This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/txC54j_S7HZrQJFinO7KZYt-RYQ.roa
File:                     txC54j_S7HZrQJFinO7KZYt-RYQ.roa (raw, json)
Hash identifier:          Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=
Subject key identifier:   B7:10:B9:E2:3F:D2:EC:76:6B:40:91:62:9C:EE:CA:65:8B:7E:45:84
Certificate issuer:       /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial:       019B7AC956C2600B425EA22A82FB1088B6BF
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/txC54j_S7HZrQJFinO7KZYt-RYQ.roa
Signing time:             Thu 01 Jan 2026 18:19:33 +0000
ROA not before:           Thu 01 Jan 2026 18:19:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212097
IP address blocks:        62.133.36.0/22 maxlen: 22
                          62.133.36.0/24 maxlen: 24
                          62.133.37.0/24 maxlen: 24
                          62.133.38.0/24 maxlen: 24
                          62.133.39.0/24 maxlen: 24
                          185.230.102.0/24 maxlen: 24
                          193.46.32.0/22 maxlen: 22
                          193.46.32.0/24 maxlen: 24
                          193.46.33.0/24 maxlen: 24
                          193.46.34.0/24 maxlen: 24
                          193.46.35.0/24 maxlen: 24
                          2a0d:a240::/29 maxlen: 29
                          2a10:b180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:56:c2:60:0b:42:5e:a2:2a:82:fb:10:88:b6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
        Validity
            Not Before: Jan  1 18:19:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b710b9e23fd2ec766b4091629ceeca658b7e4584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:37:c0:ff:93:43:6e:50:9b:a3:10:3e:ff:
                    b4:fd:d2:77:57:8e:86:44:42:7b:85:a3:90:18:8f:
                    51:6d:86:ab:ea:2d:81:51:4c:34:0b:76:06:df:f8:
                    d3:6a:3f:36:38:8b:82:1f:ef:d0:8b:a0:10:98:c3:
                    7c:ea:94:05:3d:ca:f0:52:31:ef:0a:81:8b:9e:de:
                    a1:50:f7:42:03:f1:05:90:ab:8e:39:d8:91:dc:e7:
                    b0:97:98:2b:24:ec:0a:2f:cf:5d:cc:83:d0:4f:57:
                    5f:2e:ad:16:6c:07:62:9f:40:03:3f:ae:b9:a1:54:
                    69:49:31:99:7a:a4:49:22:37:b0:59:29:89:e1:4a:
                    76:e4:8b:3b:1f:9b:3f:92:c8:bf:b0:9b:d4:bf:91:
                    04:86:3b:1e:ae:73:36:e2:52:d6:09:bf:78:e6:90:
                    41:e4:57:46:6e:59:e9:20:96:44:4b:f5:ca:36:db:
                    f9:49:1f:01:bd:65:81:ff:74:c9:42:96:03:af:7b:
                    36:75:d7:90:19:00:7f:2a:4f:ec:1d:a3:2c:82:ba:
                    ea:43:51:4d:8c:9e:89:8c:5b:56:a0:44:2b:2b:18:
                    9f:b4:ad:82:a9:32:f2:c6:31:4e:20:fe:9e:2d:d0:
                    9d:00:a7:66:84:af:b8:75:00:12:aa:79:f4:e7:0a:
                    a3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:10:B9:E2:3F:D2:EC:76:6B:40:91:62:9C:EE:CA:65:8B:7E:45:84
            X509v3 Authority Key Identifier:
                keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/txC54j_S7HZrQJFinO7KZYt-RYQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.133.36.0/22
                  185.230.102.0/24
                  193.46.32.0/22
                IPv6:
                  2a0d:a240::/29
                  2a10:b180::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:ca:48:f3:ba:09:83:80:56:f9:09:7f:3a:4f:73:1e:cd:d9:
         db:99:61:3e:6e:85:96:fd:e9:5f:d9:d7:e1:26:63:50:71:f5:
         be:4c:67:1a:3f:01:e7:b6:fe:db:25:d8:49:a5:7a:b9:a0:c8:
         a2:fa:3d:4f:16:31:40:9a:0a:d0:fd:93:3a:32:24:68:19:97:
         88:bd:9b:82:49:2a:8f:97:e5:15:5c:5b:7c:92:33:46:0e:a2:
         63:90:72:66:c2:05:9c:c6:e0:10:9f:26:21:21:31:8b:99:e3:
         91:02:8c:ba:61:4e:d8:c5:9a:2f:b5:b5:ab:e3:79:30:77:3c:
         d6:8b:21:ba:21:8d:4e:08:1a:ca:f8:23:31:13:c2:95:c8:0e:
         bd:45:eb:dc:52:c0:16:86:77:86:13:1f:0c:db:9e:bf:d1:54:
         4c:ec:f7:28:e4:3e:cf:3b:1c:72:ef:e7:90:bb:fa:0e:4e:ca:
         d8:b3:1d:17:77:1d:f0:98:25:1e:94:d2:af:b1:40:00:c8:40:
         a1:68:66:91:31:51:61:32:af:63:42:d5:0d:03:84:9b:60:18:
         dd:a6:97:f2:fc:9b:f6:8e:31:79:54:a6:1a:8b:da:9b:d1:f0:
         e9:3a:76:30:15:52:e5:e3:5d:37:e8:6d:09:69:cb:3a:23:5c:
         08:01:6f:f4
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZt6yVbCYAtCXqIqgvsQiLa/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MzY3MDk4N2QwMWQ0MWVlMmI1NjQ2OThjODI3MWY1MGRl
ZTRjZTEwHhcNMjYwMTAxMTgxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzEwYjllMjNmZDJlYzc2NmI0MDkxNjI5Y2VlY2E2NThiN2U0NTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH83wP+TQ25Qm6MQPv+0/dJ3V46G
REJ7haOQGI9RbYar6i2BUUw0C3YG3/jTaj82OIuCH+/Qi6AQmMN86pQFPcrwUjHv
CoGLnt6hUPdCA/EFkKuOOdiR3Oewl5grJOwKL89dzIPQT1dfLq0WbAdin0ADP665
oVRpSTGZeqRJIjewWSmJ4Up25Is7H5s/ksi/sJvUv5EEhjsernM24lLWCb945pBB
5FdGblnpIJZES/XKNtv5SR8BvWWB/3TJQpYDr3s2ddeQGQB/Kk/sHaMsgrrqQ1FN
jJ6JjFtWoEQrKxiftK2CqTLyxjFOIP6eLdCdAKdmhK+4dQASqnn05wqjKQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFLcQueI/0ux2a0CRYpzuymWLfkWEMB8GA1UdIwQY
MBaAFMg2cJh9AdQe4rVkaYyCcfUN7kzhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYt
MmE2MGNjOThhOGQzLzEvdHhDNTRqX1M3SFpyUUpGaW5PN0taWXQtUllRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS82MThkNWUtM2YyOC00MThkLWJmNGYtMmE2MGNjOThhOGQz
LzEveURad21IMEIxQjdpdFdScGpJSng5UTN1VE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCPoUkAwQA
ueZmAwQCwS4gMBQEAgACMA4DBQMqDaJAAwUAKhCxgDANBgkqhkiG9w0BAQsFAAOC
AQEASMpI87oJg4BW+Ql/Ok9zHs3Z25lhPm6Flv3pX9nX4SZjUHH1vkxnGj8B57b+
2yXYSaV6uaDIovo9TxYxQJoK0P2TOjIkaBmXiL2bgkkqj5flFVxbfJIzRg6iY5By
ZsIFnMbgEJ8mISExi5njkQKMumFO2MWaL7W1q+N5MHc81oshuiGNTggayvgjMRPC
lcgOvUXr3FLAFoZ3hhMfDNuev9FUTOz3KOQ+zzsccu/nkLv6Dk7K2LMdF3cd8Jgl
HpTSr7FAAMhAoWhmkTFRYTKvY0LVDQOEm2AY3aaX8vyb9o4xeVSmGovam9Hw6Tp2
MBVS5eNdN+htCWnLOiNcCAFv9A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:06:08 2026 by rpki-client