This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/boMPzB5MrLCBCgPiAuxb_TuC5Fo.roa
File:                     boMPzB5MrLCBCgPiAuxb_TuC5Fo.roa (raw, json)
Hash identifier:          vfT8ICeoVPVyWreV9mhX7MTeB+YvfZSrLrbuCKOGM24=
Subject key identifier:   6E:83:0F:CC:1E:4C:AC:B0:81:0A:03:E2:02:EC:5B:FD:3B:82:E4:5A
Certificate issuer:       /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial:       019B7D5B06C68CF3CA525B5192FC256D2207
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/boMPzB5MrLCBCgPiAuxb_TuC5Fo.roa
Signing time:             Fri 02 Jan 2026 06:17:56 +0000
ROA not before:           Fri 02 Jan 2026 06:17:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209433
IP address blocks:        93.115.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 12:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:06:c6:8c:f3:ca:52:5b:51:92:fc:25:6d:22:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
        Validity
            Not Before: Jan  2 06:17:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6e830fcc1e4cacb0810a03e202ec5bfd3b82e45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:12:8a:63:a4:21:dd:f4:16:33:39:5a:02:
                    d4:3e:e9:d4:2e:28:42:db:df:61:09:d1:0e:73:dc:
                    aa:c0:09:f5:8a:13:e5:b0:01:bb:89:97:1d:27:4e:
                    c7:5a:86:e3:b2:50:96:70:0d:85:6d:75:8f:28:ba:
                    fe:c7:bc:cf:e2:64:a7:86:be:57:20:96:f8:d0:0d:
                    b6:73:a9:62:3b:0b:5d:0f:bb:10:de:2a:a5:05:28:
                    aa:f1:1a:46:ef:40:f3:ef:5a:fa:86:5a:ad:1f:25:
                    cd:d8:d5:dd:51:d4:1c:2e:38:42:a6:ed:a6:ca:18:
                    ee:9a:da:aa:9c:e0:fb:eb:89:12:60:07:43:e6:5d:
                    6d:5a:21:0f:1b:ca:48:3e:6c:3a:c0:50:aa:ac:a3:
                    9b:5e:4b:e1:bb:85:f1:60:69:f5:0c:54:d3:4d:82:
                    3b:b6:ad:95:f0:7e:6a:e1:b2:d5:4a:18:e2:75:49:
                    a4:c2:d7:7e:67:a8:c7:9a:bb:55:54:99:56:8e:68:
                    cf:c3:bb:a1:bf:57:d9:25:f6:f7:69:91:da:e2:90:
                    01:7a:d4:96:0c:9a:8e:27:94:0d:18:1f:00:5a:a2:
                    c9:cc:25:e5:1d:fc:32:f1:a7:65:19:89:c7:dc:ce:
                    e3:be:43:ef:90:ae:ce:1a:2c:48:42:99:30:8e:cc:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:83:0F:CC:1E:4C:AC:B0:81:0A:03:E2:02:EC:5B:FD:3B:82:E4:5A
            X509v3 Authority Key Identifier:
                keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/boMPzB5MrLCBCgPiAuxb_TuC5Fo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.115.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:fd:84:c9:d5:3a:d9:86:c5:c6:2c:c5:ac:90:3e:be:45:47:
         fd:c0:3a:2c:1d:ba:ae:f8:bf:bf:86:3c:20:4f:1f:fb:78:06:
         ac:1b:df:e7:42:d1:e1:a6:bd:26:fc:18:c8:79:4e:1f:90:f3:
         84:e8:a1:dd:99:47:d6:53:9a:ba:bf:30:3f:15:61:78:e5:d1:
         55:6e:f8:38:8f:60:de:a2:bb:9f:69:34:c9:43:a6:9a:51:4f:
         6a:6f:ff:7b:f1:47:1a:36:e4:28:11:40:13:0c:52:48:76:ab:
         6d:b9:c5:e2:20:7f:f6:38:87:cc:ca:82:75:5b:1a:2e:bf:e1:
         d9:56:c2:c3:48:19:37:27:d6:22:fe:64:47:9b:f0:d0:f3:a7:
         90:c1:42:e2:f3:5d:3f:6b:bd:d0:46:fb:ff:0e:6f:65:49:84:
         f2:14:61:c2:9e:84:3f:a0:2e:e0:80:e5:2f:b5:17:54:10:ed:
         2c:5f:14:8d:76:47:0a:9e:10:e7:84:c0:b4:6f:3b:49:1b:c4:
         56:f8:0c:58:70:87:3a:ac:e4:8b:74:5d:de:9f:d4:b4:a5:71:
         3a:db:56:e2:aa:8c:73:a6:d2:81:61:c1:6d:3e:fa:db:b3:37:
         39:6c:0a:e2:3a:12:4f:26:34:7f:dd:41:e0:78:1c:0c:bc:19:
         db:c9:ac:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:56:42 2026 by rpki-client