This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/rUQ-48pTHXQnGwITDjHNDmYKStU.roa
File:                     rUQ-48pTHXQnGwITDjHNDmYKStU.roa (raw, json)
Hash identifier:          5rjqV6UMpYstWovN2+CGxz0WLz8A3h2zK9p4XttXPdQ=
Subject key identifier:   AD:44:3E:E3:CA:53:1D:74:27:1B:02:13:0E:31:CD:0E:66:0A:4A:D5
Certificate issuer:       /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial:       019B78A2581F9213692DA901F8F24B94BA72
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/rUQ-48pTHXQnGwITDjHNDmYKStU.roa
Signing time:             Thu 01 Jan 2026 08:17:43 +0000
ROA not before:           Thu 01 Jan 2026 08:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28716
IP address blocks:        193.219.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:58:1f:92:13:69:2d:a9:01:f8:f2:4b:94:ba:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
        Validity
            Not Before: Jan  1 08:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ad443ee3ca531d74271b02130e31cd0e660a4ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c7:8e:7a:ca:9b:4c:b7:95:34:fe:99:92:0a:
                    12:5f:41:be:b4:bf:12:45:39:a6:b8:24:e9:16:69:
                    1e:73:b6:e1:2f:4d:95:fc:fe:bb:83:36:ee:96:f3:
                    b2:d0:cb:69:22:9b:16:55:12:2c:24:e1:3a:aa:ed:
                    3a:4f:93:d9:45:42:6a:8b:5f:e3:a7:74:c9:06:e2:
                    b8:d1:50:79:46:1d:ee:60:42:85:55:42:6b:c3:fe:
                    67:67:4a:17:51:fb:6d:82:85:95:bc:01:35:fe:2b:
                    c3:67:ef:79:c3:62:bb:d7:c4:96:fb:23:8f:30:81:
                    b3:64:66:2f:4f:f5:cf:f9:e9:47:d6:4c:bf:6e:8f:
                    9f:38:1f:50:84:66:d0:6e:5f:d0:89:55:2b:c1:21:
                    dd:81:b1:24:29:76:47:b5:0a:0b:c6:3f:17:36:1d:
                    f1:78:3d:e3:21:12:44:6b:34:5f:54:88:3b:17:45:
                    69:6a:a7:42:3d:06:21:fa:26:72:7f:61:4e:a4:2b:
                    1b:1c:39:c0:84:68:58:26:fb:48:ef:2b:16:97:67:
                    87:1f:33:a1:3f:09:e6:12:87:16:eb:70:7d:49:33:
                    cc:6b:27:49:26:15:33:0b:09:3c:d1:b1:66:db:cd:
                    c6:8a:c7:67:a8:8c:af:67:2d:6e:15:aa:0a:7e:9e:
                    f6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:44:3E:E3:CA:53:1D:74:27:1B:02:13:0E:31:CD:0E:66:0A:4A:D5
            X509v3 Authority Key Identifier:
                keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/rUQ-48pTHXQnGwITDjHNDmYKStU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.219.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:47:ac:22:6a:b4:e6:48:d6:73:93:69:24:2a:76:b2:4c:
         65:c7:8f:be:30:ff:5b:b8:38:87:05:3f:4a:20:ce:10:4b:be:
         11:aa:4c:81:4a:cb:72:d9:01:2c:24:e1:0c:a2:52:ec:07:45:
         52:5b:5d:ae:f9:d9:8a:b8:a5:9c:84:80:1b:81:82:5c:ce:5d:
         8d:48:32:19:de:a1:41:b1:f0:9e:2a:6f:ea:8f:1d:2b:e8:64:
         c5:1b:25:e0:b1:d7:17:41:09:40:65:63:95:23:bb:47:d3:74:
         49:a5:b7:95:0f:f2:49:94:7c:24:30:3a:1d:2c:69:66:3f:ee:
         71:81:25:67:6b:eb:74:a0:a9:c2:8b:86:28:34:7d:53:4c:bb:
         ce:12:e1:a0:f7:e3:4f:7c:ff:09:21:28:f9:f3:89:7e:5c:78:
         64:d0:c5:75:69:1e:ea:4d:a3:ac:17:a5:e2:de:a3:f0:3a:b0:
         ea:6e:08:29:75:37:ac:76:0d:aa:02:5f:1d:cf:4c:d9:b2:72:
         64:01:c7:43:09:66:e3:ab:99:14:be:7f:69:69:83:41:ab:1f:
         1c:55:40:b6:db:e5:13:5f:91:51:0d:38:d1:33:51:8c:36:6b:
         ab:46:02:5a:08:8f:63:ba:61:cc:fc:81:d4:25:77:15:53:6b:
         c2:a6:42:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:53:24 2026 by rpki-client