This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/_xkuMQSwRHi0DljPKAluJEXoLPg.roa
File:                     _xkuMQSwRHi0DljPKAluJEXoLPg.roa (raw, json)
Hash identifier:          EUEHOabmEGDXpaBHpO2MNJv0dJd+g7oEzMzEMIadnt8=
Subject key identifier:   FF:19:2E:31:04:B0:44:78:B4:0E:58:CF:28:09:6E:24:45:E8:2C:F8
Certificate issuer:       /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial:       019B797F19E8B5F14DAC720B936241D662C7
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/_xkuMQSwRHi0DljPKAluJEXoLPg.roa
Signing time:             Thu 01 Jan 2026 12:18:51 +0000
ROA not before:           Thu 01 Jan 2026 12:18:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31274
IP address blocks:        193.25.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:19:e8:b5:f1:4d:ac:72:0b:93:62:41:d6:62:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
        Validity
            Not Before: Jan  1 12:18:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ff192e3104b04478b40e58cf28096e2445e82cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:26:3a:e9:ff:45:ea:31:ac:ac:f1:61:9c:8e:
                    8c:95:65:25:e9:52:02:64:62:60:04:c3:ff:0b:cb:
                    a5:0b:07:da:c3:57:ca:8a:18:06:4e:58:a2:4a:bc:
                    42:3c:de:0b:4e:97:f2:b3:bc:c1:5b:b5:7f:54:be:
                    03:e3:1c:79:d0:5a:d7:6f:5e:ff:b8:f3:f4:05:27:
                    74:33:da:65:b9:71:1f:b7:81:3a:ea:9e:8f:70:c6:
                    16:56:12:f4:56:5e:22:89:a9:34:79:60:37:43:74:
                    98:87:35:4e:59:56:33:94:7d:d7:06:05:5b:e0:e8:
                    48:4b:6a:f6:d6:4d:ae:ac:c7:68:ea:ce:5d:dc:a4:
                    11:6c:cb:13:64:3d:0f:db:fd:03:1b:5b:6d:70:46:
                    f2:cb:1f:c3:77:e8:6c:85:95:7c:93:98:e4:92:15:
                    d4:78:b4:13:14:d6:cf:f2:51:1b:e1:14:ef:a7:fa:
                    65:31:40:1b:82:66:37:eb:90:a0:d0:6c:20:9d:f5:
                    0b:16:c1:d6:f2:cb:e8:ce:bf:87:f4:04:1b:2f:b0:
                    58:83:f9:18:fb:5b:85:ed:0e:24:f5:6b:fb:3a:16:
                    e7:c6:7e:47:9e:2e:cc:1b:6c:07:e2:71:b5:e3:91:
                    e1:6e:da:51:d9:7e:76:c7:d6:c8:91:07:86:32:09:
                    31:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:19:2E:31:04:B0:44:78:B4:0E:58:CF:28:09:6E:24:45:E8:2C:F8
            X509v3 Authority Key Identifier:
                keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/_xkuMQSwRHi0DljPKAluJEXoLPg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.25.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:ad:f4:c3:b2:dc:2a:64:64:26:3b:ae:d5:20:e2:f9:d6:4f:
         01:61:b9:59:2d:2d:f9:52:88:1b:dd:1e:bd:30:aa:29:a2:ca:
         73:8a:66:74:a7:5d:66:d9:bb:e2:60:1f:ce:1c:82:78:dd:79:
         92:28:b4:4d:23:1e:aa:4a:4a:21:11:8f:27:50:67:29:6c:87:
         2b:2e:63:41:5d:c8:2f:57:a2:f7:ce:a6:a5:c7:40:8f:96:04:
         f8:12:b1:9f:37:12:12:f9:4a:dc:3d:11:e1:39:57:91:5b:3b:
         98:b2:a8:0e:1d:f4:0a:22:8a:10:c5:bc:3f:77:9a:0e:26:0c:
         3a:ab:53:c5:d3:32:07:ec:7d:01:7b:f4:88:10:9d:41:a9:17:
         f8:0b:f9:18:4f:b3:c8:9a:a8:31:49:a5:68:77:db:36:f1:7d:
         42:c0:c9:58:a1:52:11:24:87:de:17:af:86:34:ec:80:91:32:
         65:18:8d:8e:60:3f:43:b7:9b:c8:7a:f1:58:44:93:88:7a:00:
         75:e5:41:e0:f9:d6:54:df:9e:b6:5d:11:4f:65:2d:cb:4a:39:
         43:27:56:84:a3:98:a4:19:2f:ec:9d:4f:30:b0:09:55:62:9d:
         53:8d:f0:d4:92:3a:8b:5b:8d:e8:4c:7e:38:a2:17:3a:ba:18:
         12:70:f4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:02:05 2026 by rpki-client