This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/a2gamHaBwEzpT1CSDGHEmtwoaQA.roa
File:                     a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (raw, json)
Hash identifier:          Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=
Subject key identifier:   6B:68:1A:98:76:81:C0:4C:E9:4F:50:92:0C:61:C4:9A:DC:28:69:00
Certificate issuer:       /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial:       019BFA40829720FD5F300429A252EA5455E7
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/a2gamHaBwEzpT1CSDGHEmtwoaQA.roa
Signing time:             Mon 26 Jan 2026 12:21:30 +0000
ROA not before:           Mon 26 Jan 2026 12:21:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3209
IP address blocks:        193.30.48.0/22 maxlen: 22
                          193.30.52.0/22 maxlen: 22
                          193.30.56.0/23 maxlen: 23
                          193.30.58.0/24 maxlen: 24
                          193.30.59.0/24 maxlen: 24
                          193.30.60.0/24 maxlen: 24
                          193.30.61.0/24 maxlen: 24
                          193.30.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:40:82:97:20:fd:5f:30:04:29:a2:52:ea:54:55:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
        Validity
            Not Before: Jan 26 12:21:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6b681a987681c04ce94f50920c61c49adc286900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:88:84:2e:80:08:58:5e:c5:80:25:7d:8d:
                    06:fd:6d:ab:8a:eb:82:67:40:dc:00:42:c2:dd:8b:
                    c1:1a:f2:aa:8b:48:25:fb:d5:c7:7d:a9:7c:05:7f:
                    b3:d8:dd:de:83:5e:95:8d:a4:4e:d7:d5:17:3a:54:
                    45:94:3b:c5:58:e2:c4:ae:e9:47:fc:40:9c:ae:9c:
                    09:71:4f:80:b6:dd:36:87:e1:de:0a:dd:f6:7f:64:
                    59:c5:21:bc:48:ea:6d:72:37:c8:de:39:7a:a0:38:
                    e2:1b:ec:a8:26:b9:c5:a9:36:14:50:ee:c3:9f:a7:
                    4d:89:27:0e:ac:da:8b:00:1a:6a:df:5d:ba:4f:f6:
                    46:96:23:e7:dc:97:f9:23:6d:25:76:13:44:d7:a9:
                    1e:89:9a:f4:d8:86:48:61:f3:d9:8d:f6:ec:48:90:
                    1b:54:77:7c:09:b8:be:59:e6:07:b4:e2:9f:c7:82:
                    27:fd:4f:d1:e2:d1:c9:99:ab:f4:a5:1b:02:b7:a4:
                    79:7b:b5:6d:64:bd:11:3c:99:14:fd:3b:a8:e3:9a:
                    2e:ba:e0:4f:5e:b8:5f:8b:7e:4d:5d:c3:0f:ec:d5:
                    98:cc:01:46:05:3e:22:48:11:27:64:7b:e5:eb:a0:
                    ca:a2:95:43:3c:0a:a6:0a:e0:46:f2:82:98:d7:78:
                    21:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:68:1A:98:76:81:C0:4C:E9:4F:50:92:0C:61:C4:9A:DC:28:69:00
            X509v3 Authority Key Identifier:
                keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/a2gamHaBwEzpT1CSDGHEmtwoaQA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:c2:41:fc:57:7a:d6:7e:15:f4:46:76:54:f6:63:9d:d8:df:
         a0:f3:95:79:e1:f6:e0:bc:41:c2:4f:e0:fd:f7:7d:46:7f:43:
         93:b6:81:4c:e6:fb:a8:51:9b:6b:d9:38:5c:7f:dc:19:8b:8d:
         49:28:06:c6:6a:57:35:e2:1d:7d:a3:c9:6d:b1:a9:ab:5f:ad:
         8e:e4:48:33:0f:d1:fc:27:d2:75:8d:67:99:39:30:58:b3:a6:
         0d:a9:5c:5e:b5:af:1a:16:33:92:7c:5f:f1:85:a6:ff:18:17:
         19:4b:a6:fc:7c:15:92:00:8a:06:be:76:8c:2b:28:95:38:af:
         21:f8:0f:9f:6c:0c:d1:2a:cb:c9:cf:27:8b:09:04:b0:17:00:
         84:53:1c:ed:ae:2a:40:06:f9:de:5a:df:bd:07:8b:ab:18:d9:
         34:c3:26:a8:4a:77:15:05:b7:0d:e5:5f:cb:c6:5c:a2:38:1b:
         47:a0:c7:f1:8b:34:cb:9d:7d:54:67:12:87:c2:53:ac:c3:46:
         cf:84:a1:1c:0d:a8:05:21:c0:8c:9b:27:7a:39:54:f5:43:82:
         bb:6d:87:16:54:87:39:07:c6:d2:64:9e:82:88:d3:44:6d:7e:
         2a:5d:c5:7d:17:cc:ea:84:ad:b0:8f:c0:7d:4d:13:d7:2d:13:
         34:22:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:31:33 2026 by rpki-client