This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa
File:                     v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (raw, json)
Hash identifier:          IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=
Subject key identifier:   BF:8C:01:A3:F4:33:D1:7E:73:25:32:30:6F:44:19:43:D1:85:66:6B
Certificate issuer:       /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial:       019B7FF216E58379286DF537863CCE8DE953
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa
Signing time:             Fri 02 Jan 2026 18:22:10 +0000
ROA not before:           Fri 02 Jan 2026 18:22:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199431
IP address blocks:        94.247.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:16:e5:83:79:28:6d:f5:37:86:3c:ce:8d:e9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
        Validity
            Not Before: Jan  2 18:22:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bf8c01a3f433d17e732532306f441943d185666b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:82:83:fe:ca:1d:4e:f8:dd:1e:45:5a:4c:
                    ea:89:d6:5d:6e:17:d6:01:7b:63:ac:be:7c:7b:32:
                    30:47:cd:2a:90:5a:43:71:a6:a7:54:b0:2f:46:b6:
                    de:84:e4:ce:62:fa:8d:b5:e9:78:74:2e:0a:a8:d4:
                    e7:b7:70:86:63:eb:77:6d:95:22:4d:64:7c:d5:5e:
                    fc:d6:39:a2:6a:f3:11:dc:e0:b0:82:00:24:13:e9:
                    2c:e7:f3:79:ce:39:f3:54:26:60:b7:50:ee:23:ee:
                    e6:a9:ae:45:21:21:78:c4:aa:9d:af:ad:be:28:73:
                    da:8e:34:6e:e8:09:74:68:5f:a9:75:c5:c4:6d:b1:
                    a5:a8:1c:57:a7:55:3a:fd:a5:d7:29:30:26:08:de:
                    3a:ea:a0:36:62:8a:1c:1b:34:2a:11:57:54:11:b7:
                    1e:ed:f9:e0:b0:47:4a:f7:2a:bf:0e:99:14:bd:d1:
                    0d:a1:4e:a5:52:e0:95:22:c8:df:ab:09:2b:04:6d:
                    81:4e:f5:b1:54:19:f8:18:d0:cc:1e:64:24:4d:b5:
                    d6:f8:a9:85:15:31:d7:8c:4f:2d:32:8f:27:8c:2a:
                    14:69:47:f8:4f:29:01:ed:17:ad:ed:33:0a:7b:10:
                    67:f5:a8:3c:b6:35:cf:33:4f:98:c3:92:a2:ed:e1:
                    3a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8C:01:A3:F4:33:D1:7E:73:25:32:30:6F:44:19:43:D1:85:66:6B
            X509v3 Authority Key Identifier:
                keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:7e:8d:48:01:1f:f1:6a:a4:11:a4:90:26:5d:21:2a:68:25:
         26:5e:cf:ad:be:a7:ec:0f:f1:b9:21:d6:f4:2f:06:31:6c:26:
         67:34:e8:2d:21:f6:6d:4c:37:85:d4:6e:20:3f:91:e7:27:aa:
         a5:10:e6:50:15:ae:c6:3c:07:29:87:2b:b8:30:15:41:d1:bd:
         5d:03:76:05:e5:b3:22:60:91:58:bd:fa:a6:34:b5:b7:6a:ed:
         45:0f:e4:d4:03:8f:ae:d7:17:cd:27:df:07:e2:7c:37:87:40:
         d2:21:56:df:1a:ba:6e:c4:50:c6:ac:eb:f0:dc:f0:63:36:34:
         73:34:2e:68:ce:94:79:d2:3d:b3:bd:2f:85:76:1c:8d:9e:3e:
         f5:73:0c:40:d3:ef:96:6c:11:33:b8:1f:c2:28:55:90:ba:f7:
         b7:de:b9:35:fb:06:dc:a0:01:55:16:9b:16:0d:05:7c:d4:52:
         8b:5e:d4:6a:15:e3:76:4d:16:b4:a5:e6:52:31:43:6c:9f:36:
         ee:46:09:52:5c:4b:71:05:8c:83:a9:2f:42:4a:9a:cf:5c:5f:
         b7:71:7e:48:b1:e0:ed:83:39:15:40:07:91:2f:74:4b:2c:33:
         df:44:20:67:15:f7:dd:8a:60:cd:49:08:f8:8b:c2:75:37:e3:
         c6:4b:7d:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/8hblg3kobfU3hjzOjelTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh
M2FhZTkwHhcNMjYwMTAyMTgyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjhjMDFhM2Y0MzNkMTdlNzMyNTMyMzA2ZjQ0MTk0M2QxODU2NjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsruCg/7KHU743R5FWkzqidZdbhfW
AXtjrL58ezIwR80qkFpDcaanVLAvRrbehOTOYvqNtel4dC4KqNTnt3CGY+t3bZUi
TWR81V781jmiavMR3OCwggAkE+ks5/N5zjnzVCZgt1DuI+7mqa5FISF4xKqdr62+
KHPajjRu6Al0aF+pdcXEbbGlqBxXp1U6/aXXKTAmCN466qA2YoocGzQqEVdUEbce
7fngsEdK9yq/DpkUvdENoU6lUuCVIsjfqwkrBG2BTvWxVBn4GNDMHmQkTbXW+KmF
FTHXjE8tMo8njCoUaUf4TykB7Ret7TMKexBn9ag8tjXPM0+Yw5Ki7eE6gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL+MAaP0M9F+cyUyMG9EGUPRhWZrMB8GA1UdIwQY
MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt
YTZjNDllYjI4Mjg3LzEvdjR3Qm9fUXowWDV6SlRJd2IwUVpROUdGWm1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3
LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvflMA0G
CSqGSIb3DQEBCwUAA4IBAQAifo1IAR/xaqQRpJAmXSEqaCUmXs+tvqfsD/G5Idb0
LwYxbCZnNOgtIfZtTDeF1G4gP5HnJ6qlEOZQFa7GPAcphyu4MBVB0b1dA3YF5bMi
YJFYvfqmNLW3au1FD+TUA4+u1xfNJ98H4nw3h0DSIVbfGrpuxFDGrOvw3PBjNjRz
NC5ozpR50j2zvS+FdhyNnj71cwxA0++WbBEzuB/CKFWQuve33rk1+wbcoAFVFpsW
DQV81FKLXtRqFeN2TRa0peZSMUNsnzbuRglSXEtxBYyDqS9CSprPXF+3cX5IseDt
gzkVQAeRL3RLLDPfRCBnFffdimDNSQj4i8J1N+PGS32S
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:03:38 2026 by rpki-client