This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tecB0CGDUtfaDwRP3fHe3926SVw.roa
File:                     tecB0CGDUtfaDwRP3fHe3926SVw.roa (raw, json)
Hash identifier:          CSbehyC94boXy4658w8GPtfk1Sc0it55Zi/81y75RNI=
Subject key identifier:   B5:E7:01:D0:21:83:52:D7:DA:0F:04:4F:DD:F1:DE:DF:DD:BA:49:5C
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       019ABD0ADA43FDC3C2BDECAC48E809900ABA
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tecB0CGDUtfaDwRP3fHe3926SVw.roa
Signing time:             Tue 25 Nov 2025 22:03:16 +0000
ROA not before:           Tue 25 Nov 2025 22:03:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     53856
IP address blocks:        45.86.16.0/22 maxlen: 22
                          91.242.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:bd:0a:da:43:fd:c3:c2:bd:ec:ac:48:e8:09:90:0a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Nov 25 22:03:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b5e701d0218352d7da0f044fddf1dedfddba495c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:72:ef:17:8c:04:ce:ad:34:23:ba:98:78:
                    7d:d4:0e:50:d0:92:3e:02:a7:08:3d:85:e8:8a:2d:
                    0a:af:c5:f6:d1:0b:cb:2c:97:8a:e7:c9:e0:f4:4f:
                    51:e5:04:a6:0c:de:7e:97:53:bf:cc:84:83:45:9f:
                    07:74:a1:75:3d:c1:de:a9:ec:68:2d:11:26:d8:bc:
                    28:ea:63:a8:0c:9b:6c:ed:0f:5a:a9:40:d7:47:64:
                    26:ad:e2:12:ca:a8:e2:6e:09:ae:bc:e9:b4:a3:f2:
                    50:c6:59:86:a9:b5:a9:89:68:a0:6d:54:8b:72:e3:
                    5c:fb:7e:93:15:10:2e:5f:32:3f:43:84:18:ab:5b:
                    8b:d3:dd:1d:26:0d:6f:4a:11:95:70:97:cc:19:37:
                    64:54:74:1c:03:fc:67:26:a6:ef:c4:47:b7:7d:ff:
                    6f:79:60:c4:33:50:82:75:ca:54:4c:66:42:43:33:
                    ed:6f:c9:b3:e5:9e:65:a7:a2:14:35:5f:11:43:14:
                    98:07:3c:17:53:80:3d:f9:53:c2:7c:84:1a:ee:db:
                    a1:3e:7f:6b:eb:3b:5b:e8:b8:6b:54:2a:c5:84:01:
                    de:3d:ba:c6:b3:a2:1e:5e:98:c5:6e:50:ee:a9:96:
                    da:97:bb:c4:03:95:e7:3f:fc:8d:b6:e2:36:2f:14:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E7:01:D0:21:83:52:D7:DA:0F:04:4F:DD:F1:DE:DF:DD:BA:49:5C
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/tecB0CGDUtfaDwRP3fHe3926SVw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.86.16.0/22
                  91.242.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:1a:bc:05:57:c1:dc:8c:f3:d0:76:83:bd:f2:93:33:68:88:
         45:de:1f:cc:e1:7b:4f:41:54:d1:3a:19:56:05:ed:f0:d2:2e:
         fc:f1:d9:f4:10:4e:6a:82:35:2d:19:2f:5d:1c:f9:9c:b3:aa:
         c5:f7:35:25:77:e0:a3:bc:27:ad:33:1a:53:0b:1e:69:56:e3:
         02:98:d4:71:0d:0c:09:8d:28:af:fc:2c:34:a5:7d:98:56:37:
         6e:a5:ca:9d:4f:49:8b:6d:7c:0d:cc:6b:c4:56:81:73:f7:a3:
         1b:7c:e4:e0:75:3d:3e:e8:9c:64:04:f1:58:44:95:9f:3e:22:
         b6:28:bd:27:97:b1:0a:c7:e6:49:67:85:70:b6:88:cc:dd:93:
         45:ab:82:59:a1:b4:e7:41:b6:41:84:82:34:09:36:72:cb:23:
         c4:1a:71:34:01:fe:26:03:70:c1:96:54:26:88:6c:3a:7b:96:
         0c:1d:95:04:a3:85:ea:f6:d2:4b:98:5c:3a:08:be:d1:5a:c4:
         82:63:07:4a:34:4b:cf:e4:40:8b:c6:b6:2c:9b:59:cd:45:29:
         f6:ec:e8:ad:4e:08:9e:6c:b7:94:93:1a:e4:bb:3a:5d:28:72:
         66:c9:eb:7e:9c:0e:bf:01:b3:7e:cb:7b:fd:f4:a6:16:76:bf:
         3d:93:cf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:52:19 2025 by rpki-client