This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/pEi1sXolFr3_KzzGy9GgxCb35YI.roa
File:                     pEi1sXolFr3_KzzGy9GgxCb35YI.roa (raw, json)
Hash identifier:          0hWxK4UVYjDavdDARBqtyWujMUcunhSXg8YFegPVy8g=
Subject key identifier:   A4:48:B5:B1:7A:25:16:BD:FF:2B:3C:C6:CB:D1:A0:C4:26:F7:E5:82
Certificate issuer:       /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial:       019B7759717E2E72F33590EA5E6CCF5D1143
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/pEi1sXolFr3_KzzGy9GgxCb35YI.roa
Signing time:             Thu 01 Jan 2026 02:18:28 +0000
ROA not before:           Thu 01 Jan 2026 02:18:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     58175
IP address blocks:        193.200.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:71:7e:2e:72:f3:35:90:ea:5e:6c:cf:5d:11:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
        Validity
            Not Before: Jan  1 02:18:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a448b5b17a2516bdff2b3cc6cbd1a0c426f7e582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:68:c2:b8:fa:25:6b:49:bb:b5:58:49:24:
                    0e:53:fe:15:8e:ec:bf:0a:d1:d0:70:99:ad:8f:75:
                    1b:96:71:82:56:c7:cf:17:13:a8:7d:62:14:10:e5:
                    5c:55:cc:5a:b4:1f:54:04:c6:07:fe:0f:9a:92:e4:
                    62:cb:a9:f0:31:54:11:10:83:ba:31:23:46:1c:97:
                    33:d0:f1:c5:10:e0:b4:79:bd:ae:13:52:6c:a9:1b:
                    8d:84:24:7f:8e:92:19:bf:6e:13:3b:9c:19:c5:3e:
                    53:8e:a6:fa:a0:7a:9b:e8:41:30:22:5a:29:d6:1c:
                    31:8b:22:80:4e:f3:5c:93:f5:29:37:47:35:04:39:
                    44:b5:66:90:8d:fe:98:03:06:e4:41:2a:d6:95:1b:
                    c3:c0:5f:3a:c8:55:af:a1:2a:a9:4d:58:f8:c6:91:
                    e5:a5:2b:1c:55:ac:ff:75:37:cf:90:9e:7e:12:f2:
                    ca:9b:52:c5:b5:2e:9d:f8:d5:8f:eb:1d:ab:03:d1:
                    6f:08:92:47:52:ec:de:17:45:1a:33:73:8b:d6:72:
                    2b:92:12:a2:09:f1:f1:6e:4e:84:1f:90:b8:8f:da:
                    06:62:c9:e3:b4:65:88:97:ac:a8:2e:43:78:1c:f9:
                    a6:0b:56:7e:87:26:d7:92:9f:a0:fc:55:fa:47:37:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:48:B5:B1:7A:25:16:BD:FF:2B:3C:C6:CB:D1:A0:C4:26:F7:E5:82
            X509v3 Authority Key Identifier:
                keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/pEi1sXolFr3_KzzGy9GgxCb35YI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:1b:22:9d:53:33:5d:85:2f:14:e9:d8:f2:52:e2:5c:b5:d9:
         bd:09:7c:8f:49:ab:a3:ce:c4:81:c9:ca:42:c0:81:9d:11:8e:
         d2:ca:67:e3:19:41:2b:11:a3:16:db:74:37:8c:6f:44:ea:6d:
         80:a5:43:70:87:0b:1a:61:45:f1:e4:85:f8:d4:64:22:32:c6:
         c3:ca:e3:8b:90:d4:fd:7a:de:f4:46:7e:78:7c:d8:36:20:ee:
         0e:2c:39:12:9c:e6:50:84:70:44:98:49:eb:47:29:bf:bc:a0:
         aa:42:a9:15:d0:8f:13:15:f2:e7:25:73:a6:23:d8:0d:f4:7b:
         db:99:58:0a:16:f8:b5:68:20:fe:93:af:8e:4e:1b:78:9a:ab:
         ca:b8:10:1d:ea:94:d0:b8:7e:d7:a0:e9:8e:20:0d:97:79:27:
         22:d4:e7:db:9f:84:e0:a6:8d:51:e1:f9:ae:56:12:44:ca:55:
         63:83:5f:dd:0b:c0:9d:af:70:a5:52:3f:7a:72:c9:fc:92:6a:
         05:cd:e9:8b:c5:87:14:84:0c:35:e8:02:0b:fd:75:45:f9:57:
         bd:f3:d8:b9:06:03:d4:4e:87:93:2a:97:dc:18:48:cd:a1:1a:
         2e:73:de:eb:62:3c:c1:e7:8e:08:7e:39:65:8d:60:89:fd:42:
         82:6c:ca:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WXF+LnLzNZDqXmzPXRFDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZmUxMDU4YTMxZTNjMTg5NGJjZjA2NGM3ZTgzNzBiYmE2
Y2Y4ZTQwHhcNMjYwMTAxMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDQ4YjViMTdhMjUxNmJkZmYyYjNjYzZjYmQxYTBjNDI2ZjdlNTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiBowrj6JWtJu7VYSSQOU/4Vjuy/
CtHQcJmtj3UblnGCVsfPFxOofWIUEOVcVcxatB9UBMYH/g+akuRiy6nwMVQREIO6
MSNGHJcz0PHFEOC0eb2uE1JsqRuNhCR/jpIZv24TO5wZxT5Tjqb6oHqb6EEwIlop
1hwxiyKATvNck/UpN0c1BDlEtWaQjf6YAwbkQSrWlRvDwF86yFWvoSqpTVj4xpHl
pSscVaz/dTfPkJ5+EvLKm1LFtS6d+NWP6x2rA9FvCJJHUuzeF0UaM3OL1nIrkhKi
CfHxbk6EH5C4j9oGYsnjtGWIl6yoLkN4HPmmC1Z+hybXkp+g/FX6RzdXfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKRItbF6JRa9/ys8xsvRoMQm9+WCMB8GA1UdIwQY
MBaAFAz+EFijHjwYlLzwZMfoNwu6bPjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85MjFkZjEtZmE3ZC00MzA3LWI5YzMt
N2NlOGM5NzA0Y2YwLzEvcEVpMXNYb2xGcjNfS3p6R3k5R2d4Q2IzNVlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85MjFkZjEtZmE3ZC00MzA3LWI5YzMtN2NlOGM5NzA0Y2Yw
LzEvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcj+MA0G
CSqGSIb3DQEBCwUAA4IBAQAXGyKdUzNdhS8U6djyUuJctdm9CXyPSaujzsSBycpC
wIGdEY7SymfjGUErEaMW23Q3jG9E6m2ApUNwhwsaYUXx5IX41GQiMsbDyuOLkNT9
et70Rn54fNg2IO4OLDkSnOZQhHBEmEnrRym/vKCqQqkV0I8TFfLnJXOmI9gN9Hvb
mVgKFvi1aCD+k6+OTht4mqvKuBAd6pTQuH7XoOmOIA2XeSci1Ofbn4Tgpo1R4fmu
VhJEylVjg1/dC8Cdr3ClUj96csn8kmoFzemLxYcUhAw16AIL/XVF+Ve989i5BgPU
ToeTKpfcGEjNoRouc97rYjzB544IfjlljWCJ/UKCbMpW
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:45:12 2026 by rpki-client