This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/ipHVWPiiieQXIjioBpn1cWkaCrA.roa
File:                     ipHVWPiiieQXIjioBpn1cWkaCrA.roa (raw, json)
Hash identifier:          yVajaG4Yls81DJoDX1VI4q3u8oukHAPEixedD9HD90o=
Subject key identifier:   8A:91:D5:58:F8:A2:89:E4:17:22:38:A8:06:99:F5:71:69:1A:0A:B0
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       019B7F15A3A0E5F05152CDB8B5852683FF4E
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/ipHVWPiiieQXIjioBpn1cWkaCrA.roa
Signing time:             Fri 02 Jan 2026 14:21:23 +0000
ROA not before:           Fri 02 Jan 2026 14:21:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49036
IP address blocks:        93.191.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:a3:a0:e5:f0:51:52:cd:b8:b5:85:26:83:ff:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Jan  2 14:21:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8a91d558f8a289e4172238a80699f571691a0ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:50:cf:e0:a2:3d:24:60:ff:40:67:14:21:
                    8c:1c:aa:f0:e7:e5:f1:a2:47:17:33:7b:85:04:bf:
                    da:c5:a2:b3:f1:fc:3a:9b:b8:84:eb:a0:a1:35:28:
                    63:1d:4f:cf:b3:72:b1:a3:4d:b3:1c:1d:62:07:e7:
                    7f:12:ae:a9:82:47:6b:52:15:e9:85:63:62:95:2b:
                    7c:e7:ca:ad:38:ac:46:45:c9:92:7d:df:ce:e9:1e:
                    63:99:29:0c:e5:59:c1:83:15:7d:77:7b:52:9e:b5:
                    de:c3:56:dc:6e:5a:14:44:a4:c6:99:a1:2f:55:e3:
                    b5:a3:9c:46:27:c7:5b:9b:14:dd:dd:24:06:48:66:
                    8e:91:e5:fe:04:4f:f2:d0:63:36:7d:9b:4e:4a:35:
                    3c:35:ac:a2:a9:c5:a0:e9:92:b7:16:9c:60:d6:36:
                    19:6a:d9:ec:09:3c:1a:e8:11:43:f8:d2:eb:72:41:
                    ff:fc:0f:43:93:a7:d9:2e:1c:0c:ad:f6:00:5a:51:
                    1f:70:5a:af:4d:45:2f:07:87:a3:76:89:42:e1:4f:
                    78:89:2c:e0:a6:24:de:01:03:c4:49:d6:3e:16:ff:
                    c1:48:a1:fd:f5:f3:05:3b:ff:a3:79:a4:c3:82:ed:
                    94:af:ab:0b:1e:42:61:7f:b8:df:ed:d3:16:45:45:
                    d6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:91:D5:58:F8:A2:89:E4:17:22:38:A8:06:99:F5:71:69:1A:0A:B0
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/ipHVWPiiieQXIjioBpn1cWkaCrA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.191.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:f2:91:3a:d3:96:4a:98:03:21:68:5e:b0:0f:3b:b9:32:37:
         ac:c7:a2:ba:76:56:e2:1c:44:e2:dc:58:9b:ef:e0:3c:13:4a:
         47:4a:1c:4f:e8:14:4c:86:38:69:41:60:b6:df:56:2d:6f:2f:
         48:98:69:1f:a4:60:65:70:48:63:25:f1:75:11:86:bb:9f:43:
         ee:4e:8a:10:e4:fa:7e:36:66:3b:a5:25:72:f2:98:92:2a:54:
         4f:8b:35:de:51:58:b3:51:d4:09:d0:d2:33:1b:c1:c2:5e:6c:
         6f:3e:57:ae:68:c1:e3:94:3c:34:a8:f4:81:06:b0:39:62:92:
         75:88:e5:de:2c:06:4e:86:8a:db:31:c0:42:17:0f:62:18:03:
         ed:12:3e:86:66:98:ab:a9:34:21:cf:b4:36:29:ac:69:ac:ab:
         10:da:0c:d7:e4:a4:51:0e:00:86:ac:85:a4:1b:eb:c2:30:f8:
         2e:ab:0d:67:89:28:10:ce:34:16:22:61:81:c0:d2:3e:6b:55:
         4a:22:2d:81:ac:49:48:ed:8e:a2:25:d2:d9:da:69:c8:32:c7:
         61:c5:21:d5:4e:62:f0:54:a0:25:6d:7e:9b:98:c3:29:83:54:
         dc:b9:a6:4a:73:aa:7e:4d:a6:97:90:4d:9c:45:c1:bf:7e:e6:
         10:55:06:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FaOg5fBRUs24tYUmg/9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjYwMTAyMTQyMTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTkxZDU1OGY4YTI4OWU0MTcyMjM4YTgwNjk5ZjU3MTY5MWEwYWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM5Qz+CiPSRg/0BnFCGMHKrw5+Xx
okcXM3uFBL/axaKz8fw6m7iE66ChNShjHU/Ps3Kxo02zHB1iB+d/Eq6pgkdrUhXp
hWNilSt858qtOKxGRcmSfd/O6R5jmSkM5VnBgxV9d3tSnrXew1bcbloURKTGmaEv
VeO1o5xGJ8dbmxTd3SQGSGaOkeX+BE/y0GM2fZtOSjU8NayiqcWg6ZK3Fpxg1jYZ
atnsCTwa6BFD+NLrckH//A9Dk6fZLhwMrfYAWlEfcFqvTUUvB4ejdolC4U94iSzg
piTeAQPESdY+Fv/BSKH99fMFO/+jeaTDgu2Ur6sLHkJhf7jf7dMWRUXWMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIqR1Vj4oonkFyI4qAaZ9XFpGgqwMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvaXBIVldQaWlpZVFYSWppb0JwbjFjV2thQ3JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXb+rMA0G
CSqGSIb3DQEBCwUAA4IBAQCi8pE605ZKmAMhaF6wDzu5Mjesx6K6dlbiHETi3Fib
7+A8E0pHShxP6BRMhjhpQWC231Ytby9ImGkfpGBlcEhjJfF1EYa7n0PuTooQ5Pp+
NmY7pSVy8piSKlRPizXeUVizUdQJ0NIzG8HCXmxvPleuaMHjlDw0qPSBBrA5YpJ1
iOXeLAZOhorbMcBCFw9iGAPtEj6GZpirqTQhz7Q2KaxprKsQ2gzX5KRRDgCGrIWk
G+vCMPguqw1niSgQzjQWImGBwNI+a1VKIi2BrElI7Y6iJdLZ2mnIMsdhxSHVTmLw
VKAlbX6bmMMpg1TcuaZKc6p+TaaXkE2cRcG/fuYQVQZO
-----END CERTIFICATE-----
Generated at Wed Jan 21 10:29:16 2026 by rpki-client