This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/93xRwXpEpvdfu9D_C-KrLh1b6As.roa
File:                     93xRwXpEpvdfu9D_C-KrLh1b6As.roa (raw, json)
Hash identifier:          leXeXBLmLha3JNSqzQ4BFegXrFN7Eijpd8KQkk0NAh4=
Subject key identifier:   F7:7C:51:C1:7A:44:A6:F7:5F:BB:D0:FF:0B:E2:AB:2E:1D:5B:E8:0B
Certificate issuer:       /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial:       019B7F15F40D5437893F8655233369BE865F
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/93xRwXpEpvdfu9D_C-KrLh1b6As.roa
Signing time:             Fri 02 Jan 2026 14:21:43 +0000
ROA not before:           Fri 02 Jan 2026 14:21:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49281
IP address blocks:        85.198.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:f4:0d:54:37:89:3f:86:55:23:33:69:be:86:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
        Validity
            Not Before: Jan  2 14:21:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f77c51c17a44a6f75fbbd0ff0be2ab2e1d5be80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e5:b7:85:06:ca:cc:3b:15:c1:c1:56:d9:7a:
                    34:7a:5c:cf:b9:78:4a:eb:c9:c1:7f:21:48:4c:09:
                    ff:42:c5:05:6c:95:f0:c4:d9:95:bf:2b:65:6b:f5:
                    37:8e:82:58:76:86:48:08:61:f7:58:02:13:d8:30:
                    f0:60:37:63:9c:46:39:7e:ba:46:4e:66:56:e2:1b:
                    0a:c6:c6:a7:f7:cb:33:61:c0:80:72:35:14:95:84:
                    2c:30:3f:b7:b1:21:1d:7b:12:e9:e6:43:8b:06:7a:
                    09:ea:1f:87:61:7c:ee:a1:bd:ab:83:bf:98:95:c1:
                    72:99:ac:67:7c:23:ec:67:5d:33:13:91:b5:74:6d:
                    a0:62:67:0c:9e:62:35:0a:92:df:1a:d7:d3:7c:2b:
                    45:61:26:7a:c4:f1:09:f9:6d:52:46:8f:fb:38:e5:
                    1b:24:fa:fe:f6:5d:98:07:5a:d8:2e:da:3c:fe:a9:
                    d3:d0:b2:a4:b3:52:f9:18:e0:30:17:ca:46:84:be:
                    3e:8f:c6:d0:33:d9:08:26:26:d7:2a:73:2e:c7:73:
                    b3:6f:08:a9:53:4f:18:1f:78:70:b9:f8:04:17:e5:
                    da:c6:b3:ea:42:f6:6d:67:48:cb:38:f8:67:98:65:
                    a6:0a:33:ff:0f:26:20:a1:ea:88:2f:7a:fb:e2:e1:
                    4a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7C:51:C1:7A:44:A6:F7:5F:BB:D0:FF:0B:E2:AB:2E:1D:5B:E8:0B
            X509v3 Authority Key Identifier:
                keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/93xRwXpEpvdfu9D_C-KrLh1b6As.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.198.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:c6:5b:db:cc:71:7c:17:0c:7f:83:19:4c:d9:47:84:a5:92:
         ac:49:52:02:0b:47:88:da:e1:d1:01:3c:8f:97:c5:32:d0:9e:
         cd:06:85:ed:33:2f:ee:24:d7:24:ad:cc:39:c7:ed:3c:89:11:
         e2:81:1b:12:68:95:e0:d8:06:40:15:a1:78:a2:1c:bf:a1:88:
         f1:91:39:fa:dd:ab:03:a9:40:c1:b4:e4:bf:2c:86:68:c4:26:
         3b:3b:03:c0:98:c7:23:12:42:32:da:ea:a3:db:70:59:ae:60:
         d0:32:8c:71:6e:2f:4f:05:ab:d4:bd:76:94:d4:f6:ec:cf:f1:
         4a:49:f8:3b:b7:c7:8d:50:b2:9c:39:62:0c:9f:c6:eb:fe:e7:
         7b:38:a9:7e:f2:26:00:69:6b:b3:6b:ab:12:8d:91:03:25:82:
         3e:b4:37:2e:b7:77:95:11:02:43:1c:52:8b:60:cb:14:d4:d0:
         65:fd:68:0b:d0:4a:74:34:0c:c3:3f:53:16:57:1b:cc:59:c1:
         08:68:3b:e5:76:24:5d:e5:b6:48:fd:4d:e3:04:63:f6:06:8b:
         b6:e6:e8:0d:1e:17:79:ba:40:40:7e:53:1b:e8:8b:eb:56:16:
         4f:a7:f9:65:66:aa:b3:4b:85:01:f7:90:09:c5:19:1d:3f:4f:
         5a:29:6b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:31:42 2026 by rpki-client