This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/schmDmE2CKJCpiAehrjpSNlTDGg.roa
File:                     schmDmE2CKJCpiAehrjpSNlTDGg.roa (raw, json)
Hash identifier:          +x21cIiTbRvA+l5+kVYBAJIbR8+s45Qj0TzBMrcAZH4=
Subject key identifier:   B1:C8:66:0E:61:36:08:A2:42:A6:20:1E:86:B8:E9:48:D9:53:0C:68
Certificate issuer:       /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial:       019B7AC85BBD1F5F7811E2B3DAD7EE8B1352
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/schmDmE2CKJCpiAehrjpSNlTDGg.roa
Signing time:             Thu 01 Jan 2026 18:18:29 +0000
ROA not before:           Thu 01 Jan 2026 18:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210538
IP address blocks:        93.177.102.0/24 maxlen: 24
                          193.164.4.0/24 maxlen: 24
                          193.164.6.0/24 maxlen: 24
                          193.164.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:5b:bd:1f:5f:78:11:e2:b3:da:d7:ee:8b:13:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
        Validity
            Not Before: Jan  1 18:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b1c8660e613608a242a6201e86b8e948d9530c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:0e:65:e7:37:55:0f:61:a3:84:12:7f:c9:97:
                    15:15:cc:5b:59:c8:c5:62:60:62:d3:12:5d:b9:6c:
                    f6:ad:28:ff:8c:09:2a:63:18:04:77:6e:77:f1:84:
                    a7:9c:58:74:d5:03:cb:4d:c7:0f:aa:47:41:a3:80:
                    31:6f:2e:2d:b2:e0:38:c1:e1:04:bd:52:f6:de:82:
                    7e:7b:d6:29:a1:06:6c:8f:e5:5e:94:c9:e5:8b:b6:
                    98:dc:8a:9e:d7:d1:f7:5b:79:49:bb:5f:01:43:4b:
                    2a:a8:e6:cc:df:b6:a7:4a:6e:df:9a:e7:eb:4f:90:
                    1c:f1:52:db:cd:f9:75:c9:7b:70:27:82:d7:19:a5:
                    5d:75:b2:39:32:d5:05:af:e7:6f:56:df:c0:ff:5a:
                    85:e6:9f:33:87:ff:fd:8d:00:a1:a1:3a:f6:de:c9:
                    20:b4:9a:06:b2:d1:74:f0:8b:12:96:d1:0e:5e:a6:
                    c9:cc:69:ea:e8:f8:e1:3e:ca:6f:94:46:25:d1:d3:
                    11:47:95:46:07:60:4f:8b:13:a6:2a:9a:52:cc:ae:
                    b7:10:f3:b5:b4:71:4d:e8:eb:1b:c6:42:a7:e9:1d:
                    95:5f:f7:7d:cc:37:a7:17:49:bb:fb:9f:26:1e:a6:
                    cd:8f:ce:9e:f6:ac:02:e5:05:65:1d:43:7e:32:ef:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C8:66:0E:61:36:08:A2:42:A6:20:1E:86:B8:E9:48:D9:53:0C:68
            X509v3 Authority Key Identifier:
                keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/schmDmE2CKJCpiAehrjpSNlTDGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.102.0/24
                  193.164.4.0/24
                  193.164.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:ba:bb:1b:19:e7:85:9c:a7:f6:70:25:8d:18:c5:59:e0:85:
         27:ee:51:6e:17:a6:6d:48:52:be:a9:0a:33:6b:15:5c:46:64:
         3d:72:c9:d3:9b:57:3a:91:74:e2:13:64:3c:4b:45:4b:b6:a7:
         6b:a7:5e:9b:80:ff:54:25:9c:bb:08:45:8b:0c:9b:25:ca:b3:
         34:0a:6a:78:9a:be:37:f9:04:5d:4a:d9:ec:e6:31:b1:29:8c:
         4c:d1:bd:50:fb:70:f0:d3:01:72:f1:0f:0b:69:36:3a:a4:8b:
         89:6e:4f:56:3b:24:52:0c:01:f9:ac:8d:5c:54:d6:03:cc:f0:
         35:b7:81:51:bb:09:55:43:0c:cd:81:d0:37:91:84:a1:2f:07:
         1c:87:d6:92:35:58:4c:a0:43:78:fb:91:4d:e4:80:28:9b:21:
         9a:71:4d:fe:0d:a6:2f:22:51:ed:30:7e:bc:73:b0:06:6a:c0:
         a1:0c:28:38:1f:12:67:bd:9c:61:2b:c5:7b:7a:7c:b3:0d:3f:
         b4:08:65:e7:ce:34:f0:3c:0f:5e:c3:c1:bb:ab:c8:ee:d6:91:
         c2:68:07:1e:d1:f9:0a:bb:0b:b2:5c:c4:6d:6c:b2:80:2c:3e:
         f4:1d:21:b4:7c:7e:f5:d0:72:4c:e3:41:35:59:a9:10:d8:d2:
         ac:69:87:c2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt6yFu9H194EeKz2tfuixNSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYmM5ZmIzMzEyYTRhYmYxZGRjMjg1MThlNzYwOGUwZWMz
Mjc1ZGYwHhcNMjYwMTAxMTgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWM4NjYwZTYxMzYwOGEyNDJhNjIwMWU4NmI4ZTk0OGQ5NTMwYzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8A5l5zdVD2GjhBJ/yZcVFcxbWcjF
YmBi0xJduWz2rSj/jAkqYxgEd2538YSnnFh01QPLTccPqkdBo4Axby4tsuA4weEE
vVL23oJ+e9YpoQZsj+VelMnli7aY3Iqe19H3W3lJu18BQ0sqqObM37anSm7fmufr
T5Ac8VLbzfl1yXtwJ4LXGaVddbI5MtUFr+dvVt/A/1qF5p8zh//9jQChoTr23skg
tJoGstF08IsSltEOXqbJzGnq6PjhPspvlEYl0dMRR5VGB2BPixOmKppSzK63EPO1
tHFN6OsbxkKn6R2VX/d9zDenF0m7+58mHqbNj86e9qwC5QVlHUN+Mu+C6wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLHIZg5hNgiiQqYgHoa46UjZUwxoMB8GA1UdIwQY
MBaAFBq8n7MxKkq/HdwoUY52CODsMnXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2Qt
ZDFkNmRlYTk4NzkwLzEvc2NobURtRTJDS0pDcGlBZWhyanBTTmxUREdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2QtZDFkNmRlYTk4Nzkw
LzEvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXbFmAwQA
waQEAwQBwaQGMA0GCSqGSIb3DQEBCwUAA4IBAQBlursbGeeFnKf2cCWNGMVZ4IUn
7lFuF6ZtSFK+qQozaxVcRmQ9csnTm1c6kXTiE2Q8S0VLtqdrp16bgP9UJZy7CEWL
DJslyrM0Cmp4mr43+QRdStns5jGxKYxM0b1Q+3Dw0wFy8Q8LaTY6pIuJbk9WOyRS
DAH5rI1cVNYDzPA1t4FRuwlVQwzNgdA3kYShLwcch9aSNVhMoEN4+5FN5IAomyGa
cU3+DaYvIlHtMH68c7AGasChDCg4HxJnvZxhK8V7enyzDT+0CGXnzjTwPA9ew8G7
q8ju1pHCaAce0fkKuwuyXMRtbLKALD70HSG0fH710HJM40E1WakQ2NKsaYfC
-----END CERTIFICATE-----
Generated at Mon Jan 19 23:21:47 2026 by rpki-client