This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/v6DHuOuOQo5ADYQoffR2c_O6QS8.roa
File:                     v6DHuOuOQo5ADYQoffR2c_O6QS8.roa (raw, json)
Hash identifier:          i6eWCZPdAHUsEhQJa4fw9gAODBNNYJr2pgzQXjsynVY=
Subject key identifier:   BF:A0:C7:B8:EB:8E:42:8E:40:0D:84:28:7D:F4:76:73:F3:BA:41:2F
Certificate issuer:       /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial:       019B775887A4DAB24058AFEE8254F2A46FEE
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/v6DHuOuOQo5ADYQoffR2c_O6QS8.roa
Signing time:             Thu 01 Jan 2026 02:17:29 +0000
ROA not before:           Thu 01 Jan 2026 02:17:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62313
IP address blocks:        194.150.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:87:a4:da:b2:40:58:af:ee:82:54:f2:a4:6f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
        Validity
            Not Before: Jan  1 02:17:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bfa0c7b8eb8e428e400d84287df47673f3ba412f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9e:0d:00:08:31:ab:27:f6:5f:1c:41:af:99:
                    60:07:a6:e8:83:86:3c:9c:fb:1d:41:89:21:e8:1f:
                    fd:26:00:bf:1e:57:64:fb:c9:43:db:56:3e:17:dd:
                    df:fa:7f:71:b5:88:9f:e7:0d:09:20:33:6f:99:9e:
                    7c:41:16:32:4d:5d:b7:ec:8d:77:02:86:69:ad:11:
                    2c:f3:82:4b:32:9c:0b:8a:e1:d5:10:ac:42:e8:3c:
                    48:94:83:3e:e1:5a:22:b6:b3:b6:a1:e0:4f:db:35:
                    60:68:66:d3:b1:eb:50:f3:ad:32:d3:4d:79:34:2b:
                    80:53:ea:54:16:5d:d9:e0:04:51:e6:f0:fc:ae:eb:
                    b1:bc:12:e6:ed:3f:d2:fb:b7:9f:6a:fb:c4:ed:65:
                    91:7c:db:38:54:50:bb:2a:b4:04:03:7d:5c:23:24:
                    e6:e3:83:6f:62:09:d6:b4:5d:f1:bb:cf:79:37:d7:
                    91:7c:65:f2:ad:04:8d:b1:6f:1b:d5:d2:31:3d:04:
                    86:a6:3d:dc:75:aa:8e:52:3c:c3:23:ca:b2:d3:30:
                    57:ff:50:a0:57:9b:e3:b5:e1:d1:48:0f:16:14:28:
                    75:7c:d0:78:5e:5c:52:a9:38:ab:ee:86:fa:1d:61:
                    fd:22:5f:d6:55:bb:37:0e:42:bb:c6:83:cc:98:af:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A0:C7:B8:EB:8E:42:8E:40:0D:84:28:7D:F4:76:73:F3:BA:41:2F
            X509v3 Authority Key Identifier:
                keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/v6DHuOuOQo5ADYQoffR2c_O6QS8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.150.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:f4:62:c2:cf:eb:ab:6f:e6:23:1b:cf:40:8e:aa:bd:23:49:
         d3:7c:d5:69:e9:b3:d9:88:c9:aa:ad:5a:b5:ff:97:0d:4b:e3:
         f3:7a:ff:2e:72:11:e8:86:bd:e2:1f:61:23:b2:69:f8:d8:fd:
         1e:fc:5e:aa:db:05:4d:a3:98:35:72:f1:29:dd:ac:e6:76:3a:
         fc:a7:04:30:6b:71:35:da:99:56:43:34:92:90:99:d7:20:5f:
         51:a8:1d:ac:27:f7:f7:6c:c0:5a:bc:fd:75:f0:70:4e:43:27:
         c5:48:0e:c8:4a:e5:57:f8:f6:70:2d:13:ed:f1:dd:0b:b6:a6:
         a1:d0:70:74:22:53:5a:31:07:49:f7:ce:76:c3:2f:e3:0f:54:
         f5:76:5e:3c:d4:0d:6b:66:2c:47:3f:59:c8:95:db:98:4e:45:
         18:54:9e:89:4d:ef:c6:30:fd:6d:14:f7:06:7e:96:95:2b:08:
         96:97:a5:4e:46:7f:0e:ea:a0:90:e3:52:9d:36:da:ba:61:28:
         30:a7:6a:d4:a8:39:df:bf:d6:8e:5d:e1:25:49:eb:95:4a:fa:
         b6:ee:55:be:ba:38:aa:b8:df:d3:31:8a:80:24:8b:dc:52:61:
         5b:f4:ec:05:08:54:3f:a0:12:aa:8c:c0:bc:e9:9a:88:c9:56:
         fd:32:e9:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WIek2rJAWK/uglTypG/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZmI1NmFkYzkwNzFkNWU5ZmRhMmI2Njk0MzhiOTJiZjg2
M2U1OGYwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmEwYzdiOGViOGU0MjhlNDAwZDg0Mjg3ZGY0NzY3M2YzYmE0MTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ4NAAgxqyf2XxxBr5lgB6bog4Y8
nPsdQYkh6B/9JgC/Hldk+8lD21Y+F93f+n9xtYif5w0JIDNvmZ58QRYyTV237I13
AoZprREs84JLMpwLiuHVEKxC6DxIlIM+4VoitrO2oeBP2zVgaGbTsetQ860y0015
NCuAU+pUFl3Z4ARR5vD8ruuxvBLm7T/S+7efavvE7WWRfNs4VFC7KrQEA31cIyTm
44NvYgnWtF3xu895N9eRfGXyrQSNsW8b1dIxPQSGpj3cdaqOUjzDI8qy0zBX/1Cg
V5vjteHRSA8WFCh1fNB4XlxSqTir7ob6HWH9Il/WVbs3DkK7xoPMmK+GcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL+gx7jrjkKOQA2EKH30dnPzukEvMB8GA1UdIwQY
MBaAFBn7Vq3JBx1en9orZpQ4uSv4Y+WPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUt
NjNlZWJlMDMyNWVjLzEvdjZESHVPdU9RbzVBRFlRb2ZmUjJjX082UVM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUtNjNlZWJlMDMyNWVj
LzEvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwpa+MA0G
CSqGSIb3DQEBCwUAA4IBAQCK9GLCz+urb+YjG89Ajqq9I0nTfNVp6bPZiMmqrVq1
/5cNS+Pzev8uchHohr3iH2Ejsmn42P0e/F6q2wVNo5g1cvEp3azmdjr8pwQwa3E1
2plWQzSSkJnXIF9RqB2sJ/f3bMBavP118HBOQyfFSA7ISuVX+PZwLRPt8d0Ltqah
0HB0IlNaMQdJ9852wy/jD1T1dl481A1rZixHP1nIlduYTkUYVJ6JTe/GMP1tFPcG
fpaVKwiWl6VORn8O6qCQ41KdNtq6YSgwp2rUqDnfv9aOXeElSeuVSvq27lW+ujiq
uN/TMYqAJIvcUmFb9OwFCFQ/oBKqjMC86ZqIyVb9Munt
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:57:46 2026 by rpki-client