This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/TlN565d74PyB9p0JXHH7JnDEmvE.roa
File:                     TlN565d74PyB9p0JXHH7JnDEmvE.roa (raw, json)
Hash identifier:          r8GHTarKkex0XwFiQfJSY3kfdErHywHcCGk3qR2Tjec=
Subject key identifier:   4E:53:79:EB:97:7B:E0:FC:81:F6:9D:09:5C:71:FB:26:70:C4:9A:F1
Certificate issuer:       /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial:       019B78A32BC8AC858ED768C5487A3DB64B3C
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/TlN565d74PyB9p0JXHH7JnDEmvE.roa
Signing time:             Thu 01 Jan 2026 08:18:38 +0000
ROA not before:           Thu 01 Jan 2026 08:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     19740
IP address blocks:        147.189.129.0/24 maxlen: 24
                          176.111.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 02:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:2b:c8:ac:85:8e:d7:68:c5:48:7a:3d:b6:4b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
        Validity
            Not Before: Jan  1 08:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4e5379eb977be0fc81f69d095c71fb2670c49af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:99:ca:14:9a:73:3d:67:67:14:61:c4:4b:8d:
                    31:6b:2a:38:89:36:78:62:42:10:9c:a1:a1:6d:61:
                    f0:92:df:57:65:6d:bc:81:1d:72:07:8f:7d:d8:bf:
                    75:f8:10:c6:b8:55:cb:5f:97:a6:c0:42:30:a7:dd:
                    9f:9e:d1:4d:08:41:f6:96:d9:a0:5a:2c:ca:01:77:
                    ae:3a:bd:ab:0b:3f:ec:79:20:fc:a3:e8:1e:1a:93:
                    6a:39:b9:19:bf:f3:88:24:69:41:73:fa:0d:6c:b2:
                    92:44:a2:f6:e5:0f:1c:db:f4:c0:d6:2a:f3:17:2a:
                    f5:65:1a:03:51:55:2c:92:26:b5:e4:0f:bc:18:01:
                    5b:54:45:e0:ad:33:b6:d7:96:6f:47:ae:24:82:40:
                    61:97:0c:fb:cc:b7:b2:e8:15:43:36:30:84:68:56:
                    c7:02:b0:ef:e2:af:46:63:7b:c6:e5:65:ec:e9:b7:
                    37:30:be:57:a5:13:86:6f:ab:0b:fd:ef:af:41:08:
                    63:a1:43:0f:d1:d2:d4:19:ad:6c:66:28:83:95:13:
                    c6:09:dc:a8:7b:73:6f:47:01:98:b2:cc:4c:d4:27:
                    62:80:8f:0c:0b:ad:cc:59:6d:46:ed:18:55:d0:9c:
                    bc:be:9c:14:0d:b1:c4:a8:d5:7d:c3:90:d5:c6:f0:
                    86:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:53:79:EB:97:7B:E0:FC:81:F6:9D:09:5C:71:FB:26:70:C4:9A:F1
            X509v3 Authority Key Identifier:
                keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/TlN565d74PyB9p0JXHH7JnDEmvE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.189.129.0/24
                  176.111.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:15:0e:82:32:b3:e9:02:df:1b:d0:d9:64:8e:a3:d7:f3:a7:
         b5:03:73:8f:df:4b:4d:b7:20:d0:fe:60:3d:d8:aa:7d:3e:52:
         87:0c:78:33:73:9c:27:63:6a:15:68:be:8b:9a:bc:a3:02:da:
         09:60:64:b6:a6:db:7a:ce:31:71:0d:85:28:5c:3d:62:5c:f4:
         bf:f5:a1:65:17:56:38:db:28:d6:55:0a:b8:61:45:74:95:e6:
         8e:4c:f6:4c:63:21:b0:9a:95:40:0c:b6:dc:52:4a:78:29:16:
         dd:f7:b1:e3:42:e3:8d:06:ec:50:92:44:9e:db:16:1b:0a:a6:
         22:bd:61:75:30:cd:83:26:4b:b7:36:40:63:e0:21:23:82:de:
         34:8f:46:28:c4:d5:2e:3e:88:fc:81:5f:f3:76:d0:f6:cc:db:
         af:d3:2f:9b:69:d4:71:aa:30:c1:69:6f:e4:60:0b:1e:ed:bd:
         81:d9:cd:b7:12:54:2d:3f:12:15:fe:24:30:5d:58:be:02:d5:
         ca:89:ae:15:00:86:76:18:26:30:25:d4:f1:b7:41:e2:6e:95:
         d2:2e:ef:77:b4:d9:a6:2d:2b:1c:f7:54:af:9e:bb:ee:2e:25:
         79:77:f3:43:db:2a:47:f2:ec:e8:e5:23:69:4e:a2:4e:8d:4f:
         65:09:f1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 07:26:31 2026 by rpki-client