This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mEVvAIeD-zh3Yt3zGwFQp-Gedy0.roa
File:                     mEVvAIeD-zh3Yt3zGwFQp-Gedy0.roa (raw, json)
Hash identifier:          yPMuntJ8wRRj1rDmubzGLEL9l/5euvXFJMcyxKFymh4=
Subject key identifier:   98:45:6F:00:87:83:FB:38:77:62:DD:F3:1B:01:50:A7:E1:9E:77:2D
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B797DFCE618308AB31F338C04F3A826FD
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mEVvAIeD-zh3Yt3zGwFQp-Gedy0.roa
Signing time:             Thu 01 Jan 2026 12:17:38 +0000
ROA not before:           Thu 01 Jan 2026 12:17:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210734
IP address blocks:        193.124.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:fc:e6:18:30:8a:b3:1f:33:8c:04:f3:a8:26:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 12:17:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=98456f008783fb387762ddf31b0150a7e19e772d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3c:ac:3b:09:a1:3a:0f:01:d4:10:1f:95:2f:
                    5d:9f:a4:29:c4:91:2b:81:50:38:75:fa:40:e5:01:
                    5a:64:c4:e7:f7:fb:77:11:01:d7:de:b5:73:91:1c:
                    15:34:dc:15:f7:ff:89:37:2f:2d:55:e6:d5:1f:6b:
                    9b:2b:52:29:79:a5:50:85:b7:90:d0:69:ae:33:3c:
                    c4:37:a0:9b:35:5e:ac:1d:38:46:fe:11:c1:89:b4:
                    da:44:2c:ef:11:72:bd:a2:39:1d:42:00:59:cc:26:
                    4d:09:ad:d0:14:87:87:61:bf:ec:bc:dd:4b:f8:23:
                    5a:67:55:2e:82:97:b3:f9:34:94:f6:7a:0d:0c:27:
                    fd:c0:07:60:03:bc:84:68:07:94:1d:c1:4d:54:fc:
                    ef:59:b4:7e:97:27:ee:42:b1:76:4f:12:71:fa:f9:
                    5d:75:24:a3:6a:c2:34:38:dd:2b:b9:bf:24:a0:6d:
                    cb:2d:8a:36:37:e6:dc:03:bd:c9:71:2b:5f:9f:2f:
                    49:2e:c1:24:a1:e4:96:7b:e6:7a:41:aa:e4:e7:ac:
                    e3:c0:ec:f2:a0:77:06:de:94:3f:6c:07:c5:4a:21:
                    0c:e1:cf:23:51:11:30:71:0d:a9:e6:7a:63:3f:19:
                    7c:ba:18:1f:7d:df:9e:ee:66:ee:96:44:46:ff:26:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:45:6F:00:87:83:FB:38:77:62:DD:F3:1B:01:50:A7:E1:9E:77:2D
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mEVvAIeD-zh3Yt3zGwFQp-Gedy0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.124.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:03:3d:20:72:09:a6:7c:5a:30:10:d2:c2:b1:10:5c:92:9d:
         86:57:ef:00:9b:18:7f:08:5c:c0:81:a2:a7:92:7a:0d:a4:88:
         07:4f:3e:f8:10:ff:68:12:b6:e7:11:61:c1:6b:dd:64:42:64:
         e7:58:31:ca:ba:9f:d9:c3:6e:5e:88:a9:f0:ae:05:7f:1a:79:
         ab:a8:e2:fc:48:df:37:90:10:7a:99:69:57:bd:98:d4:28:13:
         98:bb:9b:d9:a5:4a:2c:ab:c5:3a:f0:f7:75:07:77:d6:a2:4a:
         33:2a:1f:3c:09:92:c8:10:bf:d6:66:d8:1e:67:94:24:0c:d0:
         76:98:6e:61:87:4b:5c:68:27:5a:1e:37:70:b9:e9:4c:96:02:
         65:03:82:33:ed:81:ff:f8:ae:15:5c:6d:af:67:1e:0d:f6:c7:
         e5:53:18:eb:fa:ab:77:9c:18:a4:7d:f9:f8:e7:65:87:2c:76:
         40:60:3c:fc:f1:e7:d5:c9:9c:55:27:ee:57:68:3a:77:ac:2d:
         8d:55:ac:fd:08:67:7c:f5:9a:96:54:ff:44:40:59:7c:0a:83:
         15:26:ee:1c:c6:eb:ea:be:3e:73:d6:f6:3d:3e:9e:30:c1:f2:
         86:9e:73:15:9d:64:f0:02:57:92:c8:65:30:3a:86:9c:d7:2e:
         02:f3:b1:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5ffzmGDCKsx8zjATzqCb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMTAxMTIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODQ1NmYwMDg3ODNmYjM4Nzc2MmRkZjMxYjAxNTBhN2UxOWU3NzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TysOwmhOg8B1BAflS9dn6QpxJEr
gVA4dfpA5QFaZMTn9/t3EQHX3rVzkRwVNNwV9/+JNy8tVebVH2ubK1IpeaVQhbeQ
0GmuMzzEN6CbNV6sHThG/hHBibTaRCzvEXK9ojkdQgBZzCZNCa3QFIeHYb/svN1L
+CNaZ1Uugpez+TSU9noNDCf9wAdgA7yEaAeUHcFNVPzvWbR+lyfuQrF2TxJx+vld
dSSjasI0ON0rub8koG3LLYo2N+bcA73JcStfny9JLsEkoeSWe+Z6Qark56zjwOzy
oHcG3pQ/bAfFSiEM4c8jUREwcQ2p5npjPxl8uhgffd+e7mbulkRG/yY+wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJhFbwCHg/s4d2Ld8xsBUKfhnnctMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvbUVWdkFJZUQtemgzWXQzekd3RlFwLUdlZHkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwXxQMA0G
CSqGSIb3DQEBCwUAA4IBAQBKAz0gcgmmfFowENLCsRBckp2GV+8Amxh/CFzAgaKn
knoNpIgHTz74EP9oErbnEWHBa91kQmTnWDHKup/Zw25eiKnwrgV/GnmrqOL8SN83
kBB6mWlXvZjUKBOYu5vZpUosq8U68Pd1B3fWokozKh88CZLIEL/WZtgeZ5QkDNB2
mG5hh0tcaCdaHjdwuelMlgJlA4Iz7YH/+K4VXG2vZx4N9sflUxjr+qt3nBikffn4
52WHLHZAYDz88efVyZxVJ+5XaDp3rC2NVaz9CGd89ZqWVP9EQFl8CoMVJu4cxuvq
vj5z1vY9Pp4wwfKGnnMVnWTwAleSyGUwOoac1y4C87Ft
-----END CERTIFICATE-----
Generated at Mon Jan 19 14:37:35 2026 by rpki-client