This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/10b53a-2979-4106-a8e1-dfc5e32f1b7e/1/ljfQBEZQmvHHz2SJNF4mEsQaURI.roa
File:                     ljfQBEZQmvHHz2SJNF4mEsQaURI.roa (raw, json)
Hash identifier:          ZOzQWwHZlVBnbxBAVYaYpgDTEA0/TVyFXfNDlYL0qQg=
Subject key identifier:   96:37:D0:04:46:50:9A:F1:C7:CF:64:89:34:5E:26:12:C4:1A:51:12
Certificate issuer:       /CN=47657f9a72f32a14e0426a28148bfafc363a2b99
Certificate serial:       019BA7D2E246083408D398D104D370540C21
Authority key identifier: 47:65:7F:9A:72:F3:2A:14:E0:42:6A:28:14:8B:FA:FC:36:3A:2B:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2V_mnLzKhTgQmooFIv6_DY6K5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/10b53a-2979-4106-a8e1-dfc5e32f1b7e/1/ljfQBEZQmvHHz2SJNF4mEsQaURI.roa
Signing time:             Sat 10 Jan 2026 12:12:54 +0000
ROA not before:           Sat 10 Jan 2026 12:12:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59490
IP address blocks:        193.32.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/10b53a-2979-4106-a8e1-dfc5e32f1b7e/1/R2V_mnLzKhTgQmooFIv6_DY6K5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/10b53a-2979-4106-a8e1-dfc5e32f1b7e/1/R2V_mnLzKhTgQmooFIv6_DY6K5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2V_mnLzKhTgQmooFIv6_DY6K5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a7:d2:e2:46:08:34:08:d3:98:d1:04:d3:70:54:0c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47657f9a72f32a14e0426a28148bfafc363a2b99
        Validity
            Not Before: Jan 10 12:12:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9637d00446509af1c7cf6489345e2612c41a5112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:62:fd:cb:cc:c9:80:41:67:1d:9d:31:21:
                    f3:89:2e:05:0d:12:12:30:a1:67:48:1f:cb:2e:47:
                    7e:13:28:b4:a3:53:71:2d:a8:92:81:bf:82:e5:7e:
                    61:71:5c:13:97:9f:0b:6a:90:ed:af:b6:b5:42:92:
                    1e:ab:b2:68:63:d4:ee:66:f0:f2:75:87:67:7b:3a:
                    fb:71:e5:df:86:55:0b:d9:06:85:69:92:35:fc:db:
                    f5:74:a6:9e:50:e7:eb:f2:3f:b4:53:c0:7d:75:84:
                    7c:22:0d:b6:4d:04:7c:c3:5e:0a:fd:4d:c5:40:d0:
                    4e:63:45:18:5e:89:d8:3a:c1:02:a0:6e:1a:75:bb:
                    f0:ac:d7:bf:5f:f0:39:34:f1:42:bd:6d:24:05:14:
                    1b:c3:61:7f:a9:cf:db:13:dc:11:38:1e:36:f8:d3:
                    14:56:a2:6a:c4:b7:6b:5a:02:1a:cf:fd:28:84:31:
                    96:21:1a:f1:70:ab:fe:46:46:b2:d9:d2:7d:7e:6a:
                    c1:16:e1:6c:9f:a2:bd:ae:ee:08:43:24:4e:5e:dc:
                    54:7b:a9:f2:ae:5b:f4:47:80:27:a6:b4:30:e8:9e:
                    4c:40:a3:9d:fa:a2:e3:a4:3a:17:6e:77:b0:61:59:
                    86:ff:f8:6b:29:5a:46:fe:89:5a:7d:e8:c4:1c:bb:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:37:D0:04:46:50:9A:F1:C7:CF:64:89:34:5E:26:12:C4:1A:51:12
            X509v3 Authority Key Identifier:
                keyid:47:65:7F:9A:72:F3:2A:14:E0:42:6A:28:14:8B:FA:FC:36:3A:2B:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2V_mnLzKhTgQmooFIv6_DY6K5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/10b53a-2979-4106-a8e1-dfc5e32f1b7e/1/ljfQBEZQmvHHz2SJNF4mEsQaURI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/10b53a-2979-4106-a8e1-dfc5e32f1b7e/1/R2V_mnLzKhTgQmooFIv6_DY6K5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.32.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:ca:ae:1a:a8:af:f8:4a:e8:22:a6:34:5d:1c:2c:66:f9:36:
         0b:93:b9:85:86:39:09:f4:fc:18:c7:0e:24:e0:41:c3:13:bf:
         ca:42:cf:a7:4f:4b:c3:c9:f3:28:03:11:17:38:0f:72:13:30:
         c0:4c:4c:82:e3:64:40:f2:14:6d:dd:39:33:1a:aa:f9:f1:8f:
         79:58:93:82:9a:01:51:12:79:0b:85:9c:7e:d1:a8:12:f6:ba:
         4b:d0:0d:28:3b:50:07:22:eb:63:cc:5a:3b:d1:eb:e8:84:25:
         ac:f1:34:52:96:a1:15:12:d5:70:4f:8d:33:56:78:6b:2d:11:
         13:ef:77:d2:f5:32:61:71:d8:71:45:c9:eb:d9:2c:02:0b:38:
         c3:e1:f6:d1:2e:95:22:b9:e9:d9:49:c2:dd:4d:62:52:51:98:
         b8:c5:5d:78:fa:a5:70:bc:4c:88:ef:bb:9f:16:f8:c0:b8:04:
         a0:38:a8:11:ea:4b:c7:d9:25:ad:82:e6:fd:29:60:ce:5a:34:
         e3:8d:0a:78:50:b9:d4:b0:2d:b3:5d:23:2c:b6:93:80:67:5b:
         34:62:b9:9c:1f:a4:0c:1a:6a:07:07:db:a3:c2:8c:41:da:14:
         c8:77:4a:cd:c0:50:41:c0:78:6e:f6:93:f2:37:4b:1c:d6:95:
         56:31:ea:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZun0uJGCDQI05jRBNNwVAwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjU3ZjlhNzJmMzJhMTRlMDQyNmEyODE0OGJmYWZjMzYz
YTJiOTkwHhcNMjYwMTEwMTIxMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjM3ZDAwNDQ2NTA5YWYxYzdjZjY0ODkzNDVlMjYxMmM0MWE1MTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysti/cvMyYBBZx2dMSHziS4FDRIS
MKFnSB/LLkd+Eyi0o1NxLaiSgb+C5X5hcVwTl58LapDtr7a1QpIeq7JoY9TuZvDy
dYdnezr7ceXfhlUL2QaFaZI1/Nv1dKaeUOfr8j+0U8B9dYR8Ig22TQR8w14K/U3F
QNBOY0UYXonYOsECoG4adbvwrNe/X/A5NPFCvW0kBRQbw2F/qc/bE9wROB42+NMU
VqJqxLdrWgIaz/0ohDGWIRrxcKv+Rkay2dJ9fmrBFuFsn6K9ru4IQyROXtxUe6ny
rlv0R4AnprQw6J5MQKOd+qLjpDoXbnewYVmG//hrKVpG/olafejEHLsoyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJY30ARGUJrxx89kiTReJhLEGlESMB8GA1UdIwQY
MBaAFEdlf5py8yoU4EJqKBSL+vw2OiuZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJWX21uTHpLaFRnUW1vb0ZJdjZfRFk2SzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8xMGI1M2EtMjk3OS00MTA2LWE4ZTEt
ZGZjNWUzMmYxYjdlLzEvbGpmUUJFWlFtdkhIejJTSk5GNG1Fc1FhVVJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8xMGI1M2EtMjk3OS00MTA2LWE4ZTEtZGZjNWUzMmYxYjdl
LzEvUjJWX21uTHpLaFRnUW1vb0ZJdjZfRFk2SzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSA3MA0G
CSqGSIb3DQEBCwUAA4IBAQCEyq4aqK/4SugipjRdHCxm+TYLk7mFhjkJ9PwYxw4k
4EHDE7/KQs+nT0vDyfMoAxEXOA9yEzDATEyC42RA8hRt3TkzGqr58Y95WJOCmgFR
EnkLhZx+0agS9rpL0A0oO1AHIutjzFo70evohCWs8TRSlqEVEtVwT40zVnhrLRET
73fS9TJhcdhxRcnr2SwCCzjD4fbRLpUiuenZScLdTWJSUZi4xV14+qVwvEyI77uf
FvjAuASgOKgR6kvH2SWtgub9KWDOWjTjjQp4ULnUsC2zXSMstpOAZ1s0YrmcH6QM
GmoHB9ujwoxB2hTId0rNwFBBwHhu9pPyN0sc1pVWMeqq
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:45:42 2026 by rpki-client