This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/urvvaO540p5lCG-661I_LYSazhQ.roa
File:                     urvvaO540p5lCG-661I_LYSazhQ.roa (raw, json)
Hash identifier:          OYiQT7PXJGef2AODl6kFsbHiALBw8riu/71BAiKYr70=
Subject key identifier:   BA:BB:EF:68:EE:78:D2:9E:65:08:6F:BA:EB:52:3F:2D:84:9A:CE:14
Certificate issuer:       /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial:       019B7B359701B19103B4E6B093B7152BC341
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/urvvaO540p5lCG-661I_LYSazhQ.roa
Signing time:             Thu 01 Jan 2026 20:17:48 +0000
ROA not before:           Thu 01 Jan 2026 20:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205384
IP address blocks:        2001:67c:11e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:97:01:b1:91:03:b4:e6:b0:93:b7:15:2b:c3:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
        Validity
            Not Before: Jan  1 20:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=babbef68ee78d29e65086fbaeb523f2d849ace14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:d5:69:56:90:b0:3d:6b:67:4c:c4:f1:e3:
                    3b:e6:53:ee:08:8a:e9:e8:f9:f5:2e:82:18:fd:fe:
                    d6:18:cf:ab:15:9b:c8:f7:89:d0:c7:70:4f:96:7e:
                    21:b9:31:5b:38:39:ea:53:77:9d:f6:1c:af:f2:c3:
                    b6:8b:a0:c4:d0:2c:b9:e1:03:e1:6a:9d:9a:5b:c3:
                    eb:f0:99:3c:03:3c:aa:fe:ca:2f:93:9e:80:ef:2c:
                    a0:62:5d:64:60:5e:b4:7e:6f:88:5d:a9:96:b2:fb:
                    49:a1:ef:2e:59:12:c4:f7:13:cc:80:7d:22:28:24:
                    2c:d9:63:e5:68:3f:44:47:28:77:43:1b:50:17:97:
                    62:52:93:89:80:04:62:26:29:d3:ea:c2:35:c3:dd:
                    1f:27:66:ee:1d:8a:8b:13:ca:00:fc:3d:42:1c:55:
                    b7:e3:06:d6:dc:cc:29:28:b6:92:f6:d5:3a:aa:ab:
                    72:74:d6:02:81:19:40:73:42:fe:66:78:80:83:46:
                    f1:d5:91:c8:d0:a2:e2:92:aa:b5:41:a6:20:24:19:
                    36:0e:25:69:08:ca:1c:9e:cc:6f:ee:f7:1f:cd:5b:
                    1f:b9:50:0d:7f:20:5f:a0:0b:a7:8b:5b:18:e1:4e:
                    97:ee:f5:1e:d9:29:76:b8:5a:06:29:34:25:44:0d:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BB:EF:68:EE:78:D2:9E:65:08:6F:BA:EB:52:3F:2D:84:9A:CE:14
            X509v3 Authority Key Identifier:
                keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/urvvaO540p5lCG-661I_LYSazhQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:11e8::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:0b:e3:4c:64:af:cb:d3:3b:c1:08:e9:11:e3:c2:25:8c:5d:
         b4:2d:be:46:f3:3d:4a:df:f7:1b:93:5b:55:84:c7:8b:3f:64:
         9e:95:98:53:c4:71:96:6b:44:0d:8b:21:4e:58:7a:b0:37:b0:
         a8:9b:9e:f6:8e:5d:95:4b:ff:0c:8b:22:07:aa:a6:69:e7:52:
         ba:ad:d2:b6:81:e7:c3:1e:57:ab:70:14:fd:77:3b:97:73:42:
         b5:44:3e:d7:ec:82:1d:f8:2d:ba:3a:72:0c:4c:b1:4d:02:ff:
         65:de:74:25:3f:a7:94:aa:fa:cd:31:61:a6:42:d5:59:33:da:
         8f:8e:c8:87:24:d3:d8:2e:e4:d5:95:a1:59:65:a1:81:7d:fb:
         70:d6:1c:ba:b3:4e:e8:c3:3b:9b:f0:c2:e2:50:7b:9a:f3:90:
         98:4a:02:42:6a:60:0d:52:31:81:fc:70:0b:44:fd:ba:e2:8d:
         20:86:c8:8e:58:ad:fe:3b:77:ce:b9:43:bd:9b:5f:13:03:30:
         cd:07:d3:d8:0a:5e:c6:69:ca:5f:a3:5f:3f:54:a4:42:45:dc:
         80:0d:eb:d0:b7:ef:f8:f6:83:2e:3b:63:16:7b:da:1d:85:00:
         a0:ee:3c:ad:4d:cc:15:13:13:bc:25:84:40:fd:79:d7:a6:46:
         93:99:b2:9f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt7NZcBsZEDtOawk7cVK8NBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YmYwN2YwNGNjNzZhOTBhZDk3ZjlmMTc0OWZhYmNmMDVj
MzVkNjIwHhcNMjYwMTAxMjAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWJiZWY2OGVlNzhkMjllNjUwODZmYmFlYjUyM2YyZDg0OWFjZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuofVaVaQsD1rZ0zE8eM75lPuCIrp
6Pn1LoIY/f7WGM+rFZvI94nQx3BPln4huTFbODnqU3ed9hyv8sO2i6DE0Cy54QPh
ap2aW8Pr8Jk8Azyq/sovk56A7yygYl1kYF60fm+IXamWsvtJoe8uWRLE9xPMgH0i
KCQs2WPlaD9ERyh3QxtQF5diUpOJgARiJinT6sI1w90fJ2buHYqLE8oA/D1CHFW3
4wbW3MwpKLaS9tU6qqtydNYCgRlAc0L+ZniAg0bx1ZHI0KLikqq1QaYgJBk2DiVp
CMocnsxv7vcfzVsfuVANfyBfoAuni1sY4U6X7vUe2Sl2uFoGKTQlRA3LzQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLq772jueNKeZQhvuutSPy2Ems4UMB8GA1UdIwQY
MBaAFHS/B/BMx2qQrZf58XSfq88Fw11iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgt
ZWMwODQxMzdlMjQyLzEvdXJ2dmFPNTQwcDVsQ0ctNjYxSV9MWVNhemhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hMGIzOTUtNjFmZi00NTdkLThmZjgtZWMwODQxMzdlMjQy
LzEvZEw4SDhFekhhcEN0bF9ueGRKLXJ6d1hEWFdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBHo
MA0GCSqGSIb3DQEBCwUAA4IBAQCBC+NMZK/L0zvBCOkR48IljF20Lb5G8z1K3/cb
k1tVhMeLP2SelZhTxHGWa0QNiyFOWHqwN7Com572jl2VS/8MiyIHqqZp51K6rdK2
gefDHlercBT9dzuXc0K1RD7X7IId+C26OnIMTLFNAv9l3nQlP6eUqvrNMWGmQtVZ
M9qPjsiHJNPYLuTVlaFZZaGBfftw1hy6s07owzub8MLiUHua85CYSgJCamANUjGB
/HALRP264o0ghsiOWK3+O3fOuUO9m18TAzDNB9PYCl7Gacpfo18/VKRCRdyADevQ
t+/49oMuO2MWe9odhQCg7jytTcwVExO8JYRA/XnXpkaTmbKf
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:35:56 2026 by rpki-client