This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/mGPgYFI0a87W2xPkMo1Inw-FNM8.roa
File:                     mGPgYFI0a87W2xPkMo1Inw-FNM8.roa (raw, json)
Hash identifier:          dR0boNIbJAGAYCT8YMYIsJDWFR4gMtz1D9GMelmMhUE=
Subject key identifier:   98:63:E0:60:52:34:6B:CE:D6:DB:13:E4:32:8D:48:9F:0F:85:34:CF
Certificate issuer:       /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial:       019B7D5B9236E978EE2FFCD4162F1166EAAA
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/mGPgYFI0a87W2xPkMo1Inw-FNM8.roa
Signing time:             Fri 02 Jan 2026 06:18:31 +0000
ROA not before:           Fri 02 Jan 2026 06:18:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15576
IP address blocks:        193.8.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:92:36:e9:78:ee:2f:fc:d4:16:2f:11:66:ea:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
        Validity
            Not Before: Jan  2 06:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9863e06052346bced6db13e4328d489f0f8534cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0a:53:fc:9e:c5:25:7d:a3:37:3f:b7:a7:7a:
                    cf:8c:db:8c:12:b4:27:1a:cf:59:94:10:cf:68:67:
                    7f:5c:68:f7:00:66:ed:29:1b:fb:87:a6:09:97:b7:
                    ae:43:8e:79:0f:f7:4b:27:bd:07:4e:59:e0:80:08:
                    f5:1c:05:4a:4d:30:41:a3:32:ce:59:9f:fe:6c:77:
                    cb:e1:9a:b4:11:ad:3c:8a:20:02:40:5b:d9:4e:9f:
                    c2:d8:ed:9f:1a:d4:27:b9:7f:56:17:f6:eb:c2:f5:
                    45:b4:a6:35:64:90:b9:37:51:e3:47:02:2c:32:ed:
                    d3:62:10:2d:5b:1c:0b:89:30:49:ea:68:9d:c3:2e:
                    db:8a:30:0f:0b:d2:c1:37:77:16:ad:de:f4:94:2d:
                    01:dc:4a:d2:16:ba:5a:b2:9c:00:ea:6a:dc:87:8d:
                    9d:76:ee:15:65:9b:7f:bb:1f:7b:a2:6f:ec:f0:45:
                    b7:d2:39:a5:90:31:91:31:f5:20:45:34:45:64:0d:
                    5b:63:eb:96:d5:1d:43:1a:9e:d0:10:8a:b2:dc:b9:
                    fe:c0:b2:d7:33:00:4c:e0:2b:52:9a:b8:a9:c3:85:
                    d7:7f:de:db:df:be:c4:c2:ad:c2:7f:f4:25:46:86:
                    1b:19:d5:96:06:f9:0e:8b:2b:7e:ea:91:22:29:76:
                    ce:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:63:E0:60:52:34:6B:CE:D6:DB:13:E4:32:8D:48:9F:0F:85:34:CF
            X509v3 Authority Key Identifier:
                keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/mGPgYFI0a87W2xPkMo1Inw-FNM8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:8e:41:a4:d3:b7:21:b5:2f:12:d9:42:04:ce:7e:41:b4:50:
         ed:55:96:c1:f8:b9:b9:aa:0b:af:af:79:e7:d0:c3:14:dc:2b:
         5c:f1:d4:2d:93:84:56:59:96:82:54:3b:fc:3f:26:ea:96:e5:
         34:a5:55:b8:8e:4f:fa:99:76:84:dc:46:4f:a2:86:3c:03:05:
         50:0c:ca:e5:9f:98:7b:ee:4b:9c:fa:76:cc:42:b8:39:b9:2a:
         d6:35:5e:77:71:fc:f8:a0:0f:51:7e:24:77:a4:ca:ce:8e:62:
         4d:e2:6b:93:f3:bb:6e:e9:0f:a1:37:c6:da:bd:79:ff:06:ba:
         d0:23:dc:c0:6e:26:e0:a6:70:6f:35:0c:61:fb:f2:3a:48:19:
         8e:45:c8:72:34:c1:35:f7:48:cb:75:27:fa:c4:01:f2:f6:cb:
         ef:ea:4e:0e:c7:3a:7e:22:0f:fb:7c:4d:83:18:00:f7:8a:46:
         30:b9:0a:83:ce:94:f4:3d:b8:ba:4a:dd:8a:6f:8f:4b:eb:16:
         7d:01:d3:c4:e4:99:24:80:b4:89:53:e3:04:06:a4:c7:bc:87:
         6d:04:dc:54:56:e4:6e:fe:77:a6:78:48:e5:f6:73:d4:76:32:
         94:90:19:46:3f:7b:b2:38:27:05:20:87:ab:5b:5f:9a:24:a3:
         72:e5:0f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:19:21 2026 by rpki-client