This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/3skp7tFRxOzO2Ar-xxZ_-GZkGJA.roa
File:                     3skp7tFRxOzO2Ar-xxZ_-GZkGJA.roa (raw, json)
Hash identifier:          lluuIQVo59lCKGnliYFSmI59l+40e8vpyBl7Esorldo=
Subject key identifier:   DE:C9:29:EE:D1:51:C4:EC:CE:D8:0A:FE:C7:16:7F:F8:66:64:18:90
Certificate issuer:       /CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Certificate serial:       019B7BA39C5A27FBDB49F6BAB00108E73649
Authority key identifier: B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/3skp7tFRxOzO2Ar-xxZ_-GZkGJA.roa
Signing time:             Thu 01 Jan 2026 22:17:58 +0000
ROA not before:           Thu 01 Jan 2026 22:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212533
IP address blocks:        193.30.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:9c:5a:27:fb:db:49:f6:ba:b0:01:08:e7:36:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
        Validity
            Not Before: Jan  1 22:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dec929eed151c4ecced80afec7167ff866641890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8a:45:99:c1:92:eb:e0:47:5b:b5:aa:0d:17:
                    70:1a:52:c0:93:28:38:7c:be:4d:e8:36:e9:02:ba:
                    3c:b6:97:4e:3a:b1:8a:53:04:f4:38:b4:8e:be:0e:
                    7c:9d:82:b1:74:76:3e:2e:8c:81:84:40:02:22:dc:
                    22:ad:49:b1:98:ab:70:05:24:b9:79:9d:4e:6b:f9:
                    e4:e0:2d:8e:b7:9c:b5:f0:4a:24:3e:21:5f:91:22:
                    73:1e:82:56:e3:b2:7c:13:23:5d:fc:49:14:8c:5e:
                    f2:ad:e1:df:e0:f5:1c:42:20:d4:ac:15:c2:c5:76:
                    7f:41:2a:ba:b1:36:ea:a5:4d:54:ee:46:9b:fc:2c:
                    aa:c9:56:e0:fa:d1:1b:21:94:e3:83:1e:39:eb:8c:
                    25:d4:54:64:7f:40:9b:01:d6:26:62:11:1c:85:7c:
                    bd:4b:8c:af:88:68:94:5e:d7:34:2c:8b:3f:cd:54:
                    eb:c7:c5:4b:bc:fa:5b:10:52:6a:b5:7e:be:c5:d7:
                    1b:be:c5:b2:43:8e:2c:d0:9f:b2:59:a1:ca:e4:e8:
                    6a:70:12:df:02:0b:fc:6f:db:37:95:c5:6f:c7:37:
                    14:84:2e:93:18:3a:2c:22:89:b1:b3:1b:de:28:0f:
                    26:f4:0f:c7:38:e8:8a:44:7e:21:1c:60:5a:69:ce:
                    5f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C9:29:EE:D1:51:C4:EC:CE:D8:0A:FE:C7:16:7F:F8:66:64:18:90
            X509v3 Authority Key Identifier:
                keyid:B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/3skp7tFRxOzO2Ar-xxZ_-GZkGJA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:9c:a0:29:bf:46:57:cf:4c:1a:3c:21:67:82:2e:5f:fc:6e:
         b8:a8:e2:e8:2a:90:7d:56:51:b4:65:33:6d:26:a3:ad:2f:20:
         34:8d:06:ea:17:4d:54:b0:67:41:89:81:65:2e:6c:5e:b6:e0:
         ea:ea:6f:bb:83:4e:fb:0e:69:b0:fd:2d:8c:a0:f4:2e:12:99:
         3c:8c:3e:0c:04:d4:97:9d:62:9f:c7:db:10:63:97:07:83:fc:
         34:ec:d5:a1:c6:66:2c:09:d5:d9:9e:0c:a7:ca:53:ab:78:3c:
         20:9e:2d:d5:ec:2c:31:38:74:91:c7:bc:cb:18:df:ee:27:12:
         12:a9:5a:2e:6e:cb:bf:bf:47:f1:a3:5f:4b:61:30:fe:b6:db:
         85:15:da:e8:8b:5d:2d:17:6c:81:05:22:3a:b8:4a:c3:68:e9:
         5e:ca:ac:5b:f2:64:88:7c:22:47:7c:99:e4:20:69:cf:d5:d5:
         79:a7:0f:57:5e:23:55:9d:e3:e1:76:6a:6b:17:6f:1b:58:5f:
         e9:44:96:5a:b3:bb:e7:5f:90:e8:85:f9:50:a5:14:b7:ca:82:
         27:35:ec:03:b0:a5:ac:8f:2a:f2:e3:bc:b4:86:89:ba:58:23:
         0f:5a:fa:53:5e:da:9a:f0:5f:b6:1f:70:77:45:4b:8e:e4:40:
         9a:cd:49:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:26 2026 by rpki-client