This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/r4v3iJ7ZmrW5k4QgSrKKA1nKHf4.roa
File:                     r4v3iJ7ZmrW5k4QgSrKKA1nKHf4.roa (raw, json)
Hash identifier:          ekj20SSmXzNkPCb5b7krZxHKnMBgi0MEQBHep36Ait0=
Subject key identifier:   AF:8B:F7:88:9E:D9:9A:B5:B9:93:84:20:4A:B2:8A:03:59:CA:1D:FE
Certificate issuer:       /CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Certificate serial:       019B7910DBB19C3EE52EC5566332707322C9
Authority key identifier: E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/r4v3iJ7ZmrW5k4QgSrKKA1nKHf4.roa
Signing time:             Thu 01 Jan 2026 10:18:26 +0000
ROA not before:           Thu 01 Jan 2026 10:18:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31354
IP address blocks:        195.234.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:db:b1:9c:3e:e5:2e:c5:56:63:32:70:73:22:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
        Validity
            Not Before: Jan  1 10:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=af8bf7889ed99ab5b99384204ab28a0359ca1dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ae:3b:0b:c3:02:9e:62:fe:62:34:70:ea:8b:
                    52:eb:e6:dd:6f:8e:a0:4c:d9:a6:ba:84:5b:33:f9:
                    ef:0d:ce:0a:3d:44:5a:a5:99:bd:66:86:95:8d:25:
                    45:f6:19:80:e4:31:97:78:33:44:0a:1f:f2:7a:a6:
                    40:60:6c:e7:da:a7:8d:41:b2:e7:ee:38:c7:f5:d6:
                    62:d7:fb:96:02:42:91:a4:8b:61:39:a3:4b:df:9c:
                    7a:10:56:63:0e:07:db:0a:db:8c:b9:4a:1a:9c:4c:
                    c3:3b:67:b9:f2:91:92:59:b1:d9:02:fd:4a:c0:d9:
                    16:ed:b9:97:c9:f9:b5:cb:2d:fe:8a:e1:a0:da:0d:
                    42:f9:35:75:e3:28:36:07:c1:ec:e0:54:0b:93:4d:
                    29:5f:b1:53:13:e3:d2:7b:62:16:f9:78:92:f9:fd:
                    56:cc:2a:48:7a:d3:2c:74:53:6f:8e:35:ec:11:bc:
                    a7:42:f5:90:d9:28:0e:20:2c:4d:20:ee:f3:d3:a3:
                    69:1d:82:12:d1:0f:87:b9:b6:c3:dc:e1:c3:ac:f6:
                    1b:79:be:8c:33:c1:d8:7b:2c:3d:0c:7c:47:33:32:
                    4f:a9:1e:3a:b9:75:5d:a3:67:42:b5:67:d8:35:26:
                    4c:ea:ed:99:80:8e:a4:11:05:f5:f3:9b:f9:88:dd:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:F7:88:9E:D9:9A:B5:B9:93:84:20:4A:B2:8A:03:59:CA:1D:FE
            X509v3 Authority Key Identifier:
                keyid:E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/r4v3iJ7ZmrW5k4QgSrKKA1nKHf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.234.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:3f:22:71:2b:02:7f:41:1a:95:0b:e9:62:b6:b6:85:53:22:
         4a:18:12:0d:b1:cb:47:a9:c8:4e:53:be:d6:21:26:1d:52:cc:
         04:43:e6:3f:89:db:e2:c1:0f:95:58:34:16:70:3e:fe:d3:24:
         1d:a6:e4:54:9c:9e:b4:aa:5e:d9:98:f6:40:a4:f0:c2:85:e7:
         cf:2a:a2:46:14:ff:ea:39:41:f8:52:85:6c:49:07:c0:53:3f:
         ee:25:a1:30:8f:ea:a5:d9:1f:64:54:0b:a8:9f:9f:4b:12:ec:
         51:37:e8:ff:52:16:70:52:41:dc:11:8a:f4:d5:e1:9b:c0:ba:
         33:c3:54:5b:c6:e1:ae:8c:b4:45:39:3a:13:95:ba:bd:99:1c:
         4e:a7:7b:53:2f:4e:a3:f2:d7:04:e3:64:81:00:60:90:8c:fc:
         bd:a5:84:22:d6:ba:8b:67:96:ef:f5:f5:91:01:05:e0:bf:7e:
         e0:96:c4:11:9b:2c:dc:cd:2f:c9:a7:07:44:2f:ee:11:c9:02:
         44:13:be:83:16:9e:bd:a1:c8:f0:b7:cb:38:e8:9d:9f:4f:12:
         f8:a4:0c:83:dd:97:43:29:31:f0:58:72:bf:11:bc:ce:33:a1:
         0e:38:07:dd:91:0f:13:bc:80:91:fa:1f:9f:59:c4:75:48:98:
         27:43:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:43:57 2026 by rpki-client