This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AwlMIYAxXJ7IEVjPeJDig7jSFwY.roa
File:                     AwlMIYAxXJ7IEVjPeJDig7jSFwY.roa (raw, json)
Hash identifier:          7uf5pdA92tlqQ2kg02mXBe3g8Ks32k2afU5s8Jc+TQg=
Subject key identifier:   03:09:4C:21:80:31:5C:9E:C8:11:58:CF:78:90:E2:83:B8:D2:17:06
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B797DE8718061D1914A24F07D34AEC5F0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AwlMIYAxXJ7IEVjPeJDig7jSFwY.roa
Signing time:             Thu 01 Jan 2026 12:17:33 +0000
ROA not before:           Thu 01 Jan 2026 12:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41745
IP address blocks:        93.115.203.0/24 maxlen: 24
                          212.192.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:e8:71:80:61:d1:91:4a:24:f0:7d:34:ae:c5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 12:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=03094c2180315c9ec81158cf7890e283b8d21706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:5a:e5:b3:58:60:07:2a:db:9d:5d:c0:5f:
                    42:c3:39:58:41:38:fa:ab:98:31:e7:66:01:64:78:
                    7b:f9:47:56:e2:7f:63:d1:b8:2c:ff:2a:38:7d:d1:
                    41:3c:7d:35:1f:96:aa:13:11:71:51:a0:b8:35:1d:
                    1b:7c:66:5c:1b:6e:d9:34:0f:5a:17:6e:00:f3:b9:
                    7a:5f:c8:fa:d0:d7:fb:e9:0c:59:78:8e:62:80:73:
                    58:b7:6c:f7:ab:27:fe:03:ce:88:76:39:b8:84:ca:
                    71:0d:d8:9f:8a:cb:2f:7c:c3:a2:8f:05:50:f6:b2:
                    46:87:47:0e:94:1c:ec:41:00:34:c6:fc:a6:95:c0:
                    64:60:6f:50:c6:d4:ae:4a:30:96:92:75:1f:56:07:
                    7c:83:4b:93:db:31:58:ef:7e:6b:aa:9d:76:8a:ce:
                    a1:33:01:3b:88:0a:d1:f2:25:b8:60:6c:dd:56:63:
                    65:6f:ed:54:07:d2:42:ca:39:b1:8c:f6:aa:16:2a:
                    61:24:e7:60:63:e5:8e:41:e0:f1:57:0d:ef:c6:a6:
                    b9:29:af:a0:86:e8:b2:9e:14:44:2c:c4:d5:d0:50:
                    db:3b:73:97:e5:b0:0f:e8:d8:b7:c0:84:da:82:17:
                    61:96:95:12:17:22:66:0e:b1:3e:ed:8d:61:a3:27:
                    92:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:09:4C:21:80:31:5C:9E:C8:11:58:CF:78:90:E2:83:B8:D2:17:06
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/AwlMIYAxXJ7IEVjPeJDig7jSFwY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.203.0/24
                  212.192.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:41:74:00:b4:db:2c:40:e9:c6:9c:be:9e:ad:a1:af:15:f7:
         3e:0d:53:45:3a:7b:68:67:83:47:16:eb:1b:0d:a8:20:97:41:
         6e:22:8e:eb:9e:b5:f2:a3:47:4d:4a:cc:2a:6b:2f:25:e9:03:
         13:9e:c0:d7:50:eb:52:e9:9d:45:ca:de:32:7f:25:d5:c3:f8:
         c6:d9:1f:30:bf:59:e6:ed:74:7e:10:00:45:6f:50:48:63:52:
         ad:4b:5b:58:43:23:66:2d:91:53:7e:14:3e:e0:89:e8:b3:3b:
         26:6d:4c:fc:5c:b0:4d:c3:0a:4d:e5:01:97:1e:48:c0:d0:1d:
         1c:d9:d3:9d:fb:a5:ec:d9:80:c0:68:a5:9f:ff:01:eb:39:d9:
         02:c6:21:68:8b:65:49:88:16:68:28:1f:ff:78:14:dc:db:8a:
         98:14:26:d6:45:7e:5c:d4:af:e9:72:5b:ab:cf:26:fb:aa:c4:
         e2:76:4c:8d:dd:7b:30:49:75:ac:32:0f:3f:f7:21:45:1c:ba:
         6c:d0:cd:df:47:3f:7a:41:42:96:8e:99:18:34:43:40:04:fd:
         ed:49:ff:fe:dd:3b:fe:fc:02:3f:8d:85:3a:1d:77:74:9f:d9:
         c0:b9:f3:6d:f2:76:72:46:41:aa:47:e0:24:04:7c:33:b6:df:
         94:ba:73:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:37:21 2026 by rpki-client