This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/4GLNhXruLvMKrzathAZRZVWoVLQ.roa
File:                     4GLNhXruLvMKrzathAZRZVWoVLQ.roa (raw, json)
Hash identifier:          jQCkb4Hj76KR+kp5xn1wyau7JXz8vDe/RQCW3z25Fe4=
Subject key identifier:   E0:62:CD:85:7A:EE:2E:F3:0A:AF:36:AD:84:06:51:65:55:A8:54:B4
Certificate issuer:       /CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Certificate serial:       019B79EBC91EA90885DEA330CC692C069892
Authority key identifier: 57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/4GLNhXruLvMKrzathAZRZVWoVLQ.roa
Signing time:             Thu 01 Jan 2026 14:17:34 +0000
ROA not before:           Thu 01 Jan 2026 14:17:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49494
IP address blocks:        193.169.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:eb:c9:1e:a9:08:85:de:a3:30:cc:69:2c:06:98:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
        Validity
            Not Before: Jan  1 14:17:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e062cd857aee2ef30aaf36ad8406516555a854b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:67:21:ee:f3:25:84:78:a2:56:29:ea:e2:96:
                    53:72:d9:28:3f:53:d9:e0:48:81:f9:31:a6:a1:11:
                    7c:a9:57:68:aa:63:7e:40:48:26:c9:36:4b:7f:a0:
                    5e:e6:80:6f:34:03:b9:67:f1:a1:d3:fb:e4:6d:5b:
                    8e:50:9a:89:01:c5:6d:42:71:a1:5c:40:17:34:5e:
                    e0:5a:1b:43:f5:2f:bf:89:6a:fe:59:e8:ea:f2:8b:
                    77:95:52:77:6a:95:5e:e5:de:a5:36:f0:71:ff:23:
                    ab:e9:e9:8e:d2:d2:67:ae:c8:d7:b9:d0:f6:36:86:
                    64:ce:c8:c9:cd:a0:48:86:33:73:57:f2:f8:8b:bc:
                    b0:09:60:55:14:a2:3e:5e:bf:a7:21:86:0e:8f:a4:
                    2a:8e:fc:75:2a:8a:80:81:2f:c6:5e:c3:7f:ef:1f:
                    6d:7e:b6:39:72:7a:bf:c2:f4:6a:95:8f:4e:8c:15:
                    ba:6c:46:57:71:9e:a2:d3:01:b0:51:59:19:01:da:
                    b4:c0:71:89:c1:e6:a8:d6:b0:79:d4:0b:a4:50:42:
                    06:3f:77:3a:84:89:ba:96:a1:eb:51:d9:10:74:05:
                    03:47:84:89:e3:3a:6c:32:66:36:41:8c:4b:f6:e6:
                    83:c4:1b:d9:bc:27:a4:ec:09:39:6f:86:f0:c2:15:
                    ce:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:62:CD:85:7A:EE:2E:F3:0A:AF:36:AD:84:06:51:65:55:A8:54:B4
            X509v3 Authority Key Identifier:
                keyid:57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/4GLNhXruLvMKrzathAZRZVWoVLQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.169.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:e6:5b:e0:89:06:e8:32:7e:13:1a:28:c5:a9:57:17:a7:12:
         de:39:c1:1c:0c:80:05:89:e8:54:37:f0:04:2d:a6:4c:20:86:
         49:cc:39:f8:e9:f9:19:72:53:42:c0:37:e2:82:93:c1:4c:d4:
         cf:d9:2c:50:ad:a3:d3:4c:9a:ed:05:c5:fc:81:e0:9a:8e:0b:
         0f:e8:ac:ae:2c:ed:05:f2:e3:5c:8a:c5:42:20:c7:0a:89:fd:
         1d:6b:e5:b8:0c:23:ef:e0:6c:4d:39:68:49:34:ef:82:bf:1a:
         eb:a4:ca:b1:e1:9f:63:84:bd:f1:48:83:3b:c4:37:38:77:73:
         92:35:9a:2b:5d:f0:e7:8a:53:b8:f1:d3:36:e1:8f:63:ad:3d:
         c4:06:fc:d7:96:79:14:0d:ff:dd:04:b8:35:9c:b0:40:82:e6:
         9b:b8:96:40:fd:2b:71:df:f8:99:34:99:c9:9f:68:ae:1c:67:
         93:35:9c:b8:0a:1c:d3:64:8f:40:3d:de:a1:81:31:b0:76:18:
         be:62:b3:81:e4:b4:84:94:8f:76:79:6b:fe:10:1c:08:11:f6:
         32:1a:12:7f:a3:6b:13:ad:0a:f5:0e:7b:84:4e:bd:9f:80:4b:
         02:55:c8:a0:85:ca:09:86:6f:7b:0e:30:cd:72:29:14:10:b6:
         e2:14:45:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:42 2026 by rpki-client