This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/HoguhPYctq53_NeJpwMiGGaEYHE.roa
File:                     HoguhPYctq53_NeJpwMiGGaEYHE.roa (raw, json)
Hash identifier:          2Rg4I4psfcDKa015Nd8h+FBbuNVy5CBZXEFltS4HBbg=
Subject key identifier:   1E:88:2E:84:F6:1C:B6:AE:77:FC:D7:89:A7:03:22:18:66:84:60:71
Certificate issuer:       /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial:       019B77591D7ED20DD7E3DCA68863DAA7B095
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/HoguhPYctq53_NeJpwMiGGaEYHE.roa
Signing time:             Thu 01 Jan 2026 02:18:07 +0000
ROA not before:           Thu 01 Jan 2026 02:18:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        192.124.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:1d:7e:d2:0d:d7:e3:dc:a6:88:63:da:a7:b0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
        Validity
            Not Before: Jan  1 02:18:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1e882e84f61cb6ae77fcd789a703221866846071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:f9:f5:73:0f:c5:4e:c9:0c:59:72:16:bb:
                    7a:17:03:c4:68:03:3c:6d:84:c8:0a:8d:a7:49:63:
                    d9:70:5b:bc:27:b3:5b:09:e2:80:01:8d:4b:1c:92:
                    5b:84:59:28:bc:60:98:c6:e8:25:b8:dc:d9:e3:d4:
                    ad:22:35:27:ce:7a:2f:b0:96:90:b5:4d:bd:29:b8:
                    a7:8e:30:48:8b:d0:19:7c:10:78:0b:0a:dc:80:d1:
                    0c:6a:20:a5:4e:35:7c:4f:ca:8e:8f:c4:c6:00:5f:
                    f1:59:80:d3:bc:d9:42:c4:b6:50:cb:02:bc:7d:66:
                    6e:25:55:1c:35:26:58:96:46:4d:4b:bf:e2:41:2b:
                    55:f4:0b:0a:4c:9e:df:58:b1:90:c2:75:fe:66:6a:
                    0f:60:a9:e3:45:ac:35:b2:47:f8:d3:e1:f9:92:e4:
                    91:ee:e1:64:4c:45:5a:85:4d:a6:4e:ef:2b:bf:4d:
                    04:35:86:39:7f:3a:8f:82:ee:47:ae:02:0c:66:73:
                    54:41:7c:8f:08:ff:27:5b:42:75:34:98:c9:71:50:
                    97:78:d2:50:7f:c7:50:72:2c:23:ef:c8:da:ee:ef:
                    e0:2b:08:17:45:7c:04:cd:ed:f2:4d:63:73:49:e9:
                    ef:2e:53:f7:fd:a5:59:98:e9:1e:fc:26:7d:b9:d1:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:88:2E:84:F6:1C:B6:AE:77:FC:D7:89:A7:03:22:18:66:84:60:71
            X509v3 Authority Key Identifier:
                keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/HoguhPYctq53_NeJpwMiGGaEYHE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:67:70:3a:f9:24:86:a8:3d:b5:77:24:8f:25:c7:49:19:e9:
         95:4a:2f:cc:79:02:40:9b:b5:46:eb:68:80:85:be:e0:c1:57:
         07:97:66:2e:45:86:37:39:1c:15:75:9e:39:56:33:18:2c:e5:
         1f:32:84:4b:dd:37:8b:df:72:f6:b8:55:35:cd:97:93:45:11:
         f1:f6:f1:a6:04:5d:56:12:6d:1a:8a:38:e5:73:72:d3:cf:76:
         43:2c:d8:e8:30:61:0e:64:84:43:3e:04:88:c8:fb:7e:8b:f9:
         b5:5e:2c:a3:e3:ce:1f:2e:c5:a6:60:33:46:ea:b7:f3:4a:0c:
         55:62:64:d6:67:8e:41:1b:42:04:21:7b:b7:b7:7f:52:33:ab:
         c9:5e:e5:22:89:fa:66:71:ed:f9:41:bb:a7:4f:39:21:15:b0:
         1b:5e:d8:25:cf:ae:db:c0:02:ab:63:8d:46:2d:2b:9d:3c:a9:
         4d:b8:63:7b:14:01:1a:67:8b:7f:04:4f:87:1d:a9:10:15:53:
         82:fd:52:41:f9:b1:9b:2d:ae:92:4f:09:64:fd:38:02:71:b8:
         5e:53:4d:5d:c2:b2:98:ff:ab:ae:c8:97:e5:bf:2f:a9:94:71:
         3f:64:7a:e9:d7:49:ed:0e:a8:42:9f:80:dd:dc:09:65:38:47:
         cf:97:ed:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:58:32 2026 by rpki-client