This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/VI1Pdat37Jv7tPxYGIsry5LOD7w.roa
File:                     VI1Pdat37Jv7tPxYGIsry5LOD7w.roa (raw, json)
Hash identifier:          ZvnfeGRZ4e6seCSPIniU9Klu2LcfEkoX8a9oOIfdFRk=
Subject key identifier:   54:8D:4F:75:AB:77:EC:9B:FB:B4:FC:58:18:8B:2B:CB:92:CE:0F:BC
Certificate issuer:       /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial:       019B79EC25662C2AFFB03C39D0E9CEF38AA0
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/VI1Pdat37Jv7tPxYGIsry5LOD7w.roa
Signing time:             Thu 01 Jan 2026 14:17:57 +0000
ROA not before:           Thu 01 Jan 2026 14:17:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48626
IP address blocks:        193.34.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:25:66:2c:2a:ff:b0:3c:39:d0:e9:ce:f3:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
        Validity
            Not Before: Jan  1 14:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=548d4f75ab77ec9bfbb4fc58188b2bcb92ce0fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:fb:3b:81:33:96:52:86:72:bc:73:ed:53:
                    3f:e9:85:90:39:dc:d6:32:4e:49:a7:10:d1:37:66:
                    e9:5a:8d:0c:ed:1c:57:11:7e:0a:ca:1b:2c:48:e8:
                    3d:c0:20:b6:30:a5:a0:5f:43:bf:f5:61:38:99:ef:
                    45:9e:2f:0b:9b:fd:e4:12:1b:f2:42:1b:87:e8:d8:
                    70:4e:6d:78:c6:f3:6c:1f:53:55:bd:9a:b9:08:fd:
                    f1:76:68:e0:90:d7:e5:f0:73:51:7a:a2:31:b3:db:
                    a8:cd:d9:1b:96:31:0b:09:7d:05:f3:40:9e:de:64:
                    0f:f3:7b:ef:61:26:02:1f:5a:6b:a1:52:e8:b1:40:
                    d3:a8:7a:40:28:07:93:47:49:8c:ed:7b:8f:41:a1:
                    30:06:e4:e0:7f:b9:d6:c9:bb:b6:51:af:71:a9:c8:
                    57:c9:de:45:d7:4e:61:57:34:bc:f2:f5:dc:bc:0f:
                    2a:99:6c:b1:cd:a9:01:d2:f1:e4:86:cf:a2:bb:40:
                    9e:74:37:16:fc:1b:5d:81:00:31:3b:0a:a6:d6:c0:
                    7b:0e:40:b5:19:da:f9:7a:be:a0:92:8c:89:c2:53:
                    33:4c:cd:94:98:7a:83:e8:7f:56:df:7b:7c:f9:19:
                    8c:89:ca:31:35:36:ee:73:e9:24:b7:18:e0:c6:75:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8D:4F:75:AB:77:EC:9B:FB:B4:FC:58:18:8B:2B:CB:92:CE:0F:BC
            X509v3 Authority Key Identifier:
                keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/VI1Pdat37Jv7tPxYGIsry5LOD7w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.34.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:96:65:77:84:29:d9:e9:84:cc:2c:33:44:bc:8a:c0:93:cb:
         01:e6:e1:c8:dd:3f:db:a2:a6:4a:b7:22:69:f6:f2:2b:62:0d:
         87:32:df:0e:d4:02:35:16:ce:3d:10:c7:37:39:8e:54:6f:51:
         6e:0a:6b:b7:ca:97:d5:12:b2:9a:82:af:69:97:b2:9c:9d:a0:
         6f:1c:50:a0:d4:a1:d4:7c:93:f9:ae:ea:c6:a8:91:49:39:bf:
         a6:4b:36:60:d0:3e:b2:c0:ea:06:d0:b9:61:be:58:14:d7:45:
         3d:0f:f6:83:6d:c4:22:b3:b8:88:cf:47:5e:4b:fc:77:47:e1:
         42:00:26:81:7d:9c:0c:20:6a:8f:cb:5f:3c:f5:6a:98:3a:da:
         70:41:7e:d8:7e:6a:4f:a0:e4:41:06:ab:92:60:2b:19:e3:f9:
         b6:d0:9d:92:b3:5c:42:6a:c2:88:61:72:0f:6e:d9:e8:4e:02:
         9f:f5:48:ca:de:e4:e9:be:fd:28:fa:f8:dc:b1:d9:09:9a:80:
         3f:90:64:97:f6:a8:63:62:22:29:6f:8f:d3:90:a6:49:d1:ad:
         f3:8f:24:25:a5:94:ed:43:08:40:b7:66:2e:50:8f:c6:74:cd:
         7e:94:50:e7:1a:eb:a7:b9:68:db:6a:28:71:50:65:8a:57:0a:
         70:90:10:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:30 2026 by rpki-client