This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/InntupDduHTVC0cqwDJelb8weXU.roa
File:                     InntupDduHTVC0cqwDJelb8weXU.roa (raw, json)
Hash identifier:          vHmmc3H3npnTsbFFZD1XCanAu6wqCMRYNLCV88QKsTY=
Subject key identifier:   22:79:ED:BA:90:DD:B8:74:D5:0B:47:2A:C0:32:5E:95:BF:30:79:75
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       019B7AC9270F169E6AE1D581C490C463ABB3
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/InntupDduHTVC0cqwDJelb8weXU.roa
Signing time:             Thu 01 Jan 2026 18:19:21 +0000
ROA not before:           Thu 01 Jan 2026 18:19:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51246
IP address blocks:        178.175.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:27:0f:16:9e:6a:e1:d5:81:c4:90:c4:63:ab:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: Jan  1 18:19:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2279edba90ddb874d50b472ac0325e95bf307975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:2e:99:c5:78:70:aa:0d:8c:6b:2b:41:79:
                    86:a6:10:56:d8:9b:26:ef:88:9e:c1:5f:52:49:f2:
                    00:6d:80:e3:5d:00:2c:22:3a:33:16:11:dd:2d:74:
                    a0:61:38:6b:99:ca:6a:d2:75:30:29:e7:cb:2c:ee:
                    56:03:5d:a0:8d:5e:0e:59:be:13:27:2d:4c:44:a8:
                    95:c6:29:c9:b4:f3:14:e3:ee:b5:dd:21:1d:d2:45:
                    12:dd:31:a1:2f:2a:94:ee:ae:10:66:c2:89:ce:7a:
                    2c:68:b8:6b:2d:7a:9d:2e:f7:90:3a:3d:e5:d7:f2:
                    07:6d:c0:a2:e0:f4:79:fd:17:69:70:31:b0:1f:48:
                    95:85:f0:ba:b1:32:08:1f:dc:e7:0d:af:7a:7a:54:
                    db:c8:84:e6:94:02:16:c8:56:b3:a2:fc:8e:2e:21:
                    2c:1a:a4:4e:8f:0b:67:aa:5a:36:15:a8:38:84:b7:
                    4d:73:ea:5a:dd:ae:78:8c:7c:c0:88:45:d4:7d:21:
                    57:b2:7c:02:37:ec:2b:41:0a:ca:c8:51:ea:98:77:
                    45:d5:bd:ed:67:5b:e3:d8:bf:3e:e8:fa:a7:d8:fe:
                    f4:be:20:bf:af:fb:5f:d2:58:05:5f:8e:5b:ec:87:
                    ac:49:52:c6:c1:2c:2d:42:82:f7:ab:e7:6f:80:bf:
                    57:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:79:ED:BA:90:DD:B8:74:D5:0B:47:2A:C0:32:5E:95:BF:30:79:75
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/InntupDduHTVC0cqwDJelb8weXU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.175.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:1b:cd:6a:52:f6:03:23:91:8c:60:dd:a0:af:39:e7:e6:cf:
         60:95:5a:26:8f:b1:e6:b4:35:e6:e7:83:95:4d:45:f3:79:8b:
         a7:3c:30:ef:2e:40:a9:64:8c:a7:cf:3c:41:cd:96:64:f5:c6:
         9c:de:20:3c:54:5f:4f:cc:db:93:6f:0c:40:c6:99:10:4f:9a:
         4f:cf:dc:a7:96:5c:4d:c8:c7:ac:c3:55:38:dc:94:29:a0:05:
         a4:c6:03:6f:51:93:b3:a8:7d:30:f7:91:36:8f:8e:ff:db:8a:
         f2:b8:03:e6:ce:b5:74:3f:5f:0e:79:11:e6:6e:96:94:4b:4e:
         21:35:dc:91:ea:22:90:37:a1:e3:dd:54:98:01:b4:6e:f2:28:
         a7:65:4e:09:8f:02:fd:a3:42:a1:f8:43:40:f0:30:9e:38:98:
         37:c6:24:a9:ad:51:2a:82:41:e8:26:20:1f:62:bd:96:73:92:
         ef:4f:33:fe:63:59:9b:9c:87:bd:8c:2b:8a:50:74:d4:b2:60:
         a3:4a:e2:bf:43:31:01:b9:c7:f4:33:66:85:91:a0:18:76:b4:
         d6:81:a9:ef:1b:7d:68:c4:e2:8d:1b:b7:e5:94:24:b4:75:4c:
         33:10:f2:e9:98:15:47:c0:7c:e5:1e:a9:a7:94:f6:98:69:c9:
         51:54:63:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6yScPFp5q4dWBxJDEY6uzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0
ZGFiN2YwHhcNMjYwMTAxMTgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjc5ZWRiYTkwZGRiODc0ZDUwYjQ3MmFjMDMyNWU5NWJmMzA3OTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcIumcV4cKoNjGsrQXmGphBW2Jsm
74iewV9SSfIAbYDjXQAsIjozFhHdLXSgYThrmcpq0nUwKefLLO5WA12gjV4OWb4T
Jy1MRKiVxinJtPMU4+613SEd0kUS3TGhLyqU7q4QZsKJznosaLhrLXqdLveQOj3l
1/IHbcCi4PR5/RdpcDGwH0iVhfC6sTIIH9znDa96elTbyITmlAIWyFazovyOLiEs
GqROjwtnqlo2Fag4hLdNc+pa3a54jHzAiEXUfSFXsnwCN+wrQQrKyFHqmHdF1b3t
Z1vj2L8+6Pqn2P70viC/r/tf0lgFX45b7IesSVLGwSwtQoL3q+dvgL9XuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCJ57bqQ3bh01QtHKsAyXpW/MHl1MB8GA1UdIwQY
MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct
OWRkNmU4OGZjYzhkLzEvSW5udHVwRGR1SFRWQzBjcXdESmVsYjh3ZVhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk
LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsq+WMA0G
CSqGSIb3DQEBCwUAA4IBAQApG81qUvYDI5GMYN2grznn5s9glVomj7HmtDXm54OV
TUXzeYunPDDvLkCpZIynzzxBzZZk9cac3iA8VF9PzNuTbwxAxpkQT5pPz9ynllxN
yMesw1U43JQpoAWkxgNvUZOzqH0w95E2j47/24ryuAPmzrV0P18OeRHmbpaUS04h
NdyR6iKQN6Hj3VSYAbRu8iinZU4JjwL9o0Kh+ENA8DCeOJg3xiSprVEqgkHoJiAf
Yr2Wc5LvTzP+Y1mbnIe9jCuKUHTUsmCjSuK/QzEBucf0M2aFkaAYdrTWganvG31o
xOKNG7fllCS0dUwzEPLpmBVHwHzlHqmnlPaYaclRVGMh
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:42:13 2026 by rpki-client