This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa
File:                     IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa (raw, json)
Hash identifier:          9nBExfSnL3g+4CNDTe8481JrkpEVyvy2139EXebjOIs=
Subject key identifier:   20:F4:8B:37:A5:3E:98:F8:0C:C7:48:D8:8B:F3:91:65:90:F0:81:D4
Certificate issuer:       /CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
Certificate serial:       019B78A359F75D48B8F663651C2AE8FD0668
Authority key identifier: 60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa
Signing time:             Thu 01 Jan 2026 08:18:49 +0000
ROA not before:           Thu 01 Jan 2026 08:18:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        194.50.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:59:f7:5d:48:b8:f6:63:65:1c:2a:e8:fd:06:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6044f6ea79e4e2a3e02a8b38ed0cd3a4059138ac
        Validity
            Not Before: Jan  1 08:18:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=20f48b37a53e98f80cc748d88bf3916590f081d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:27:98:ed:94:a4:29:90:cd:1c:5a:9f:66:
                    37:51:08:c8:31:14:85:5a:66:de:d1:1c:1e:23:9c:
                    14:b4:8b:17:93:22:d9:91:d1:fd:ae:59:f1:e1:21:
                    55:06:96:ff:a0:4e:d1:50:35:f8:d6:84:21:9f:5a:
                    5b:68:54:d7:7b:76:32:99:58:b9:7e:5e:14:20:fc:
                    39:14:be:8e:da:6e:2b:48:e0:4e:bc:53:71:41:81:
                    58:c9:cf:3e:03:d9:70:07:0f:11:a6:05:ba:96:49:
                    1e:0a:a8:bf:30:d6:8c:80:0b:fd:d2:c4:16:f4:67:
                    f1:80:ef:cb:aa:18:23:ce:ee:5a:d9:62:1f:d1:13:
                    21:ae:24:22:7f:8f:1e:41:4f:74:bb:fa:41:49:a9:
                    9e:cc:d9:d3:da:c6:4a:e4:f4:7d:95:33:67:9e:1f:
                    4c:c2:a0:3a:30:69:a0:3e:e2:d2:f5:e7:b1:e8:49:
                    7d:ab:21:fc:a6:12:0e:35:b8:e8:49:40:01:f3:56:
                    7a:38:fe:51:ea:5e:ae:5c:c9:56:7f:93:99:d3:e8:
                    27:cf:3f:0e:8f:fb:99:f7:d2:5c:47:91:29:0c:16:
                    b3:4c:78:7a:bb:c3:85:7c:01:11:2d:37:16:26:f5:
                    2d:91:69:df:01:90:b5:6b:18:7c:d8:56:37:81:5f:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F4:8B:37:A5:3E:98:F8:0C:C7:48:D8:8B:F3:91:65:90:F0:81:D4
            X509v3 Authority Key Identifier:
                keyid:60:44:F6:EA:79:E4:E2:A3:E0:2A:8B:38:ED:0C:D3:A4:05:91:38:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YET26nnk4qPgKos47QzTpAWROKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/IPSLN6U-mPgMx0jYi_ORZZDwgdQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/611a40-b444-490c-9dee-27d608d20873/1/YET26nnk4qPgKos47QzTpAWROKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:af:3c:0f:37:2e:24:07:62:41:24:32:ee:49:f0:18:32:ca:
         69:73:77:2f:70:6f:4b:02:10:55:fe:2f:a3:b3:54:79:25:e3:
         c8:51:c4:59:34:77:80:1e:c3:e0:3d:44:cd:43:7e:d2:6d:3b:
         b3:61:af:39:51:8c:c5:86:b1:85:aa:8e:dd:5d:a7:6a:f0:55:
         dd:bf:c4:6b:98:60:a9:0c:62:84:e1:3f:71:dd:35:bc:07:6b:
         26:8d:e6:9e:ef:ec:6e:e4:b4:71:8d:c1:86:0b:c3:ea:7f:db:
         07:e4:d3:c4:1a:dd:e8:de:31:df:9f:b6:ba:50:59:63:9c:53:
         e6:a9:a5:b3:27:3f:db:e7:c6:15:3a:14:28:04:9d:0d:a7:5b:
         cd:48:20:f9:d2:76:e0:c0:d4:07:c9:43:56:8e:0e:11:08:00:
         f2:7a:9c:44:d9:23:2e:60:d3:97:33:1e:6a:ca:d6:39:53:1d:
         5b:81:2e:d2:54:ca:a3:4c:9c:6d:23:ee:0a:15:ff:c8:32:23:
         8e:fc:a9:e7:78:46:e6:ed:9c:cd:25:ed:a4:19:9d:f1:66:7b:
         ed:8c:fe:6a:d2:a6:99:51:2f:78:98:aa:18:02:5e:09:f7:17:
         f0:24:75:65:99:3d:02:6c:a1:03:8e:e8:e0:3b:80:c9:49:39:
         44:9c:17:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:21:54 2026 by rpki-client