This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/rEoR-mgdOFshp3WK0KrRy38fGME.roa
File:                     rEoR-mgdOFshp3WK0KrRy38fGME.roa (raw, json)
Hash identifier:          BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=
Subject key identifier:   AC:4A:11:FA:68:1D:38:5B:21:A7:75:8A:D0:AA:D1:CB:7F:1F:18:C1
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019B7AC7AAFE93080588BB09BBAEB17FD5F4
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/rEoR-mgdOFshp3WK0KrRy38fGME.roa
Signing time:             Thu 01 Jan 2026 18:17:44 +0000
ROA not before:           Thu 01 Jan 2026 18:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        193.219.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Jan 2026 14:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:aa:fe:93:08:05:88:bb:09:bb:ae:b1:7f:d5:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Jan  1 18:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ac4a11fa681d385b21a7758ad0aad1cb7f1f18c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:05:05:70:b6:b7:74:88:a7:32:5c:65:e1:dd:
                    ea:89:28:95:07:1a:db:3f:16:ce:20:84:ca:f6:ae:
                    1f:ca:5f:fe:52:d5:27:e4:e4:cf:39:51:3a:02:27:
                    12:3e:e0:1f:b1:d2:fd:9a:21:56:b1:97:6e:17:c3:
                    4c:e7:6e:c0:2f:23:1c:a3:58:0c:ce:4b:c2:3c:db:
                    62:74:47:4c:60:9b:8c:5a:62:02:e6:f1:a8:be:05:
                    47:13:71:a7:88:16:5f:41:9a:01:85:b7:b7:6e:aa:
                    a5:61:39:33:e8:67:5e:c8:7f:34:1b:15:17:53:e8:
                    a1:d6:c6:46:21:22:66:5c:77:60:60:e0:85:df:d4:
                    f8:3d:36:e2:a6:d8:89:2c:88:d9:92:70:51:6a:18:
                    09:e6:40:10:61:47:05:32:ad:d4:3a:2f:01:41:0c:
                    9a:e4:d8:6b:02:82:66:13:1c:5e:d8:f2:07:c3:df:
                    b6:5b:42:4d:16:20:6b:56:b6:05:65:b9:e0:16:c4:
                    9f:07:f2:ff:26:23:61:18:28:67:47:2a:fd:a7:e8:
                    e3:4c:43:cc:f3:23:26:fc:54:c5:a0:ab:80:50:90:
                    35:4a:91:e1:16:53:67:d0:5f:1a:61:78:af:0d:de:
                    06:49:97:99:a4:f4:f2:d6:e1:3e:f6:af:67:1b:8d:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4A:11:FA:68:1D:38:5B:21:A7:75:8A:D0:AA:D1:CB:7F:1F:18:C1
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/rEoR-mgdOFshp3WK0KrRy38fGME.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.219.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:2a:99:3a:02:de:1e:84:a2:56:93:51:db:bd:83:f5:76:48:
         33:4b:a1:e3:2e:0e:ea:d1:01:81:c0:ce:44:eb:41:5c:1d:16:
         8c:a9:62:95:40:83:03:8a:3b:e7:3a:28:70:ed:9e:7e:97:c1:
         fc:a2:15:b5:36:45:9e:e7:5e:21:18:af:91:c9:c4:0b:c4:c6:
         c9:3b:c0:bd:26:ba:52:86:85:77:9a:bf:47:57:74:06:ba:b6:
         80:ac:61:36:bd:07:d6:22:89:2a:67:fd:9b:43:f6:93:4d:be:
         03:f9:6c:96:2a:54:97:6d:a0:ce:7c:9d:f7:fc:3c:f8:e1:f0:
         ec:d1:51:63:9d:4a:aa:9b:c3:da:a5:c2:dd:16:af:c5:70:29:
         22:fa:20:d4:50:0b:01:6c:bb:c7:3d:eb:c5:e6:ed:a7:50:3d:
         9d:3b:12:33:0d:b8:fe:da:37:fd:86:e0:0a:22:b5:63:b6:99:
         8b:58:00:b6:04:8f:59:6b:93:6a:f5:32:35:4a:7c:b5:e2:ef:
         5b:9f:d2:aa:ca:3b:b3:f9:aa:51:ea:8e:a1:af:38:9d:96:3e:
         e9:20:92:77:48:58:ae:d5:b5:34:89:c3:b2:30:2c:db:56:86:
         1b:20:11:48:58:2f:6e:4f:70:b3:95:5d:22:21:94:dc:29:b3:
         00:75:f6:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6x6r+kwgFiLsJu66xf9X0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjYwMTAxMTgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzRhMTFmYTY4MWQzODViMjFhNzc1OGFkMGFhZDFjYjdmMWYxOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQUFcLa3dIinMlxl4d3qiSiVBxrb
PxbOIITK9q4fyl/+UtUn5OTPOVE6AicSPuAfsdL9miFWsZduF8NM527ALyMco1gM
zkvCPNtidEdMYJuMWmIC5vGovgVHE3GniBZfQZoBhbe3bqqlYTkz6GdeyH80GxUX
U+ih1sZGISJmXHdgYOCF39T4PTbiptiJLIjZknBRahgJ5kAQYUcFMq3UOi8BQQya
5NhrAoJmExxe2PIHw9+2W0JNFiBrVrYFZbngFsSfB/L/JiNhGChnRyr9p+jjTEPM
8yMm/FTFoKuAUJA1SpHhFlNn0F8aYXivDd4GSZeZpPTy1uE+9q9nG42E1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKxKEfpoHThbIad1itCq0ct/HxjBMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvckVvUi1tZ2RPRnNocDNXSzBLclJ5MzhmR01FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwdtjMA0G
CSqGSIb3DQEBCwUAA4IBAQCHKpk6At4ehKJWk1HbvYP1dkgzS6HjLg7q0QGBwM5E
60FcHRaMqWKVQIMDijvnOihw7Z5+l8H8ohW1NkWe514hGK+RycQLxMbJO8C9JrpS
hoV3mr9HV3QGuraArGE2vQfWIokqZ/2bQ/aTTb4D+WyWKlSXbaDOfJ33/Dz44fDs
0VFjnUqqm8PapcLdFq/FcCki+iDUUAsBbLvHPevF5u2nUD2dOxIzDbj+2jf9huAK
IrVjtpmLWAC2BI9Za5Nq9TI1Sny14u9bn9Kqyjuz+apR6o6hrzidlj7pIJJ3SFiu
1bU0icOyMCzbVoYbIBFIWC9uT3CzlV0iIZTcKbMAdfaU
-----END CERTIFICATE-----
Generated at Tue Jan 6 20:31:31 2026 by rpki-client