This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/aVFkjMqYn2rDvWK_4Er7veowmzc.roa
File:                     aVFkjMqYn2rDvWK_4Er7veowmzc.roa (raw, json)
Hash identifier:          a0eU89LPDvn15SbN8UifKQ8En1lFGp7ZEcjuxOeXD3w=
Subject key identifier:   69:51:64:8C:CA:98:9F:6A:C3:BD:62:BF:E0:4A:FB:BD:EA:30:9B:37
Certificate issuer:       /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial:       019B7EA5463C46F29324AB9FD8CFA01F53D8
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/aVFkjMqYn2rDvWK_4Er7veowmzc.roa
Signing time:             Fri 02 Jan 2026 12:18:39 +0000
ROA not before:           Fri 02 Jan 2026 12:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211144
IP address blocks:        193.18.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a5:46:3c:46:f2:93:24:ab:9f:d8:cf:a0:1f:53:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
        Validity
            Not Before: Jan  2 12:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6951648cca989f6ac3bd62bfe04afbbdea309b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:3f:49:1f:1d:3a:d3:5a:a8:47:9e:90:fb:
                    51:b9:b8:ef:f9:15:48:33:2c:a4:c8:75:f9:d0:64:
                    a1:e3:01:27:74:e0:fd:c9:55:8b:42:a1:37:5a:d2:
                    1d:a6:80:bc:14:e3:ec:11:9f:09:db:f2:e5:07:38:
                    75:ec:89:52:ea:3b:c2:5e:48:6c:8f:75:98:b3:0e:
                    16:dd:52:52:88:e6:de:7d:17:ab:c4:64:77:a5:e6:
                    66:1c:b4:0f:ab:36:52:54:f0:08:6a:c6:69:6d:67:
                    0d:d1:14:17:6c:d0:86:10:21:e2:4d:d5:22:66:16:
                    da:c6:92:b9:02:e2:77:73:98:58:31:78:47:46:9f:
                    4f:c8:8a:98:46:13:1f:45:9f:9a:1c:1e:f4:fe:4f:
                    31:3e:86:b6:d7:09:fb:99:09:31:24:e0:dd:f9:93:
                    a3:27:92:8b:fd:79:1f:0f:fb:81:c0:2c:0f:a2:e4:
                    d8:f1:dc:05:f2:1a:a5:f1:48:0f:65:f8:bc:ae:f3:
                    0b:1a:16:e0:a6:79:4a:21:ba:a5:79:a3:dc:cb:95:
                    21:ff:bc:7d:ca:2e:1b:8c:fc:83:7e:7c:67:61:0f:
                    16:3f:b5:18:68:30:f4:d0:3d:b7:31:92:ad:96:39:
                    3f:d0:81:9e:17:a3:21:9d:7d:eb:75:ac:86:4d:43:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:51:64:8C:CA:98:9F:6A:C3:BD:62:BF:E0:4A:FB:BD:EA:30:9B:37
            X509v3 Authority Key Identifier:
                keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/aVFkjMqYn2rDvWK_4Er7veowmzc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.18.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:90:97:d8:c3:21:45:86:d5:0b:53:3b:9c:f0:bb:57:62:f6:
         6c:61:fd:2f:37:86:7d:64:42:d2:00:e7:cd:7d:98:f7:03:dc:
         7a:df:70:83:8c:6b:00:d5:62:16:56:6c:74:81:ef:56:fd:4e:
         aa:c2:60:6f:d2:b3:3c:68:c1:0e:55:50:f8:4d:28:71:ae:0e:
         9e:db:6e:13:52:3b:d5:9a:48:f3:55:64:a0:08:e9:38:51:a4:
         21:d2:09:eb:2a:58:e2:90:34:b6:72:57:1b:ab:da:b3:dc:e7:
         ac:9d:79:0c:d9:dc:3d:ee:c5:3e:bb:fb:9d:7d:00:10:8e:24:
         8f:06:4a:29:ab:cb:1c:87:68:ac:fe:f1:13:4c:fa:c6:37:43:
         28:5c:cb:56:aa:c3:7c:9b:c9:6c:d0:5e:a2:83:65:6d:ce:d5:
         96:7c:e8:22:23:e3:18:c4:06:2e:2d:13:d4:3a:f8:b1:a1:10:
         aa:25:fc:53:f1:ac:6f:66:61:20:36:89:48:82:be:d9:3d:29:
         01:4d:75:4a:2f:ce:b1:b1:0f:57:14:2b:24:dd:1f:20:7c:7c:
         83:4d:8a:4b:15:23:18:92:c0:0a:04:74:eb:0d:af:02:48:00:
         1f:fc:4b:ec:6d:d9:94:1b:c5:df:ec:90:d5:32:48:d5:74:68:
         5e:ef:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:02:22 2026 by rpki-client