVyzTYaDDU2VPH/GSd53cU20oZhCOaUtBIXiDOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJhGOxeIQ6tEArWlsdvYFvhuuayaMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvbUVZN0Y0aERxMFFDdGFXeDI5Z1ctRzY1ckpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXar8MA0G
CSqGSIb3DQEBCwUAA4IBAQA+ayCFIsbJZSxG/DqwReK//lmhaq4bb9Yt+LOVUXLW
qRnVYwr12N9vGeqZTts4unUgNRAzPkaga0aWt75deIoA6NdujBGm/CBcnEOiOA00
y0GcMeyVlOMR9vyPF6qhAPdceYx0QLsQG7W4h2Sg4vtGTyYrUQDiRegS9BftgRca
kZn795d01Hs9CiFvvcbmPAS2Z75pBAPs4tTxslbGdOEB1FpARY1ey5ALxdkmPxJg
Qp92LG+zF0t42il6SzwhYAKkqwioBDU3ODjvxAC3t1RMw2zvwAb50BbGW2zkOQfw
+hlP1NlvmCsH+3Vn1TZBPy809vyiKWl5FgwSgZyPE8Kp
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:03:33 2026 by rpki-client