This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/g4RYmNig4J0sVJiMkj_qIgt2ecc.roa
File:                     g4RYmNig4J0sVJiMkj_qIgt2ecc.roa (raw, json)
Hash identifier:          AMXXhy9XoCJvEM2f7TVsKWyuskZydY3c3G++2kcR1RM=
Subject key identifier:   83:84:58:98:D8:A0:E0:9D:2C:54:98:8C:92:3F:EA:22:0B:76:79:C7
Certificate issuer:       /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial:       019B79EBB654196AFAAE6FD3A24152789597
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/g4RYmNig4J0sVJiMkj_qIgt2ecc.roa
Signing time:             Thu 01 Jan 2026 14:17:29 +0000
ROA not before:           Thu 01 Jan 2026 14:17:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42981
IP address blocks:        91.196.8.0/22 maxlen: 24
                          185.153.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:eb:b6:54:19:6a:fa:ae:6f:d3:a2:41:52:78:95:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
        Validity
            Not Before: Jan  1 14:17:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=83845898d8a0e09d2c54988c923fea220b7679c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:16:c3:6e:0d:8d:1a:7c:a4:f7:49:e6:70:
                    7b:6f:e3:41:d0:76:94:83:49:07:2e:ea:34:1e:ca:
                    b4:0b:c1:27:db:3c:16:8d:11:e4:5e:31:9a:24:12:
                    b8:0b:82:89:54:32:ab:84:84:ff:56:43:c5:75:81:
                    c8:9e:7c:95:3f:82:71:d0:20:35:f1:d7:12:5f:2a:
                    17:59:74:95:52:60:76:d9:68:ac:99:cd:bf:87:3d:
                    54:e2:aa:cb:9c:da:de:81:db:54:b3:f6:f1:11:3c:
                    16:46:c6:0b:e2:c0:07:ce:1e:d5:f6:a0:68:af:b8:
                    b2:30:6c:ec:cf:c2:8f:83:45:5e:85:94:45:c1:be:
                    92:67:2b:a6:5f:d4:4a:72:65:28:74:ea:41:91:c6:
                    0a:26:53:6b:08:79:01:2e:61:00:36:a1:d7:ba:de:
                    03:b4:fb:32:7f:20:b9:b1:63:60:3c:a7:58:8f:2f:
                    4f:1a:b3:ad:4e:27:10:3f:f1:c5:8c:d5:99:60:1a:
                    7b:b4:37:61:c6:f6:a4:47:60:27:b6:fe:a7:ad:ab:
                    27:5d:9d:ce:e2:6f:04:54:1e:f0:b6:7f:bd:97:51:
                    ca:34:5b:80:ca:a0:a4:d5:92:9f:d3:7c:96:35:68:
                    26:f8:d8:e2:1d:73:41:4f:11:cb:52:6b:51:7c:04:
                    86:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:84:58:98:D8:A0:E0:9D:2C:54:98:8C:92:3F:EA:22:0B:76:79:C7
            X509v3 Authority Key Identifier:
                keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/g4RYmNig4J0sVJiMkj_qIgt2ecc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.196.8.0/22
                  185.153.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:b3:8b:75:bf:b5:fb:62:e7:b1:ec:01:2b:41:c6:aa:ef:ba:
         db:81:6e:f1:8a:46:61:f1:ca:b7:7e:ec:9e:6a:6c:e7:1b:00:
         81:a3:62:a4:fc:71:89:be:0e:55:a7:82:91:8e:cb:e9:de:4b:
         31:94:3a:a8:45:ba:94:f0:29:25:9b:d0:ab:62:b8:1c:e7:bd:
         09:63:26:cf:0f:97:10:3c:ec:d4:bc:de:98:bd:c2:14:d5:c6:
         6b:12:89:36:d5:31:99:75:34:de:22:bc:67:38:62:a8:45:7e:
         b2:0a:72:53:b8:10:08:f1:e1:35:72:58:fa:57:8a:00:9f:2d:
         54:fb:f8:bc:ec:a0:b5:e7:8f:8f:cd:9a:2c:2c:57:8b:be:0c:
         7f:a5:86:a9:c8:85:18:2b:8b:ba:1c:22:a0:7c:88:74:cf:a7:
         26:51:43:ec:69:c8:a0:d7:97:fb:5b:8c:cd:bc:66:cc:80:89:
         ae:df:ca:95:15:a5:92:b2:c5:26:00:e4:20:ed:26:59:a1:d5:
         42:fb:eb:89:4c:2f:5f:e8:eb:88:ed:6c:a6:5e:09:98:cc:64:
         e9:f6:c6:45:28:a2:72:70:2e:1b:e8:78:9f:f3:5e:b9:66:e0:
         7f:e4:77:32:c6:88:60:fa:1d:96:6d:70:8e:f8:05:ec:68:c0:
         45:93:56:6e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt567ZUGWr6rm/TokFSeJWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MDhkZTIwMmUxNzRjYjIzNzQ2ZGNiZGVlYThhOWQ0NDk1
ODAwMTkwHhcNMjYwMTAxMTQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Mzg0NTg5OGQ4YTBlMDlkMmM1NDk4OGM5MjNmZWEyMjBiNzY3OWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupAWw24NjRp8pPdJ5nB7b+NB0HaU
g0kHLuo0Hsq0C8En2zwWjRHkXjGaJBK4C4KJVDKrhIT/VkPFdYHInnyVP4Jx0CA1
8dcSXyoXWXSVUmB22Wismc2/hz1U4qrLnNregdtUs/bxETwWRsYL4sAHzh7V9qBo
r7iyMGzsz8KPg0VehZRFwb6SZyumX9RKcmUodOpBkcYKJlNrCHkBLmEANqHXut4D
tPsyfyC5sWNgPKdYjy9PGrOtTicQP/HFjNWZYBp7tDdhxvakR2Antv6nrasnXZ3O
4m8EVB7wtn+9l1HKNFuAyqCk1ZKf03yWNWgm+NjiHXNBTxHLUmtRfASGNwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIOEWJjYoOCdLFSYjJI/6iILdnnHMB8GA1UdIwQY
MBaAFHkI3iAuF0yyN0bcve6oqdRJWAAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVFqZUlDNFhUTEkzUnR5OTdxaXAxRWxZQUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hYjFjMTEtOWQ5Zi00YzU4LTk5OTMt
NTYxZDVmZjhkYzBlLzEvZzRSWW1OaWc0SjBzVkppTWtqX3FJZ3QyZWNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9hYjFjMTEtOWQ5Zi00YzU4LTk5OTMtNTYxZDVmZjhkYzBl
LzEvZVFqZUlDNFhUTEkzUnR5OTdxaXAxRWxZQUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8QIAwQC
uZkkMA0GCSqGSIb3DQEBCwUAA4IBAQCns4t1v7X7Yuex7AErQcaq77rbgW7xikZh
8cq3fuyeamznGwCBo2Kk/HGJvg5Vp4KRjsvp3ksxlDqoRbqU8Cklm9CrYrgc570J
YybPD5cQPOzUvN6YvcIU1cZrEok21TGZdTTeIrxnOGKoRX6yCnJTuBAI8eE1clj6
V4oAny1U+/i87KC154+PzZosLFeLvgx/pYapyIUYK4u6HCKgfIh0z6cmUUPsacig
15f7W4zNvGbMgImu38qVFaWSssUmAOQg7SZZodVC++uJTC9f6OuI7WymXgmYzGTp
9sZFKKJycC4b6Hif8165ZuB/5Hcyxohg+h2WbXCO+AXsaMBFk1Zu
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:29:16 2026 by rpki-client