This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/stwCeWMzGL7ZQca28YuX50xe0DI.roa
File:                     stwCeWMzGL7ZQca28YuX50xe0DI.roa (raw, json)
Hash identifier:          UrA8IbR6QSjufOgIOzy59dzg6O9c8YCged1nYroTzqg=
Subject key identifier:   B2:DC:02:79:63:33:18:BE:D9:41:C6:B6:F1:8B:97:E7:4C:5E:D0:32
Certificate issuer:       /CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
Certificate serial:       019B76EADB50F68D514C4B5F8ACE389380DA
Authority key identifier: 4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/stwCeWMzGL7ZQca28YuX50xe0DI.roa
Signing time:             Thu 01 Jan 2026 00:17:41 +0000
ROA not before:           Thu 01 Jan 2026 00:17:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213096
IP address blocks:        93.177.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:db:50:f6:8d:51:4c:4b:5f:8a:ce:38:93:80:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bfd9c1406c8ca12ff500b1fd4c8004146a2da4b
        Validity
            Not Before: Jan  1 00:17:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b2dc0279633318bed941c6b6f18b97e74c5ed032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:9c:ff:f3:24:ee:2b:e0:40:77:ff:b1:96:
                    7c:6f:d1:0c:06:07:18:f6:41:92:dc:0e:f2:d6:2e:
                    b8:29:26:e7:d5:c4:cc:11:15:e9:59:ba:48:ef:ac:
                    2b:6a:7f:0c:a3:00:42:e1:5a:fa:4d:f7:85:4c:58:
                    06:77:66:14:bf:d9:46:81:24:ca:15:f0:35:02:a4:
                    b4:da:3d:60:d5:46:9a:22:e1:94:5d:a5:d8:f4:2d:
                    24:de:8c:9e:1f:e5:59:83:91:d5:dc:3b:22:2f:e6:
                    b2:c9:40:74:7f:a2:57:d3:d4:de:af:b7:a2:7a:38:
                    d2:b4:1d:c8:27:78:de:5d:07:dd:89:eb:e6:91:52:
                    95:03:ab:12:dc:5b:c1:a1:5d:7f:e6:e4:39:c0:ff:
                    79:96:44:f0:fa:d8:b9:0a:98:40:34:3d:f5:9b:ae:
                    18:c3:f7:7f:fb:64:62:91:93:b1:2a:c9:fe:63:da:
                    f9:18:35:24:ba:6e:c9:09:8a:87:fb:25:ac:1f:3b:
                    ce:f7:6d:9d:6d:7c:6c:f7:a4:60:1f:6b:44:10:fe:
                    dc:de:49:01:a8:f4:69:48:c5:01:d1:10:27:f8:c1:
                    07:c5:ab:cc:2f:01:dd:7e:36:67:2c:68:26:01:65:
                    c8:aa:af:6e:b2:c4:c5:0c:0c:be:c1:95:22:67:1f:
                    4a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DC:02:79:63:33:18:BE:D9:41:C6:B6:F1:8B:97:E7:4C:5E:D0:32
            X509v3 Authority Key Identifier:
                keyid:4B:FD:9C:14:06:C8:CA:12:FF:50:0B:1F:D4:C8:00:41:46:A2:DA:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_2cFAbIyhL_UAsf1MgAQUai2ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/stwCeWMzGL7ZQca28YuX50xe0DI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8acbb4-ad06-4d2e-8e5d-483465b0c8f5/1/S_2cFAbIyhL_UAsf1MgAQUai2ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:c1:fd:46:17:6b:c8:70:76:7e:82:56:5b:55:e2:d3:f0:61:
         dd:fc:5b:79:1a:c1:1b:59:75:f7:94:3c:7c:ef:b3:fc:33:97:
         e7:56:c9:7a:1e:0a:76:26:51:07:cd:1b:32:9c:bc:ab:c7:52:
         a0:3c:60:b1:ba:92:77:62:98:76:19:66:6a:3d:36:ae:3e:7f:
         25:fa:60:86:c8:eb:1a:0f:a8:55:e5:f8:f8:d2:7b:97:5d:6b:
         12:46:04:a2:18:58:19:dd:bc:ff:4f:82:af:5f:d4:97:ba:69:
         79:cc:f3:14:42:fe:19:58:63:00:9e:62:ad:2d:5c:ff:62:f3:
         46:e0:13:0b:b0:4b:f2:9d:9b:0d:69:e3:f0:ed:42:14:5b:fb:
         42:d3:7f:c9:8c:97:be:3c:18:c1:01:8b:d6:9d:49:31:ff:6b:
         43:bc:0e:ec:1e:b5:31:f0:d6:c6:57:ee:c8:0b:21:fe:d8:1d:
         98:7e:78:53:56:82:5f:a2:a7:63:f4:f4:b5:b9:cf:f1:d3:49:
         48:f6:d8:18:a2:20:93:54:b0:28:5f:46:f7:ca:5b:a1:70:46:
         f3:38:67:0e:af:70:4b:43:b7:68:1f:88:23:81:5c:b8:00:b1:
         bf:59:dc:51:d2:05:34:27:e9:d6:7e:9c:86:6e:77:ab:d7:1a:
         8d:5b:c1:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt26ttQ9o1RTEtfis44k4DaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZmQ5YzE0MDZjOGNhMTJmZjUwMGIxZmQ0YzgwMDQxNDZh
MmRhNGIwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmRjMDI3OTYzMzMxOGJlZDk0MWM2YjZmMThiOTdlNzRjNWVkMDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIqc//Mk7ivgQHf/sZZ8b9EMBgcY
9kGS3A7y1i64KSbn1cTMERXpWbpI76wran8MowBC4Vr6TfeFTFgGd2YUv9lGgSTK
FfA1AqS02j1g1UaaIuGUXaXY9C0k3oyeH+VZg5HV3DsiL+ayyUB0f6JX09Ter7ei
ejjStB3IJ3jeXQfdievmkVKVA6sS3FvBoV1/5uQ5wP95lkTw+ti5CphAND31m64Y
w/d/+2RikZOxKsn+Y9r5GDUkum7JCYqH+yWsHzvO922dbXxs96RgH2tEEP7c3kkB
qPRpSMUB0RAn+MEHxavMLwHdfjZnLGgmAWXIqq9ussTFDAy+wZUiZx9KcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLLcAnljMxi+2UHGtvGLl+dMXtAyMB8GA1UdIwQY
MBaAFEv9nBQGyMoS/1ALH9TIAEFGotpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84YWNiYjQtYWQwNi00ZDJlLThlNWQt
NDgzNDY1YjBjOGY1LzEvc3R3Q2VXTXpHTDdaUWNhMjhZdVg1MHhlMERJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi84YWNiYjQtYWQwNi00ZDJlLThlNWQtNDgzNDY1YjBjOGY1
LzEvU18yY0ZBYkl5aExfVUFzZjFNZ0FRVWFpMmtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbFTMA0G
CSqGSIb3DQEBCwUAA4IBAQBAwf1GF2vIcHZ+glZbVeLT8GHd/Ft5GsEbWXX3lDx8
77P8M5fnVsl6Hgp2JlEHzRsynLyrx1KgPGCxupJ3Yph2GWZqPTauPn8l+mCGyOsa
D6hV5fj40nuXXWsSRgSiGFgZ3bz/T4KvX9SXuml5zPMUQv4ZWGMAnmKtLVz/YvNG
4BMLsEvynZsNaePw7UIUW/tC03/JjJe+PBjBAYvWnUkx/2tDvA7sHrUx8NbGV+7I
CyH+2B2YfnhTVoJfoqdj9PS1uc/x00lI9tgYoiCTVLAoX0b3yluhcEbzOGcOr3BL
Q7doH4gjgVy4ALG/WdxR0gU0J+nWfpyGbner1xqNW8Et
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:38 2026 by rpki-client