This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3egON2jf6e6LPs4tP2ayfLDDjko.roa
File:                     3egON2jf6e6LPs4tP2ayfLDDjko.roa (raw, json)
Hash identifier:          FPeRmXox6jx7zN8CEWYBuSRVJ47FX97vZNIl6GKWp5k=
Subject key identifier:   DD:E8:0E:37:68:DF:E9:EE:8B:3E:CE:2D:3F:66:B2:7C:B0:C3:8E:4A
Certificate issuer:       /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial:       019B7CEE32A8A52A3B8ED6ACAC7EC6E2E5F1
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3egON2jf6e6LPs4tP2ayfLDDjko.roa
Signing time:             Fri 02 Jan 2026 04:19:03 +0000
ROA not before:           Fri 02 Jan 2026 04:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8434
IP address blocks:        82.193.160.0/19 maxlen: 19
                          2a02:2580::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:32:a8:a5:2a:3b:8e:d6:ac:ac:7e:c6:e2:e5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
        Validity
            Not Before: Jan  2 04:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dde80e3768dfe9ee8b3ece2d3f66b27cb0c38e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4e:24:76:af:81:bc:d4:a6:9f:c2:28:97:67:
                    33:32:6e:f4:2a:c8:e1:32:84:c0:de:d4:ea:ad:90:
                    dd:27:61:a1:db:b6:ab:8b:34:53:23:4b:be:2d:35:
                    b5:ec:09:ed:4f:99:fb:23:81:a2:96:0a:f1:ee:1e:
                    51:f0:3c:84:67:e4:50:79:fc:93:04:c3:52:e0:66:
                    f1:e8:01:fa:e6:1a:25:53:b0:91:98:75:22:0a:b8:
                    19:7d:7d:1c:bd:0b:2c:e0:eb:07:93:0c:2e:75:ae:
                    5b:f8:25:59:07:a3:9a:e0:f6:c3:59:f4:41:3c:00:
                    69:fd:82:11:e7:28:7a:4d:5f:eb:a0:14:02:cd:ce:
                    04:a6:a0:c0:3e:87:73:47:ee:eb:87:2b:cf:d6:94:
                    84:f8:2f:cd:ae:06:8a:15:51:a6:7f:0f:47:fe:c7:
                    c7:40:7a:3d:43:fe:c0:2a:9a:f2:f2:be:d6:0d:3d:
                    1a:ec:b9:1a:0d:82:40:42:70:e3:97:bd:51:98:b3:
                    e0:a3:77:65:1f:8c:47:b1:cc:26:17:d7:16:c7:49:
                    7b:60:dc:52:d1:27:4c:db:6d:60:eb:d0:ab:5a:dc:
                    de:b2:e0:63:c2:28:9d:83:04:c5:6e:67:11:57:dd:
                    68:7b:93:b4:fb:1f:47:0c:e4:90:4d:26:c0:fb:2a:
                    d4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E8:0E:37:68:DF:E9:EE:8B:3E:CE:2D:3F:66:B2:7C:B0:C3:8E:4A
            X509v3 Authority Key Identifier:
                keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3egON2jf6e6LPs4tP2ayfLDDjko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.193.160.0/19
                IPv6:
                  2a02:2580::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:4b:71:39:25:c9:5b:1c:cb:cc:1f:36:05:db:c3:97:2f:ff:
         ee:34:00:e6:39:ff:74:c6:66:40:9d:f3:40:75:c0:9d:26:92:
         16:85:5d:d9:05:b7:42:3d:d1:07:42:73:29:91:1b:06:16:7f:
         2d:d8:2d:03:09:5a:78:98:c8:29:8e:b7:2b:a4:26:4d:cd:28:
         ea:67:39:7e:ba:7e:58:42:e1:47:3a:65:dc:03:92:95:bf:7a:
         d8:7d:1e:59:df:f6:b6:7a:8d:55:a5:cc:9e:61:be:12:cd:a5:
         dc:51:1c:64:bb:0f:f7:a2:b8:c3:95:18:eb:82:6c:c2:18:bf:
         96:8a:50:b3:b1:4e:54:90:92:44:7e:f7:9a:ad:29:53:4e:9e:
         a4:74:38:d6:ea:17:25:59:30:8b:b0:fb:3e:7c:30:e3:32:81:
         1b:ed:f6:3c:18:88:eb:29:88:77:8a:99:f1:c3:5b:b5:c9:3c:
         42:f4:6d:93:62:e7:e7:34:91:21:13:af:28:aa:fb:d9:84:05:
         58:a2:f4:05:0f:82:89:fb:b8:65:68:15:6a:d9:f2:91:b3:bb:
         37:e4:61:70:76:41:7b:31:0e:54:a1:1c:ff:3d:f6:b0:cc:36:
         ff:e3:92:ac:14:e4:56:2d:b8:9c:5e:77:ff:c1:3a:67:26:6e:
         b3:9d:54:00
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt87jKopSo7jtasrH7G4uXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlM2Q4MTIxMWY0OTJlZGYwMjlhMjJjYzY2YzIwYTNiOTQ1
ODM1OTAwHhcNMjYwMTAyMDQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGU4MGUzNzY4ZGZlOWVlOGIzZWNlMmQzZjY2YjI3Y2IwYzM4ZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu04kdq+BvNSmn8Iol2czMm70Ksjh
MoTA3tTqrZDdJ2Gh27arizRTI0u+LTW17AntT5n7I4Gilgrx7h5R8DyEZ+RQefyT
BMNS4Gbx6AH65holU7CRmHUiCrgZfX0cvQss4OsHkwwuda5b+CVZB6Oa4PbDWfRB
PABp/YIR5yh6TV/roBQCzc4EpqDAPodzR+7rhyvP1pSE+C/NrgaKFVGmfw9H/sfH
QHo9Q/7AKpry8r7WDT0a7LkaDYJAQnDjl71RmLPgo3dlH4xHscwmF9cWx0l7YNxS
0SdM221g69CrWtzesuBjwiidgwTFbmcRV91oe5O0+x9HDOSQTSbA+yrUZwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFN3oDjdo3+nuiz7OLT9msnyww45KMB8GA1UdIwQY
MBaAFN49gSEfSS7fApoizGbCCjuUWDWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYt
MzE0MjhiMDUwZmQ3LzEvM2VnT04yamY2ZTZMUHM0dFAyYXlmTEREamtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYtMzE0MjhiMDUwZmQ3
LzEvM2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFUsGgMA0E
AgACMAcDBQAqAiWAMA0GCSqGSIb3DQEBCwUAA4IBAQCPS3E5JclbHMvMHzYF28OX
L//uNADmOf90xmZAnfNAdcCdJpIWhV3ZBbdCPdEHQnMpkRsGFn8t2C0DCVp4mMgp
jrcrpCZNzSjqZzl+un5YQuFHOmXcA5KVv3rYfR5Z3/a2eo1VpcyeYb4SzaXcURxk
uw/3orjDlRjrgmzCGL+WilCzsU5UkJJEfvearSlTTp6kdDjW6hclWTCLsPs+fDDj
MoEb7fY8GIjrKYh3ipnxw1u1yTxC9G2TYufnNJEhE68oqvvZhAVYovQFD4KJ+7hl
aBVq2fKRs7s35GFwdkF7MQ5UoRz/PfawzDb/45KsFORWLbicXnf/wTpnJm6znVQA
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:38:41 2026 by rpki-client