This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pdAuWCg6TQgkV_DNEw347ffcuoI.roa
File:                     pdAuWCg6TQgkV_DNEw347ffcuoI.roa (raw, json)
Hash identifier:          pl1f/C8mIihpD/JXuATZYRdSHQjZScm0eZRtZIVVq50=
Subject key identifier:   A5:D0:2E:58:28:3A:4D:08:24:57:F0:CD:13:0D:F8:ED:F7:DC:BA:82
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B7758FE79A8126CA8F955A50B25CB5CE8
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pdAuWCg6TQgkV_DNEw347ffcuoI.roa
Signing time:             Thu 01 Jan 2026 02:17:59 +0000
ROA not before:           Thu 01 Jan 2026 02:17:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199538
IP address blocks:        193.192.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:fe:79:a8:12:6c:a8:f9:55:a5:0b:25:cb:5c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:17:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a5d02e58283a4d082457f0cd130df8edf7dcba82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:92:19:9c:28:4d:18:e3:a4:6b:14:e6:74:
                    3d:04:2d:24:61:bf:bd:e3:bd:5a:ff:49:55:e6:46:
                    51:6d:e5:49:ab:52:9e:9e:76:25:1c:cd:93:6f:5a:
                    21:8c:0c:33:01:e2:6e:31:4b:64:cb:e8:50:a8:02:
                    92:61:01:e3:6b:30:2b:88:f3:1a:31:48:56:30:7b:
                    19:c8:64:66:ce:ba:ba:7d:b3:cc:e7:9a:f9:7e:42:
                    1c:4d:6c:d2:f6:61:f1:92:30:12:f8:67:be:8b:4e:
                    42:dc:19:7e:ba:a9:85:62:09:81:8f:97:68:b2:b8:
                    aa:73:58:22:c8:aa:87:91:16:83:4f:c6:54:0f:b8:
                    a9:4a:e8:e9:c2:bc:46:32:cd:27:82:19:09:ad:91:
                    19:b3:af:11:a5:be:f5:27:20:31:04:d6:0e:4e:f9:
                    f4:03:cb:4a:84:99:5c:cf:d8:26:37:a2:51:51:00:
                    13:01:57:21:7d:5c:57:7d:db:37:9f:5c:bf:79:b7:
                    8c:91:77:f2:25:96:82:df:7e:ae:aa:9c:37:fb:ae:
                    17:03:6c:9b:00:88:b3:b4:6f:22:a0:ab:63:f3:f6:
                    dc:d9:a6:cd:d1:d8:33:62:23:37:b3:78:a5:4c:59:
                    b5:71:a7:45:dc:8c:b4:13:26:2a:f4:f7:a1:67:2c:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D0:2E:58:28:3A:4D:08:24:57:F0:CD:13:0D:F8:ED:F7:DC:BA:82
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pdAuWCg6TQgkV_DNEw347ffcuoI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.192.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:d0:fe:ad:ee:07:ec:8d:49:a9:c5:5d:6e:cd:14:1d:b1:8f:
         94:f7:4f:ac:e8:40:2e:1b:b9:26:c7:d0:de:56:c3:a2:39:a1:
         19:4f:2c:dd:aa:9e:ab:ab:b1:f2:aa:a5:3a:d0:d6:1f:99:df:
         14:27:9c:77:13:84:56:4c:db:19:41:5e:d7:6f:54:62:67:b1:
         bb:bf:8f:c2:48:b2:45:59:d7:bd:d5:b9:9f:4e:29:bc:6b:f7:
         73:bc:eb:8e:35:68:aa:2d:91:77:e8:1c:e6:c8:51:9d:d6:a2:
         3f:7d:bd:4f:a2:0c:53:79:e4:d3:64:22:19:69:18:41:62:e1:
         65:cb:4e:d1:f3:80:04:47:95:33:5e:8b:cb:7b:fa:2f:fe:dd:
         53:de:ed:27:4f:c2:b3:77:39:ec:bf:c2:e5:da:be:6f:b1:97:
         fa:0e:60:d6:47:ce:8b:cb:7f:d5:2c:c6:ff:d7:6f:d1:14:0e:
         47:75:89:25:db:c6:f3:ff:5c:5c:1b:79:e4:87:d0:32:92:06:
         e5:55:84:e9:2a:d1:e8:cf:05:cd:b2:38:74:13:2d:27:c8:3c:
         9c:56:de:e2:55:2d:c9:ac:83:fd:21:6f:6c:a0:cc:82:18:72:
         cc:2a:5b:c0:28:ce:7b:40:d8:bc:67:62:b1:ab:a3:6d:d5:a0:
         c4:ce:ea:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WP55qBJsqPlVpQsly1zoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWQwMmU1ODI4M2E0ZDA4MjQ1N2YwY2QxMzBkZjhlZGY3ZGNiYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7mSGZwoTRjjpGsU5nQ9BC0kYb+9
471a/0lV5kZRbeVJq1KennYlHM2Tb1ohjAwzAeJuMUtky+hQqAKSYQHjazAriPMa
MUhWMHsZyGRmzrq6fbPM55r5fkIcTWzS9mHxkjAS+Ge+i05C3Bl+uqmFYgmBj5do
sriqc1giyKqHkRaDT8ZUD7ipSujpwrxGMs0nghkJrZEZs68Rpb71JyAxBNYOTvn0
A8tKhJlcz9gmN6JRUQATAVchfVxXfds3n1y/ebeMkXfyJZaC336uqpw3+64XA2yb
AIiztG8ioKtj8/bc2abN0dgzYiM3s3ilTFm1cadF3Iy0EyYq9PehZyw0ZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKXQLlgoOk0IJFfwzRMN+O333LqCMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvcGRBdVdDZzZUUWdrVl9ETkV3MzQ3ZmZjdW9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcC4MA0G
CSqGSIb3DQEBCwUAA4IBAQCO0P6t7gfsjUmpxV1uzRQdsY+U90+s6EAuG7kmx9De
VsOiOaEZTyzdqp6rq7HyqqU60NYfmd8UJ5x3E4RWTNsZQV7Xb1RiZ7G7v4/CSLJF
Wde91bmfTim8a/dzvOuONWiqLZF36BzmyFGd1qI/fb1PogxTeeTTZCIZaRhBYuFl
y07R84AER5UzXovLe/ov/t1T3u0nT8Kzdznsv8Ll2r5vsZf6DmDWR86Ly3/VLMb/
12/RFA5HdYkl28bz/1xcG3nkh9AykgblVYTpKtHozwXNsjh0Ey0nyDycVt7iVS3J
rIP9IW9soMyCGHLMKlvAKM57QNi8Z2Kxq6Nt1aDEzupR
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:29:43 2026 by rpki-client