This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/4otQnggN5_uQC9wKi00qa0eySrY.roa
File:                     4otQnggN5_uQC9wKi00qa0eySrY.roa (raw, json)
Hash identifier:          mMnLCC58FrEpo9AcseP6Ttc1YSWB7rt8x7N2xaBJU6E=
Subject key identifier:   E2:8B:50:9E:08:0D:E7:FB:90:0B:DC:0A:8B:4D:2A:6B:47:B2:4A:B6
Certificate issuer:       /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial:       019B7CEDC8A508068B0D4580125C7460DA2B
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/4otQnggN5_uQC9wKi00qa0eySrY.roa
Signing time:             Fri 02 Jan 2026 04:18:36 +0000
ROA not before:           Fri 02 Jan 2026 04:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     33915
IP address blocks:        194.53.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:c8:a5:08:06:8b:0d:45:80:12:5c:74:60:da:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
        Validity
            Not Before: Jan  2 04:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e28b509e080de7fb900bdc0a8b4d2a6b47b24ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:62:79:f4:5f:94:fd:5f:16:ff:b0:66:1b:61:
                    2b:44:0c:06:c1:d1:ac:8c:a8:91:3e:20:84:69:20:
                    06:3e:bc:13:80:40:af:02:b6:28:9b:fd:52:b2:ae:
                    16:48:ca:b6:43:de:27:4d:04:fd:2e:1f:d3:6c:a7:
                    10:9a:61:9f:39:17:aa:5d:aa:4d:5f:00:d8:af:bb:
                    ae:07:f4:83:31:30:3a:58:39:4f:76:c4:f0:f0:69:
                    5b:1e:95:5c:35:c3:10:a0:1b:91:a0:e1:63:6e:67:
                    97:8a:49:3e:89:10:56:40:a5:47:16:49:b5:50:c3:
                    ae:84:68:9f:10:a3:47:35:5f:6a:f0:6d:cb:4d:7b:
                    62:5b:e2:7d:5d:b6:cb:53:6b:1a:01:fe:ca:a7:d7:
                    1f:11:76:26:97:14:b2:92:12:ff:58:7d:83:b4:a8:
                    ea:21:21:6a:0b:ba:cc:ef:fb:91:c2:7a:99:f7:85:
                    fe:10:e7:e1:9f:f8:40:d5:ac:4d:7a:24:8e:14:2b:
                    7b:8a:da:08:af:62:f2:d6:d2:a5:c9:87:48:e4:3d:
                    f8:e1:f9:63:4c:1f:da:8e:d2:7e:fc:34:cb:3b:e7:
                    c4:bf:71:b4:4c:19:57:ca:ee:b4:a7:67:6a:a7:67:
                    d1:f8:a8:c7:5d:c9:43:a5:fd:4d:f7:66:43:53:40:
                    7e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8B:50:9E:08:0D:E7:FB:90:0B:DC:0A:8B:4D:2A:6B:47:B2:4A:B6
            X509v3 Authority Key Identifier:
                keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/4otQnggN5_uQC9wKi00qa0eySrY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.53.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:19:10:bf:17:f9:96:d6:64:38:58:2e:10:3f:9b:7a:48:14:
         bd:7b:f0:d5:50:2b:e7:11:29:18:57:45:27:45:eb:2a:ca:29:
         14:a6:2e:97:50:fa:0f:f6:53:fc:ab:aa:67:64:b3:11:fc:50:
         4e:ee:0b:9b:01:db:be:48:96:cd:0d:65:2e:4f:3e:18:77:32:
         e8:d9:c8:ec:fc:0c:3d:d9:e5:0a:c6:b1:98:cd:d5:db:3c:9c:
         59:36:56:6b:a9:5c:0f:93:2f:b1:8d:eb:f3:5a:54:df:af:64:
         de:49:3f:4e:51:dd:54:98:00:96:35:dd:30:0f:d2:fb:42:82:
         b3:79:75:90:fe:37:17:f1:2b:51:0e:99:22:8a:75:db:cf:70:
         84:78:dc:87:a1:13:f0:42:b0:bf:02:bd:02:b9:40:50:89:93:
         09:b5:2b:09:b3:52:b4:92:76:fe:10:fe:91:9f:65:35:66:fc:
         f6:b8:c2:df:e0:6a:de:24:8d:ac:71:58:9b:33:40:2b:2b:c1:
         7e:d1:34:ad:f7:88:8d:97:8e:97:6a:eb:c1:b8:b6:66:db:e0:
         5f:81:3f:d6:b4:8f:4c:14:4f:a1:28:f0:0e:0c:37:30:c2:c1:
         57:6e:8b:a2:2c:f7:82:75:00:77:0f:d4:ad:6b:fc:ee:28:cf:
         37:45:65:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:36:37 2026 by rpki-client