This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Pv7TTLfkftGMdPPUuUGmMS4Fq4Q.roa
File:                     Pv7TTLfkftGMdPPUuUGmMS4Fq4Q.roa (raw, json)
Hash identifier:          2oeBniauYkJ4MbBcYCSBIVqLIj4txeQClquwaVvSIpM=
Subject key identifier:   3E:FE:D3:4C:B7:E4:7E:D1:8C:74:F3:D4:B9:41:A6:31:2E:05:AB:84
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B77590A02CB8A9178BDE6C082C4F4C8E5
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Pv7TTLfkftGMdPPUuUGmMS4Fq4Q.roa
Signing time:             Thu 01 Jan 2026 02:18:02 +0000
ROA not before:           Thu 01 Jan 2026 02:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205342
IP address blocks:        193.192.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:0a:02:cb:8a:91:78:bd:e6:c0:82:c4:f4:c8:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3efed34cb7e47ed18c74f3d4b941a6312e05ab84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:c8:27:4b:83:83:a3:20:ad:bd:88:42:c1:
                    f8:a1:49:7d:9f:12:2a:0a:cc:f8:f6:39:d9:9f:87:
                    c7:60:71:e3:e3:96:f0:55:af:00:6f:95:10:c9:dc:
                    34:0a:b4:67:27:24:25:7f:44:09:24:7c:c0:93:37:
                    57:5d:a8:1f:1d:57:63:58:38:73:89:fa:cd:df:86:
                    57:3a:bc:1e:ee:3b:3c:af:61:8a:34:b9:f3:93:69:
                    6a:fd:35:29:e4:dc:45:f6:0f:ef:1b:8e:55:94:e8:
                    90:99:ee:ae:24:08:17:f7:d6:28:5d:cd:9c:bd:4b:
                    0f:d8:33:74:95:c1:38:c7:a6:d9:5b:41:c7:5a:76:
                    e3:9a:bd:38:33:05:18:17:47:81:81:7f:68:ef:73:
                    73:88:72:24:a6:3c:7a:70:3c:af:da:0e:c0:cc:d3:
                    63:1c:d2:e9:49:ae:05:87:24:47:9d:0e:e8:6e:3b:
                    f8:17:2e:d2:56:f1:75:07:19:ff:f3:ff:1a:db:21:
                    cd:f9:39:e0:d2:d6:b2:f1:04:4d:04:11:df:76:46:
                    a0:1e:c9:1b:20:8e:f8:39:84:5a:1f:4a:db:39:24:
                    81:93:3b:c1:0c:1b:28:a3:5c:f2:28:22:80:b2:72:
                    0a:73:c6:90:99:04:61:c1:97:ca:ee:27:f5:cd:fe:
                    09:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FE:D3:4C:B7:E4:7E:D1:8C:74:F3:D4:B9:41:A6:31:2E:05:AB:84
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Pv7TTLfkftGMdPPUuUGmMS4Fq4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.192.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:aa:ed:10:b4:5a:35:82:52:1f:44:55:57:9d:5a:3d:00:f2:
         44:54:c1:68:e1:9a:5f:6b:c4:01:f2:39:37:d7:36:95:20:0f:
         3a:d5:e5:ee:84:77:e4:79:69:03:d1:cc:36:a1:b7:29:3d:88:
         fc:10:52:7b:cf:9e:09:e5:c7:1e:7c:30:3a:a5:d1:bf:60:e5:
         e9:d5:18:a3:b5:ea:3f:a4:36:6c:39:9b:aa:9f:46:c4:99:f3:
         31:5a:e4:40:7a:ed:4a:2d:8c:97:77:ca:9b:c1:8d:6e:cd:43:
         06:75:62:18:e5:a3:0b:62:20:1f:17:98:5b:47:39:27:59:da:
         86:93:8a:78:f3:c4:de:d3:a6:45:42:f1:cc:a2:be:cc:e6:5d:
         eb:89:7b:39:75:5b:8b:35:92:32:fc:5f:ea:97:6d:02:a5:e0:
         e0:17:67:d6:27:9a:a7:3d:11:1c:07:15:fa:71:c7:53:fc:00:
         9f:2f:1a:ec:ca:30:39:b6:92:e4:b3:dc:86:52:ef:cb:f6:a6:
         70:af:47:c0:2c:30:e1:08:6a:ec:de:09:42:c3:0d:10:39:de:
         29:0d:d1:06:9f:c9:c2:48:66:6e:3e:9c:df:cd:f5:fe:49:2b:
         2f:4b:f2:f0:fa:b4:8c:14:59:2e:f0:c7:ef:17:b8:1d:a4:01:
         1f:0d:6b:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WQoCy4qReL3mwILE9MjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWZlZDM0Y2I3ZTQ3ZWQxOGM3NGYzZDRiOTQxYTYzMTJlMDVhYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjLIJ0uDg6Mgrb2IQsH4oUl9nxIq
Csz49jnZn4fHYHHj45bwVa8Ab5UQydw0CrRnJyQlf0QJJHzAkzdXXagfHVdjWDhz
ifrN34ZXOrwe7js8r2GKNLnzk2lq/TUp5NxF9g/vG45VlOiQme6uJAgX99YoXc2c
vUsP2DN0lcE4x6bZW0HHWnbjmr04MwUYF0eBgX9o73NziHIkpjx6cDyv2g7AzNNj
HNLpSa4FhyRHnQ7objv4Fy7SVvF1Bxn/8/8a2yHN+Tng0tay8QRNBBHfdkagHskb
II74OYRaH0rbOSSBkzvBDBsoo1zyKCKAsnIKc8aQmQRhwZfK7if1zf4JZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD7+00y35H7RjHTz1LlBpjEuBauEMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvUHY3VFRMZmtmdEdNZFBQVXVVR21NUzRGcTRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcCkMA0G
CSqGSIb3DQEBCwUAA4IBAQA4qu0QtFo1glIfRFVXnVo9APJEVMFo4Zpfa8QB8jk3
1zaVIA861eXuhHfkeWkD0cw2obcpPYj8EFJ7z54J5ccefDA6pdG/YOXp1Rijteo/
pDZsOZuqn0bEmfMxWuRAeu1KLYyXd8qbwY1uzUMGdWIY5aMLYiAfF5hbRzknWdqG
k4p488Te06ZFQvHMor7M5l3riXs5dVuLNZIy/F/ql20CpeDgF2fWJ5qnPREcBxX6
ccdT/ACfLxrsyjA5tpLks9yGUu/L9qZwr0fALDDhCGrs3glCww0QOd4pDdEGn8nC
SGZuPpzfzfX+SSsvS/Lw+rSMFFku8MfvF7gdpAEfDWs0
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:56 2026 by rpki-client