This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4QIyXigjo-x_JaQkPTuVtyHfgfs.roa
File:                     4QIyXigjo-x_JaQkPTuVtyHfgfs.roa (raw, json)
Hash identifier:          JvhTsHb4LJRfyq7pSVGlGHJsV3fJr7hYSNxPsgxiS+Y=
Subject key identifier:   E1:02:32:5E:28:23:A3:EC:7F:25:A4:24:3D:3B:95:B7:21:DF:81:FB
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       019B7BA487159EA43FF9C3F694A9106E35C7
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4QIyXigjo-x_JaQkPTuVtyHfgfs.roa
Signing time:             Thu 01 Jan 2026 22:18:58 +0000
ROA not before:           Thu 01 Jan 2026 22:18:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     996
IP address blocks:        94.103.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:87:15:9e:a4:3f:f9:c3:f6:94:a9:10:6e:35:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Jan  1 22:18:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e102325e2823a3ec7f25a4243d3b95b721df81fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1d:db:4f:d5:b2:4d:ca:95:a4:15:ba:f3:55:
                    81:99:62:ff:73:a0:32:0d:ae:4d:c7:a2:6e:61:fa:
                    85:52:a2:41:f2:fa:16:97:47:8c:c1:3f:b2:c7:e9:
                    10:37:e2:7b:76:f5:e1:45:1b:01:c9:ac:0a:29:55:
                    44:27:68:f1:df:d2:2e:9c:55:04:fb:df:4d:b7:31:
                    8c:34:ea:13:82:5d:2b:bd:ea:df:fb:5c:4d:bb:2f:
                    12:b5:ad:ec:6f:55:2d:cd:82:18:ee:02:f8:ba:c0:
                    f8:31:4b:52:41:3b:af:95:55:62:5d:fd:8b:5d:ef:
                    2e:df:96:b6:f3:48:24:d4:04:53:2b:2f:c3:ca:10:
                    1a:86:98:fb:77:36:16:e3:49:ca:a5:4a:60:16:fb:
                    ac:4b:80:84:f0:f2:9c:f8:6a:a4:a2:a7:18:b1:c7:
                    e1:5a:68:ab:39:15:78:45:32:b9:f5:7b:51:f1:e4:
                    1d:c0:d2:2e:8e:5d:a2:98:1b:f0:ee:9a:2d:6c:4b:
                    71:b6:ea:bc:06:07:fb:ba:95:b7:81:0f:53:85:17:
                    15:63:c4:4f:d9:89:fc:82:4e:b6:68:d6:f0:6c:40:
                    69:a8:9c:61:8d:7b:a2:2a:ed:e5:6b:73:73:74:83:
                    c2:89:3b:e2:64:de:19:18:41:21:43:ad:c9:93:99:
                    f8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:02:32:5E:28:23:A3:EC:7F:25:A4:24:3D:3B:95:B7:21:DF:81:FB
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/4QIyXigjo-x_JaQkPTuVtyHfgfs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:d2:3e:f7:0a:59:13:64:db:4f:fd:d8:a5:22:d2:e1:cf:15:
         84:27:90:e1:11:f5:6e:1c:2d:8e:89:9d:53:1c:5f:d4:75:2e:
         38:da:7f:83:0a:dd:ef:8b:22:1e:a1:a7:a1:a0:f7:7e:b1:d1:
         3a:02:04:d4:36:a3:1e:59:17:5a:80:cf:d7:19:ae:41:16:f4:
         e0:25:d8:ad:ab:5b:7b:48:02:43:b0:2f:ba:5a:29:8f:a1:21:
         44:a0:45:85:fd:e3:67:56:99:ca:57:50:47:98:96:f5:a1:9e:
         45:c1:f3:81:2c:92:84:9c:03:09:c7:08:b5:2b:2d:83:aa:62:
         73:b0:6e:0a:2f:ca:46:fb:15:17:55:a2:88:97:f7:dd:46:34:
         ca:55:fb:66:66:7c:45:4f:93:83:3b:32:ef:cd:0e:71:50:58:
         69:ca:74:ba:ec:84:23:bd:5c:51:4e:ad:57:ed:d7:ea:1d:31:
         88:f1:21:f3:2f:89:39:f4:cf:4e:3b:3d:af:fb:30:2b:a9:ca:
         82:b8:e8:c4:39:44:72:ce:49:3f:3f:ae:d1:b7:2f:ec:dc:a3:
         ee:f1:98:8b:90:cb:28:8d:98:d5:c6:88:80:5c:19:53:f8:57:
         1e:9e:07:64:3b:c3:74:33:f4:24:d2:6f:3b:2f:cb:10:cb:b5:
         1e:15:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:47:43 2026 by rpki-client