This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/c4MgsqHgRIS7A8j2sOY1tiFehV8.roa
File:                     c4MgsqHgRIS7A8j2sOY1tiFehV8.roa (raw, json)
Hash identifier:          Rh8SPNOodShlWVhJWX+J1gXICJ+9LsUUZNtxoGFB9Ig=
Subject key identifier:   73:83:20:B2:A1:E0:44:84:BB:03:C8:F6:B0:E6:35:B6:21:5E:85:5F
Certificate issuer:       /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial:       019BEEF371AFD623F781791A3209B1A6AE83
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/c4MgsqHgRIS7A8j2sOY1tiFehV8.roa
Signing time:             Sat 24 Jan 2026 07:41:30 +0000
ROA not before:           Sat 24 Jan 2026 07:41:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215695
IP address blocks:        188.92.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ee:f3:71:af:d6:23:f7:81:79:1a:32:09:b1:a6:ae:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
        Validity
            Not Before: Jan 24 07:41:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=738320b2a1e04484bb03c8f6b0e635b6215e855f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:a2:b2:16:ee:36:bf:f1:2d:3a:00:f0:ee:
                    f2:6f:04:27:64:7d:af:74:6f:00:e5:57:64:6e:93:
                    a3:b0:fa:74:96:e7:65:3d:46:92:29:8f:08:70:5b:
                    fa:e8:4d:0d:8e:24:b4:8c:65:25:b8:b8:1d:8b:dc:
                    a2:43:4a:99:46:53:af:9d:ab:77:b3:d7:f0:1b:f3:
                    02:9e:27:76:71:2f:11:d9:dc:69:8e:f0:97:55:37:
                    6c:6e:46:df:13:44:82:18:db:a4:22:4f:6b:c8:d3:
                    a2:74:df:ab:c3:d2:b8:35:2a:e8:3d:f9:35:0d:17:
                    19:7f:19:77:fd:dc:da:36:bb:d8:74:2a:6d:f7:a6:
                    b3:4f:38:31:50:cc:86:0b:cc:e5:e1:7a:dc:19:d6:
                    66:fc:9d:65:83:a0:e1:6f:30:89:ac:1b:8f:45:03:
                    02:f1:c1:1d:f9:39:20:96:38:9a:d4:27:2b:d5:23:
                    1a:d1:64:d0:98:2f:1f:3c:8d:b4:c3:80:a1:68:e8:
                    00:b1:41:a1:f2:0a:84:cd:f4:85:8b:5d:fc:f0:b6:
                    af:34:f7:43:cd:8f:8e:c6:b3:ea:59:64:ba:ab:48:
                    ec:60:e7:76:20:fd:f9:8d:e2:30:f7:69:8e:94:10:
                    c4:47:3a:47:c1:b8:2b:86:94:34:48:f9:0f:9e:ca:
                    55:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:83:20:B2:A1:E0:44:84:BB:03:C8:F6:B0:E6:35:B6:21:5E:85:5F
            X509v3 Authority Key Identifier:
                keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/c4MgsqHgRIS7A8j2sOY1tiFehV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.92.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:9a:4b:62:32:75:1d:40:d0:b8:0d:fe:55:fc:68:5a:a1:59:
         7e:1d:ce:81:ef:07:bf:8d:d5:bf:6e:4a:29:8f:15:97:b3:4c:
         93:f7:94:aa:51:10:a7:c2:99:41:dd:fd:39:8f:30:ed:d5:a6:
         0f:ec:fb:d7:1e:e1:15:a7:d4:4c:4b:c6:b0:b9:33:eb:97:d6:
         a5:7b:f3:e4:cb:6c:6b:a5:21:1e:de:f1:07:83:ae:84:c0:90:
         11:d6:f7:52:d9:a3:c6:88:ca:1a:61:30:6e:48:ea:b0:b6:a1:
         a2:d0:7e:c4:a7:5c:75:b3:a6:6b:41:55:b2:c6:b4:4a:eb:d0:
         7e:73:c0:78:0c:fd:53:2e:34:f7:20:3a:13:2f:4e:fb:1b:b6:
         5d:f6:e6:48:de:da:17:36:11:d2:30:74:89:23:eb:e3:8b:0c:
         ac:97:83:bb:e0:da:a3:3a:da:6d:4d:97:aa:7f:b8:ef:31:9f:
         b2:11:19:3e:6d:d9:1b:97:de:95:85:67:32:c1:49:b2:14:a2:
         13:b3:a4:e8:9f:9a:d6:e3:b2:32:cb:c9:ed:bd:da:ea:fd:ac:
         39:20:8d:b6:84:8c:8a:36:80:f7:a4:0b:2d:0c:3c:ec:e0:a5:
         ca:13:d5:73:ba:70:02:0d:ce:7e:40:00:45:3a:45:ca:6d:83:
         5d:47:fd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:01:41 2026 by rpki-client