This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/RGn3LF9q_Xh0J5FPJj_HdCGNFRM.roa
File:                     RGn3LF9q_Xh0J5FPJj_HdCGNFRM.roa (raw, json)
Hash identifier:          PoeZFoI6sbwN/giRZQ9UL7NpU7Dn9k++vWuegY4A3LE=
Subject key identifier:   44:69:F7:2C:5F:6A:FD:78:74:27:91:4F:26:3F:C7:74:21:8D:15:13
Certificate issuer:       /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial:       019B0DA361344FBC565123DDB9C521F14BCE
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/RGn3LF9q_Xh0J5FPJj_HdCGNFRM.roa
Signing time:             Thu 11 Dec 2025 13:39:29 +0000
ROA not before:           Thu 11 Dec 2025 13:39:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207957
IP address blocks:        80.66.85.0/24 maxlen: 24
                          80.66.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0d:a3:61:34:4f:bc:56:51:23:dd:b9:c5:21:f1:4b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
        Validity
            Not Before: Dec 11 13:39:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=4469f72c5f6afd787427914f263fc774218d1513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:86:9a:49:17:b8:90:b5:93:4f:22:52:a2:55:
                    aa:f0:0b:76:86:e9:f9:f7:c4:7a:ce:b6:75:31:f0:
                    2e:0b:06:1c:8b:2a:45:32:39:f4:be:5b:4c:00:39:
                    e0:71:b5:50:f2:6c:9f:02:f5:ac:09:82:96:e6:33:
                    91:b8:00:56:a8:6d:2c:45:2e:79:39:3f:ec:9b:97:
                    ca:b5:e9:5c:27:e6:7f:3d:4f:78:84:d7:22:9f:9b:
                    06:0b:08:7e:38:1d:a0:ed:fd:53:17:1f:ca:37:cf:
                    0b:a6:7d:7d:3d:ca:45:74:6d:5a:70:23:78:7e:91:
                    a0:a4:ef:3b:45:49:34:fb:33:7b:82:c2:54:82:05:
                    83:17:70:be:31:85:09:b9:f1:b4:69:68:e8:fc:ff:
                    bf:7f:3b:2d:63:47:50:fd:61:30:1d:92:b2:93:5b:
                    73:e0:4b:6b:10:7c:28:97:e2:b6:e0:ce:aa:88:e7:
                    ad:91:7c:0e:5c:c2:d4:59:61:e7:f8:3a:c8:99:d7:
                    46:b7:b5:33:da:00:c3:31:61:d4:2a:9b:38:b9:f9:
                    cb:f3:52:dc:bd:41:06:13:e4:22:a9:31:9e:5b:69:
                    b2:28:f1:1d:67:b1:47:00:d2:95:2a:fa:a5:82:d7:
                    13:a1:1f:d1:4b:1d:31:49:56:4a:9f:3b:0d:0f:82:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:69:F7:2C:5F:6A:FD:78:74:27:91:4F:26:3F:C7:74:21:8D:15:13
            X509v3 Authority Key Identifier:
                keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/RGn3LF9q_Xh0J5FPJj_HdCGNFRM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.66.85.0/24
                  80.66.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:5c:7d:7f:80:84:f0:fb:34:b4:7e:43:c2:e3:e0:3a:78:48:
         40:0c:a1:23:35:89:38:e8:1e:59:d4:78:e7:5b:7c:05:c1:e6:
         14:f3:92:75:12:b6:cd:55:be:43:f7:0e:12:c1:51:59:78:d0:
         a0:6f:53:10:7b:de:fc:70:cb:e0:7d:fb:c6:f3:bc:2c:b6:c6:
         12:c2:bd:c5:ba:99:46:82:4e:ae:3d:a3:66:e3:01:7d:cc:63:
         5f:f1:90:b3:ac:31:1a:85:6c:dc:15:be:c3:cd:41:b7:ef:f7:
         9b:62:4a:f4:d4:db:ec:ce:b1:e4:e4:4f:38:8d:77:e9:70:53:
         62:b3:42:79:93:f4:44:40:40:ae:85:1f:90:47:63:d0:bf:26:
         ed:5a:91:12:7e:8c:91:75:58:c3:d6:9d:6b:c2:45:f4:c1:63:
         82:09:17:ec:98:74:c4:11:a7:f0:bc:d9:cc:6c:36:70:3e:2e:
         a9:3d:81:ec:de:dc:36:99:b4:db:25:59:3e:37:3f:09:96:91:
         db:87:12:48:fb:39:31:7f:6a:38:1d:42:82:ff:f2:bf:b1:97:
         c4:6c:95:0a:b8:78:72:d1:68:67:5e:8e:e2:17:dd:1f:12:04:
         95:ee:f0:c9:64:f2:23:67:df:6b:04:93:72:1c:9c:c2:b8:a5:
         38:b4:99:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:16:29 2025 by rpki-client