This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa
File:                     mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa (raw, json)
Hash identifier:          uZhqzJ/VBEcqt1cjJm9DgjFyfds9tNiF+cC3M9YmS6Y=
Subject key identifier:   9A:BE:06:3F:33:47:97:50:57:76:AA:8A:C4:F8:2D:A4:9F:DB:BC:6E
Certificate issuer:       /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial:       019B7DCB12D364B01B415D7CCF927D4969DA
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa
Signing time:             Fri 02 Jan 2026 08:20:19 +0000
ROA not before:           Fri 02 Jan 2026 08:20:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207483
IP address blocks:        93.180.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:12:d3:64:b0:1b:41:5d:7c:cf:92:7d:49:69:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
        Validity
            Not Before: Jan  2 08:20:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9abe063f334797505776aa8ac4f82da49fdbbc6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:25:a1:a6:40:33:96:6b:7d:a5:96:ce:84:
                    e6:2a:b3:a3:30:9e:8c:70:2b:9f:da:4f:f3:3d:3e:
                    9a:e9:bb:86:7b:0f:11:66:8b:98:b9:cf:60:5b:96:
                    ef:e6:2b:42:c4:03:65:39:33:5f:25:31:e1:92:8b:
                    05:f3:77:74:52:12:24:18:98:80:9d:94:91:ff:dc:
                    ab:e0:d2:ab:ce:bf:d9:7d:6b:9c:76:fc:e1:d2:ef:
                    a6:b8:5c:6a:c5:e6:f3:31:f5:61:2c:45:7f:c6:78:
                    c9:c7:d6:b6:77:50:cb:4b:ec:e4:32:ed:e7:ad:8d:
                    ed:96:20:eb:32:0e:e0:5e:de:57:11:99:b1:b8:36:
                    43:b2:83:1f:02:af:49:88:73:25:75:a7:3e:03:68:
                    f3:04:c8:ac:90:32:f3:cc:97:ee:18:52:b5:22:76:
                    4c:a0:e6:04:cb:77:6f:78:b3:90:56:7a:92:95:3b:
                    7e:99:d8:af:40:c5:4f:c1:3d:2f:b9:ed:9d:4f:15:
                    fa:4c:ef:0c:0c:ef:a2:c8:2b:b9:73:34:4c:41:88:
                    48:fc:4c:df:1d:3d:06:b4:d6:ca:fb:c4:a7:da:dc:
                    53:ca:ed:f6:b5:de:e5:20:f1:0d:94:94:6e:f7:9b:
                    2a:30:3a:04:6f:34:bb:b3:c3:ec:eb:bd:c2:74:5c:
                    30:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BE:06:3F:33:47:97:50:57:76:AA:8A:C4:F8:2D:A4:9F:DB:BC:6E
            X509v3 Authority Key Identifier:
                keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/mr4GPzNHl1BXdqqKxPgtpJ_bvG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.180.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:38:91:30:b2:c9:30:7a:d8:64:8d:fd:8e:11:db:8d:a8:f3:
         56:81:6d:25:c1:54:aa:6b:61:5b:e6:14:fc:72:e3:31:f7:94:
         c2:29:ab:63:a8:59:37:e1:43:81:0c:8b:00:a7:18:57:a8:9f:
         4a:be:6d:52:18:ab:49:81:7b:ac:c8:f2:06:a2:3a:01:2b:69:
         01:c6:db:91:0a:61:64:3c:c8:88:e6:41:87:90:2a:0b:94:d0:
         9c:81:51:55:aa:a0:3b:09:14:e7:62:4d:1c:55:4a:29:c1:57:
         f1:79:d2:f7:e7:da:2a:57:d9:df:ff:e9:72:0f:c0:eb:cd:10:
         7c:35:1f:f5:12:36:06:17:53:c6:0d:d3:7f:a8:9b:c6:75:79:
         fa:20:ad:b8:0f:3e:a8:06:ba:0b:05:b3:73:7d:b3:6c:8e:f6:
         ad:7a:b3:47:e1:fb:10:10:c5:b9:90:e3:b6:92:65:d4:44:41:
         f6:39:20:a3:05:c2:6e:21:5c:4b:78:97:3d:5c:16:17:60:e6:
         ce:38:9a:ca:a3:6e:8d:a9:c7:32:d1:1d:24:e0:7c:76:b1:65:
         7e:a9:b1:b6:5b:ca:70:31:55:6a:0a:45:93:7f:c3:a6:55:83:
         55:79:81:55:91:a1:e1:d5:7f:1a:57:22:55:4d:22:50:6e:77:
         9b:67:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 18:59:13 2026 by rpki-client