This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa
File:                     4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa (raw, json)
Hash identifier:          aMR3x/AtZPy2w/2qXOWmpRon0b+dhp1ERWBxG4aA4ws=
Subject key identifier:   E3:00:EA:CA:E2:AD:55:AE:2E:E3:04:86:ED:BE:E9:FC:BC:29:17:45
Certificate issuer:       /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial:       019B7BA4F764A4C0F69F69D61D5D1F76A3F4
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa
Signing time:             Thu 01 Jan 2026 22:19:27 +0000
ROA not before:           Thu 01 Jan 2026 22:19:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206112
IP address blocks:        80.92.237.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 01:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a4:f7:64:a4:c0:f6:9f:69:d6:1d:5d:1f:76:a3:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
        Validity
            Not Before: Jan  1 22:19:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e300eacae2ad55ae2ee30486edbee9fcbc291745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:7f:a4:b5:1b:3b:fb:db:e7:96:96:1c:79:
                    62:96:29:90:e7:11:11:08:83:9a:bb:5a:ce:82:62:
                    62:44:c4:8e:fa:5e:3d:e8:38:78:fb:7f:12:76:e5:
                    0b:75:62:f8:31:0c:e3:2c:ee:e5:b3:d9:b1:28:60:
                    46:aa:b2:d2:a4:17:61:02:12:10:da:be:d8:27:ea:
                    26:2b:c2:05:33:57:12:5d:08:98:1b:10:87:ff:40:
                    c5:16:b0:90:a3:7d:6a:66:52:bd:06:de:66:d2:2e:
                    17:a6:ef:5e:e5:2f:e7:62:1d:f1:af:97:62:fd:81:
                    91:b7:42:29:ee:41:7b:5f:04:b5:99:1d:89:7e:95:
                    8e:8c:6c:6b:b1:bb:53:c8:30:99:23:bd:9c:99:91:
                    63:dd:9b:ad:82:33:03:77:90:eb:b5:f4:5e:e0:7a:
                    ca:de:9e:42:53:ef:51:e6:b0:d8:aa:43:24:c7:66:
                    d5:0e:30:b5:8a:21:88:9c:90:98:07:c9:ab:6c:23:
                    c1:36:69:d6:fa:f2:3a:91:35:97:74:10:ca:47:aa:
                    24:46:7e:13:13:ee:5f:87:8f:79:fb:79:4b:12:dd:
                    ca:79:b7:75:06:f7:e9:a5:4b:1f:fb:e1:df:cf:0d:
                    27:8f:4c:a4:3f:f4:d7:7b:eb:75:99:ec:ff:11:13:
                    72:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:EA:CA:E2:AD:55:AE:2E:E3:04:86:ED:BE:E9:FC:BC:29:17:45
            X509v3 Authority Key Identifier:
                keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/4wDqyuKtVa4u4wSG7b7p_LwpF0U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.92.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:2f:fb:ca:2c:18:13:d8:e7:6f:92:bf:cf:86:c8:85:c6:59:
         3c:08:a4:54:ed:42:ca:8c:59:0b:5a:cc:94:fc:45:78:1b:7a:
         b9:3a:c1:b5:fa:cc:fe:08:79:f8:53:70:d1:98:c3:67:80:50:
         f5:c1:70:c7:cb:d6:66:3c:16:78:33:6c:bb:70:6a:e9:4a:c8:
         f4:64:c3:ad:b1:da:d5:34:13:e5:d7:ff:d0:ba:66:68:f6:38:
         b0:96:04:d2:86:c5:a7:35:6b:f9:6a:ee:78:56:f5:c8:81:99:
         47:53:a5:9c:0f:81:e7:2e:6d:9e:1a:e5:ac:35:74:93:1f:cb:
         98:2e:e8:f1:6c:38:7b:74:05:3b:fc:8b:9a:35:73:fa:64:2d:
         3a:44:31:5e:38:05:1c:b5:67:15:7e:e3:a5:5b:b4:a0:89:95:
         e8:24:ce:46:61:9b:4b:39:9f:18:80:b8:b6:d5:57:fe:6f:04:
         3a:f5:96:73:15:ff:66:0e:0a:bf:cf:6c:78:a9:4e:04:4e:a8:
         90:c5:b0:7c:00:0d:8f:d3:5b:17:85:5a:a6:1b:48:fe:cb:70:
         b5:ad:e6:54:c5:7f:c3:a7:54:15:06:bc:41:d8:d3:11:ff:ad:
         f7:2e:66:d1:a8:47:f2:dc:28:c9:c0:23:b9:19:f9:04:2b:c6:
         ec:94:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 08:10:08 2026 by rpki-client