This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/44GZoGx_x8dNbf6nAHGQWZ2UU-0.roa
File:                     44GZoGx_x8dNbf6nAHGQWZ2UU-0.roa (raw, json)
Hash identifier:          xOyAbQB+vtc/E2mAsjnBi6TB+IYXWamM3kKT53UfHyM=
Subject key identifier:   E3:81:99:A0:6C:7F:C7:C7:4D:6D:FE:A7:00:71:90:59:9D:94:53:ED
Certificate issuer:       /CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Certificate serial:       019B7AC8912A16A5909B8F1E0874C871EE94
Authority key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/44GZoGx_x8dNbf6nAHGQWZ2UU-0.roa
Signing time:             Thu 01 Jan 2026 18:18:43 +0000
ROA not before:           Thu 01 Jan 2026 18:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47452
IP address blocks:        94.141.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:91:2a:16:a5:90:9b:8f:1e:08:74:c8:71:ee:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993900f66e70b2fffd9c0ce92602f2f45c659961
        Validity
            Not Before: Jan  1 18:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e38199a06c7fc7c74d6dfea7007190599d9453ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ef:87:23:97:51:0a:24:c0:8c:9d:ff:24:bf:
                    8b:c4:7c:97:85:c2:6e:e0:13:4b:62:fe:2c:0b:57:
                    96:ad:56:65:8d:6c:ca:d0:20:cb:15:e4:7d:62:a3:
                    60:8b:88:71:ed:23:4e:88:cf:7a:c5:09:56:af:00:
                    ba:43:37:92:23:42:f3:66:9e:6e:7c:b6:ac:18:58:
                    84:3d:83:68:91:31:81:5a:fc:e9:ec:c4:e6:ba:f3:
                    6d:34:40:05:40:4c:a0:5d:2b:ec:51:8c:62:0a:7d:
                    11:d6:78:b8:e3:8d:f5:dc:77:a6:25:ad:1a:fb:3d:
                    ca:16:0a:bd:c6:0e:55:f1:c8:0f:5d:50:0a:e0:8d:
                    db:dc:6f:fa:d8:6b:2c:36:2a:aa:c1:30:23:a7:3d:
                    f2:b1:49:7c:f9:39:49:a5:cb:42:42:e6:a2:1d:60:
                    18:9e:e8:ce:0e:2b:99:9f:4c:4d:9c:41:88:8e:53:
                    1c:2d:d0:c6:4e:13:2f:13:8e:09:73:cb:56:cf:f1:
                    4f:6f:c7:c1:2e:e3:e1:3d:f5:42:d8:b6:60:8d:78:
                    cc:18:4b:1d:b9:2c:5e:ab:44:98:d3:1e:db:4d:d8:
                    88:78:6e:6a:91:aa:8b:63:36:8a:33:25:67:35:4f:
                    c8:66:ff:d7:d1:07:56:85:0a:ca:4c:8c:a2:45:04:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:81:99:A0:6C:7F:C7:C7:4D:6D:FE:A7:00:71:90:59:9D:94:53:ED
            X509v3 Authority Key Identifier:
                keyid:99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/44GZoGx_x8dNbf6nAHGQWZ2UU-0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.141.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:3b:58:22:77:f5:23:26:4d:83:3f:de:b5:11:55:68:7c:f7:
         69:d5:f7:d6:89:97:b4:3d:a7:80:54:f7:ee:c5:bf:3e:34:28:
         3f:19:ff:68:eb:28:d2:30:19:41:e2:96:d3:e9:78:0b:2d:d8:
         98:0d:af:26:1e:15:45:d1:1d:51:8c:b9:1d:8a:40:6e:0a:c7:
         38:0d:50:5b:e3:92:c4:04:d8:86:15:36:4e:45:fd:10:82:eb:
         aa:a9:a5:dd:f1:41:d4:19:90:c9:58:bc:31:36:77:38:cc:93:
         44:02:a6:d3:0a:ca:44:f9:31:9d:89:7c:0f:82:70:09:46:59:
         2b:87:15:ab:34:50:f1:87:11:53:ac:86:e1:b5:50:ac:b4:ca:
         dc:bf:d6:ee:fe:27:2a:a8:83:d7:6d:81:29:bf:5d:1d:44:3c:
         a8:40:09:de:db:9d:ac:25:54:64:da:6d:9a:b1:25:48:f5:35:
         ee:6d:05:29:5e:27:69:68:e6:5f:e3:ab:1f:d6:9a:33:08:8f:
         b3:7d:e0:2c:a1:f6:4d:41:8d:96:03:02:5e:3f:ff:85:76:ec:
         a7:dd:b3:94:91:1d:bd:4d:f6:81:80:7b:90:65:a9:cd:69:66:
         05:d1:4f:ce:82:6c:fa:13:fb:57:27:4a:10:bf:5a:0b:2d:71:
         23:ef:7b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:13 2026 by rpki-client