This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/o-24i514DTkuFUh3dDk5UW1qU8I.roa
File:                     o-24i514DTkuFUh3dDk5UW1qU8I.roa (raw, json)
Hash identifier:          7BA95YKGV9RSAxhcO9Aev+WO5G9yWtM2WyXAovo8PLY=
Subject key identifier:   A3:ED:B8:8B:9D:78:0D:39:2E:15:48:77:74:39:39:51:6D:6A:53:C2
Certificate issuer:       /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Certificate serial:       019B7A5AA7EC46A4D588683A69759748862B
Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/o-24i514DTkuFUh3dDk5UW1qU8I.roa
Signing time:             Thu 01 Jan 2026 16:18:40 +0000
ROA not before:           Thu 01 Jan 2026 16:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31285
IP address blocks:        193.19.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 16:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:a7:ec:46:a4:d5:88:68:3a:69:75:97:48:86:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
        Validity
            Not Before: Jan  1 16:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a3edb88b9d780d392e154877743939516d6a53c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:c5:2c:ff:fa:3a:78:45:e6:1d:94:d3:38:
                    a0:8d:fd:39:a4:ff:f2:ad:01:b9:0c:b2:e8:95:38:
                    78:3f:3d:2a:24:b6:3e:ca:ee:d6:98:0d:d2:ac:f9:
                    92:26:ba:13:b1:a7:54:1f:55:68:5f:0b:15:e6:88:
                    f0:db:f6:ee:ab:77:b7:88:20:3d:4b:47:2e:44:23:
                    bb:bc:3b:e3:82:dc:d9:d8:f9:9d:c2:2b:bc:77:3a:
                    c0:69:ab:66:56:f0:e7:b0:e6:b4:39:51:aa:41:28:
                    83:3a:c3:0d:c1:71:5b:33:18:58:42:9f:4e:6c:bd:
                    07:93:59:97:0f:48:d6:c7:6d:32:4d:15:61:fe:32:
                    a4:90:4a:66:32:e3:e0:03:0d:c1:06:27:c1:30:e6:
                    04:60:27:27:6c:ed:ae:e9:4c:df:a4:a7:20:c3:c2:
                    a4:d3:2f:ca:6b:3a:ea:5b:f2:83:65:c4:bf:03:c9:
                    bf:22:f1:59:8d:9c:c3:4e:57:1b:5b:d5:a6:96:73:
                    2a:02:ee:62:4d:c2:4b:6c:7b:39:87:19:07:e7:a2:
                    5c:55:bc:00:39:70:9e:49:5e:1b:27:f6:57:61:bb:
                    bf:e2:83:88:ff:2d:7a:5a:b0:7d:2c:1a:4f:a6:ae:
                    d3:62:54:de:e2:85:d9:f8:5e:9e:ae:d3:a3:8d:e8:
                    c5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:ED:B8:8B:9D:78:0D:39:2E:15:48:77:74:39:39:51:6D:6A:53:C2
            X509v3 Authority Key Identifier:
                keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/o-24i514DTkuFUh3dDk5UW1qU8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.19.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:c7:16:57:3d:fc:5d:d5:d6:a2:b2:a3:2c:c5:28:28:bc:eb:
         9f:be:df:85:97:ea:82:ad:d6:6b:a9:a6:2e:66:70:b0:1a:f9:
         2d:57:d9:31:0c:85:94:28:32:04:6d:8c:56:ef:68:5b:ae:41:
         66:ee:b9:c3:64:b0:07:91:41:dd:7e:99:ed:46:74:df:13:d6:
         b7:cb:b4:c6:0a:3e:65:60:72:a1:3f:7c:69:5e:ca:3c:3c:10:
         32:38:52:98:c6:4f:9a:fa:ca:9f:8f:eb:17:f0:e4:b3:0c:22:
         c6:b7:d7:fa:47:3a:81:1c:6f:54:6e:67:15:ef:4d:c0:90:73:
         a6:54:b4:fb:92:46:2a:cf:ee:6b:d9:46:26:a4:29:4e:f2:3c:
         2e:18:24:ed:b3:13:11:8b:87:72:e5:cd:d6:8e:75:85:de:54:
         58:bf:89:27:71:1e:5e:40:ad:73:71:f3:10:2f:7e:43:6c:d1:
         b3:dc:1c:0c:48:d3:60:53:75:fd:ec:d7:bf:44:7d:7d:fb:ed:
         e9:ba:34:12:c5:ed:b9:84:60:54:1f:20:e5:3e:61:9a:10:06:
         9a:4e:71:37:f5:e7:d3:5d:e8:de:f7:88:ac:36:41:2d:ce:38:
         b8:e5:c3:42:7b:0b:89:fe:a8:93:04:7d:2f:f6:00:27:ee:2b:
         92:9d:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 20:40:00 2026 by rpki-client