This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/GlUPmztHj05vZ1Vup3NDG_Lg4PE.roa
File:                     GlUPmztHj05vZ1Vup3NDG_Lg4PE.roa (raw, json)
Hash identifier:          1cVanJIyzbdaXi+XNYZJuMmXonQvqhc1hNQx9fPiOlY=
Subject key identifier:   1A:55:0F:9B:3B:47:8F:4E:6F:67:55:6E:A7:73:43:1B:F2:E0:E0:F1
Certificate issuer:       /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial:       019ACF48872DACC0A69741155B86CDC31D96
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/GlUPmztHj05vZ1Vup3NDG_Lg4PE.roa
Signing time:             Sat 29 Nov 2025 11:03:48 +0000
ROA not before:           Sat 29 Nov 2025 11:03:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     2914
IP address blocks:        193.34.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:cf:48:87:2d:ac:c0:a6:97:41:15:5b:86:cd:c3:1d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Nov 29 11:03:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1a550f9b3b478f4e6f67556ea773431bf2e0e0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6a:41:5e:b5:fd:36:0e:eb:59:c6:db:2e:ef:
                    0c:8f:5a:b9:f0:34:5e:8d:03:f6:cd:1c:84:5f:66:
                    9b:59:4d:f0:e5:60:e8:f9:7c:8a:16:fb:f7:b1:21:
                    15:64:fa:17:59:e8:64:f0:15:5d:52:5e:fd:a8:b5:
                    4c:d5:14:d0:84:12:75:81:98:f8:de:48:a0:7d:97:
                    0d:d9:46:ca:5d:ba:94:aa:70:dc:77:ef:70:3b:01:
                    e9:2c:5b:90:2c:43:9d:02:05:92:79:a3:43:5b:a6:
                    19:66:59:4a:8d:8c:eb:9b:51:1a:18:9b:2b:9c:7e:
                    7a:11:33:08:6b:95:95:bd:bd:0c:b7:58:bb:ef:3c:
                    21:e8:b0:c7:dd:a8:e1:af:32:f1:0d:c1:9f:f4:f4:
                    40:08:6f:9a:04:50:ea:84:a0:3c:42:53:0a:0a:4d:
                    7d:29:c5:35:32:83:1c:f9:07:5b:a9:d4:54:0d:a4:
                    09:db:25:58:11:0a:a0:7e:bc:03:a5:3c:57:b9:2c:
                    67:4e:61:4d:4a:c7:2b:e7:73:e5:9e:c4:b2:01:2e:
                    f2:f3:d0:1b:29:b2:b4:d8:5c:51:12:0f:2a:e7:e5:
                    e0:1b:e0:d3:80:00:d0:4b:f5:07:f4:09:c0:d6:f8:
                    90:01:7d:1d:61:1c:62:88:d0:43:4d:a4:bf:d9:65:
                    69:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:55:0F:9B:3B:47:8F:4E:6F:67:55:6E:A7:73:43:1B:F2:E0:E0:F1
            X509v3 Authority Key Identifier:
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/GlUPmztHj05vZ1Vup3NDG_Lg4PE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.34.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:11:0f:dd:50:41:db:1b:68:57:d0:00:ed:01:7c:46:3f:48:
         14:8f:9e:e0:54:e8:7d:b0:35:c1:41:57:7c:0c:6e:26:6a:23:
         0c:5b:eb:71:59:8a:2d:7d:4b:a7:82:9c:1c:5f:0d:8c:7a:c5:
         48:0d:15:94:57:2f:37:a5:4b:b0:c9:5b:93:54:90:7c:77:1a:
         81:af:6c:c2:d2:89:41:9c:b6:67:43:f1:2a:12:d8:29:15:21:
         e7:67:0e:9e:63:ea:07:72:d8:92:e8:41:c4:36:54:d2:7c:68:
         40:77:5e:4d:e7:0f:55:57:5a:c9:99:1e:54:42:9b:03:f7:d5:
         19:89:c7:af:05:eb:51:17:60:41:fb:12:1d:15:ae:0d:14:43:
         ca:30:68:df:bb:4c:30:81:b8:f9:59:48:69:28:34:10:f6:b2:
         5f:03:da:d4:01:8f:42:1e:cc:91:1b:97:15:5b:d7:76:a3:99:
         b2:78:4b:75:6e:15:91:24:98:fb:10:d1:76:6a:08:f2:20:f4:
         f5:22:38:90:8a:43:44:64:3c:55:92:d4:77:f3:cd:2b:8a:0f:
         70:39:18:21:34:a2:03:1f:71:ed:3f:3b:cb:4f:04:c0:6a:28:
         9f:fb:12:da:88:8d:da:89:aa:fb:f1:01:47:4d:73:88:b9:36:
         b1:66:03:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZrPSIctrMCml0EVW4bNwx2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzUzM2Q2NjJjM2YwZDZiYjFlNjkyZjNmYWI2ZDdiYTM4
MjRjMjgwHhcNMjUxMTI5MTEwMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTU1MGY5YjNiNDc4ZjRlNmY2NzU1NmVhNzczNDMxYmYyZTBlMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGpBXrX9Ng7rWcbbLu8Mj1q58DRe
jQP2zRyEX2abWU3w5WDo+XyKFvv3sSEVZPoXWehk8BVdUl79qLVM1RTQhBJ1gZj4
3kigfZcN2UbKXbqUqnDcd+9wOwHpLFuQLEOdAgWSeaNDW6YZZllKjYzrm1EaGJsr
nH56ETMIa5WVvb0Mt1i77zwh6LDH3ajhrzLxDcGf9PRACG+aBFDqhKA8QlMKCk19
KcU1MoMc+QdbqdRUDaQJ2yVYEQqgfrwDpTxXuSxnTmFNSscr53PlnsSyAS7y89Ab
KbK02FxREg8q5+XgG+DTgADQS/UH9AnA1viQAX0dYRxiiNBDTaS/2WVphwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBpVD5s7R49Ob2dVbqdzQxvy4ODxMB8GA1UdIwQY
MBaAFJ41M9Ziw/DWux5pLz+rbXujgkwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUt
YTc4MzQxMzA5OWQzLzEvR2xVUG16dEhqMDV2WjFWdXAzTkRHX0xnNFBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUtYTc4MzQxMzA5OWQz
LzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSIwMA0G
CSqGSIb3DQEBCwUAA4IBAQBsEQ/dUEHbG2hX0ADtAXxGP0gUj57gVOh9sDXBQVd8
DG4maiMMW+txWYotfUungpwcXw2MesVIDRWUVy83pUuwyVuTVJB8dxqBr2zC0olB
nLZnQ/EqEtgpFSHnZw6eY+oHctiS6EHENlTSfGhAd15N5w9VV1rJmR5UQpsD99UZ
icevBetRF2BB+xIdFa4NFEPKMGjfu0wwgbj5WUhpKDQQ9rJfA9rUAY9CHsyRG5cV
W9d2o5myeEt1bhWRJJj7ENF2agjyIPT1IjiQikNEZDxVktR3880rig9wORghNKID
H3HtPzvLTwTAaiif+xLaiI3aiar78QFHTXOIuTaxZgOG
-----END CERTIFICATE-----
Generated at Sat Dec 20 06:11:22 2025 by rpki-client