This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/9pE-MzpxUWjMwN57topeGGEUf_Y.roa
File:                     9pE-MzpxUWjMwN57topeGGEUf_Y.roa (raw, json)
Hash identifier:          +r9c8Shr2KLHGQZe5b0OVCErW9cr3Dze6HgtdQg6FcU=
Subject key identifier:   F6:91:3E:33:3A:71:51:68:CC:C0:DE:7B:B6:8A:5E:18:61:14:7F:F6
Certificate issuer:       /CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
Certificate serial:       019B77C7134235DC897A81E36CE590009338
Authority key identifier: 01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/9pE-MzpxUWjMwN57topeGGEUf_Y.roa
Signing time:             Thu 01 Jan 2026 04:18:13 +0000
ROA not before:           Thu 01 Jan 2026 04:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209795
IP address blocks:        194.93.12.0/23 maxlen: 23
                          194.93.14.0/23 maxlen: 23
                          2a09:2080::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:13:42:35:dc:89:7a:81:e3:6c:e5:90:00:93:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0120574852c6bb923fcb380425c4fd3ed5c0ba93
        Validity
            Not Before: Jan  1 04:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f6913e333a715168ccc0de7bb68a5e1861147ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:0c:dc:65:f6:a2:6a:93:ea:f7:37:df:f9:
                    72:2f:90:bc:ae:45:88:2f:50:fe:85:64:1d:d8:7a:
                    3b:d7:f9:19:86:25:ab:f8:0b:b6:fc:03:cd:27:85:
                    9a:45:9b:ab:aa:e8:7e:e1:d2:c9:de:a4:b3:ea:d7:
                    c1:a8:b7:f3:a9:36:a7:69:71:d2:d3:a7:62:06:ba:
                    25:28:32:64:73:ab:14:b2:bd:9b:4c:d1:fe:45:a2:
                    83:24:03:34:25:f7:34:97:82:c3:de:71:1b:26:9a:
                    4b:90:dc:e3:ff:b4:97:33:ca:48:b4:2a:94:69:e9:
                    01:fe:61:c1:2e:0d:09:b1:30:57:14:2c:3f:7f:72:
                    ef:a4:9b:52:63:42:a7:71:3c:1c:dc:4d:76:fa:61:
                    6e:97:95:5f:1f:ae:aa:75:60:8e:3f:ef:68:e5:8c:
                    cf:6f:67:22:72:a4:49:0b:14:41:24:c4:40:b5:4b:
                    e8:f2:6e:7f:00:29:20:79:b2:1f:54:ca:d7:91:ac:
                    38:33:cb:cf:a1:e5:c1:cd:59:f2:b5:aa:f1:95:3e:
                    bd:88:8c:a4:e3:7f:c7:bc:a9:46:8f:4d:24:61:a1:
                    fa:d4:23:b3:e6:75:8e:7e:7d:0d:78:9f:25:b7:8b:
                    1b:26:b7:c2:82:a5:18:9e:af:eb:35:6d:49:9e:cb:
                    0c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:91:3E:33:3A:71:51:68:CC:C0:DE:7B:B6:8A:5E:18:61:14:7F:F6
            X509v3 Authority Key Identifier:
                keyid:01:20:57:48:52:C6:BB:92:3F:CB:38:04:25:C4:FD:3E:D5:C0:BA:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASBXSFLGu5I_yzgEJcT9PtXAupM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/9pE-MzpxUWjMwN57topeGGEUf_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/89779d-9a44-4578-877d-d5b1dbdd1b5f/1/ASBXSFLGu5I_yzgEJcT9PtXAupM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.93.12.0/22
                IPv6:
                  2a09:2080::/29

    Signature Algorithm: sha256WithRSAEncryption
         80:4f:ed:c0:40:03:11:91:58:c3:f2:4a:39:6f:c7:b3:fd:3d:
         44:ca:2e:16:99:4b:64:fc:4a:7d:0b:9f:86:2b:66:33:4b:4c:
         d7:eb:13:40:3e:19:88:d7:79:60:28:8c:f2:4a:c7:36:c5:af:
         e9:78:09:b3:ac:b2:4c:a7:9b:2c:49:c4:e3:39:0a:09:24:d9:
         81:ba:b7:70:6e:5d:76:52:c0:b7:82:6a:3f:e2:aa:40:74:b8:
         de:66:19:aa:fb:f9:f5:17:68:25:47:75:fe:74:94:ad:e7:1e:
         77:77:85:dd:06:4e:4b:0f:82:6d:e1:76:4f:96:6f:48:5d:3b:
         8d:b2:bc:9d:70:b8:d1:f5:13:30:e9:cb:bc:11:47:70:fa:7e:
         a2:7d:8a:a8:99:d5:5d:8c:00:ba:c7:8f:0b:bc:91:20:8c:f3:
         71:2e:36:be:13:0e:84:03:0b:ea:e0:f0:06:af:45:b6:a9:38:
         27:48:6f:85:4c:b0:8b:bc:7a:47:5a:d2:ef:83:ef:de:58:b9:
         a0:8b:39:33:5c:43:17:0a:5e:4d:d2:c6:88:01:4f:16:50:3d:
         55:eb:1c:d6:1a:cc:57:53:1d:95:06:4c:c0:95:a2:a8:f4:14:
         a9:5d:4d:8c:45:c1:8e:7c:46:ab:15:1b:1d:b7:06:05:25:92:
         63:12:58:61
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt3xxNCNdyJeoHjbOWQAJM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjA1NzQ4NTJjNmJiOTIzZmNiMzgwNDI1YzRmZDNlZDVj
MGJhOTMwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjkxM2UzMzNhNzE1MTY4Y2NjMGRlN2JiNjhhNWUxODYxMTQ3ZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWkM3GX2omqT6vc33/lyL5C8rkWI
L1D+hWQd2Ho71/kZhiWr+Au2/APNJ4WaRZurquh+4dLJ3qSz6tfBqLfzqTanaXHS
06diBrolKDJkc6sUsr2bTNH+RaKDJAM0Jfc0l4LD3nEbJppLkNzj/7SXM8pItCqU
aekB/mHBLg0JsTBXFCw/f3LvpJtSY0KncTwc3E12+mFul5VfH66qdWCOP+9o5YzP
b2cicqRJCxRBJMRAtUvo8m5/ACkgebIfVMrXkaw4M8vPoeXBzVnytarxlT69iIyk
43/HvKlGj00kYaH61COz5nWOfn0NeJ8lt4sbJrfCgqUYnq/rNW1JnssMeQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPaRPjM6cVFozMDee7aKXhhhFH/2MB8GA1UdIwQY
MBaAFAEgV0hSxruSP8s4BCXE/T7VwLqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84OTc3OWQtOWE0NC00NTc4LTg3N2Qt
ZDViMWRiZGQxYjVmLzEvOXBFLU16cHhVV2pNd041N3RvcGVHR0VVZl9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84OTc3OWQtOWE0NC00NTc4LTg3N2QtZDViMWRiZGQxYjVm
LzEvQVNCWFNGTEd1NUlfeXpnRUpjVDlQdFhBdXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwl0MMA0E
AgACMAcDBQMqCSCAMA0GCSqGSIb3DQEBCwUAA4IBAQCAT+3AQAMRkVjD8ko5b8ez
/T1Eyi4WmUtk/Ep9C5+GK2YzS0zX6xNAPhmI13lgKIzySsc2xa/peAmzrLJMp5ss
ScTjOQoJJNmBurdwbl12UsC3gmo/4qpAdLjeZhmq+/n1F2glR3X+dJSt5x53d4Xd
Bk5LD4Jt4XZPlm9IXTuNsrydcLjR9RMw6cu8EUdw+n6ifYqomdVdjAC6x48LvJEg
jPNxLja+Ew6EAwvq4PAGr0W2qTgnSG+FTLCLvHpHWtLvg+/eWLmgizkzXEMXCl5N
0saIAU8WUD1V6xzWGsxXUx2VBkzAlaKo9BSpXU2MRcGOfEarFRsdtwYFJZJjElhh
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:11:14 2026 by rpki-client