This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/_no2T5wGNnY26JGUD4kdd2oqfik.roa
File:                     _no2T5wGNnY26JGUD4kdd2oqfik.roa (raw, json)
Hash identifier:          cAZL1uQQoGuptZEdg5D0yO2UPDl/TjYUL4Qg8BJ2wIg=
Subject key identifier:   FE:7A:36:4F:9C:06:36:76:36:E8:91:94:0F:89:1D:77:6A:2A:7E:29
Certificate issuer:       /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial:       019B7DCB06DCBFA212A325113493FD20F467
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/_no2T5wGNnY26JGUD4kdd2oqfik.roa
Signing time:             Fri 02 Jan 2026 08:20:16 +0000
ROA not before:           Fri 02 Jan 2026 08:20:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216120
IP address blocks:        185.150.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:06:dc:bf:a2:12:a3:25:11:34:93:fd:20:f4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
        Validity
            Not Before: Jan  2 08:20:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fe7a364f9c06367636e891940f891d776a2a7e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bf:62:e6:24:71:b6:4a:c9:ec:56:9b:0b:69:
                    b9:68:14:0b:0c:90:6a:4f:1a:40:27:f8:6b:df:21:
                    59:8b:18:f2:13:fc:0f:70:04:a2:75:e3:6b:a2:e8:
                    ff:cf:ef:25:79:0e:80:1c:96:6b:03:ef:bf:00:b7:
                    50:0f:cf:d4:d3:e3:cb:82:85:d2:2d:d2:61:65:6f:
                    60:e2:32:2c:40:3a:94:a4:38:54:b0:87:10:eb:12:
                    79:a0:c2:07:d4:4c:3f:30:1e:4b:f7:cb:d6:d3:ef:
                    a5:ea:a2:b1:4e:a5:f8:bc:56:42:d6:ca:1f:f5:dd:
                    6a:64:96:0d:04:e7:32:ad:45:92:6f:94:66:c7:81:
                    a0:d2:ad:10:7b:66:4d:25:60:c4:e5:35:bc:ea:57:
                    54:c8:7d:6e:fd:8e:85:b8:9b:8d:53:ad:11:07:6d:
                    63:bc:17:70:50:96:00:4b:ab:c6:16:7c:de:9d:f1:
                    ca:e2:b5:ea:4d:b7:11:57:b1:b6:c4:1d:d6:a8:82:
                    22:be:6e:85:83:d7:99:e4:8e:46:40:20:37:46:91:
                    b5:73:bb:09:70:a5:a9:06:31:68:d9:d7:50:48:5f:
                    45:7c:91:74:d3:4f:8a:53:16:6d:a3:27:11:e4:65:
                    89:c5:b7:c3:76:d6:e0:05:73:df:36:7c:47:62:ea:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7A:36:4F:9C:06:36:76:36:E8:91:94:0F:89:1D:77:6A:2A:7E:29
            X509v3 Authority Key Identifier:
                keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/_no2T5wGNnY26JGUD4kdd2oqfik.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.150.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:c2:74:18:7e:51:52:95:ca:48:cd:82:fc:f1:d9:fc:32:99:
         46:7c:7c:21:33:0f:fe:88:83:c5:75:a0:01:b4:64:18:d7:2d:
         b4:00:d5:9b:60:8a:bb:35:31:2d:ee:e3:ec:f9:b9:1c:36:aa:
         90:7e:fa:11:10:0b:8a:a0:1c:4d:89:7b:e6:68:40:ab:f4:f9:
         a5:09:8c:4c:38:fe:4a:40:bb:cc:32:dc:33:b8:6d:8b:66:87:
         ca:eb:4a:93:ca:75:43:6d:43:eb:fc:ff:4b:9a:c2:83:70:2d:
         51:a7:3d:e3:31:d7:c3:64:0e:99:cf:4d:ee:28:6d:0b:5f:ea:
         c8:f6:65:e8:91:af:19:0f:a5:0c:7a:ab:84:2b:31:82:34:7b:
         12:66:f2:0b:3b:f2:d2:4d:92:9d:11:83:f8:74:24:f8:a1:b7:
         18:3b:87:85:08:e6:53:e7:22:7d:39:cc:6f:36:ee:bf:0d:3f:
         91:63:23:28:f8:49:25:c7:cd:bb:8f:f8:cc:22:cd:2a:d6:1d:
         5a:79:b3:9b:16:ce:d3:87:cd:7e:75:10:0a:a4:23:30:82:c5:
         c5:be:d4:7c:1d:cf:d5:3c:51:21:f9:7c:6f:73:5c:d3:d7:71:
         a9:1b:2a:f5:86:08:08:4b:62:d0:22:5a:2e:b4:e5:59:66:f3:
         03:87:1f:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9ywbcv6ISoyURNJP9IPRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMTk3NThhMDg3ODc2ODE2ZGMxOTM2MWVhZjFlOTQxMmRl
NzNmODYwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTdhMzY0ZjljMDYzNjc2MzZlODkxOTQwZjg5MWQ3NzZhMmE3ZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr9i5iRxtkrJ7FabC2m5aBQLDJBq
TxpAJ/hr3yFZixjyE/wPcASideNrouj/z+8leQ6AHJZrA++/ALdQD8/U0+PLgoXS
LdJhZW9g4jIsQDqUpDhUsIcQ6xJ5oMIH1Ew/MB5L98vW0++l6qKxTqX4vFZC1sof
9d1qZJYNBOcyrUWSb5Rmx4Gg0q0Qe2ZNJWDE5TW86ldUyH1u/Y6FuJuNU60RB21j
vBdwUJYAS6vGFnzenfHK4rXqTbcRV7G2xB3WqIIivm6Fg9eZ5I5GQCA3RpG1c7sJ
cKWpBjFo2ddQSF9FfJF000+KUxZtoycR5GWJxbfDdtbgBXPfNnxHYurF1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP56Nk+cBjZ2NuiRlA+JHXdqKn4pMB8GA1UdIwQY
MBaAFJsZdYoIeHaBbcGTYerx6UEt5z+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9iYTZmM2UtZTk1Yi00OGQyLTg0MTkt
NDEzZGE2NjdhOGJlLzEvX25vMlQ1d0dOblkyNkpHVUQ0a2RkMm9xZmlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9iYTZmM2UtZTk1Yi00OGQyLTg0MTktNDEzZGE2NjdhOGJl
LzEvbXhsMWlnaDRkb0Z0d1pOaDZ2SHBRUzNuUDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZYTMA0G
CSqGSIb3DQEBCwUAA4IBAQB2wnQYflFSlcpIzYL88dn8MplGfHwhMw/+iIPFdaAB
tGQY1y20ANWbYIq7NTEt7uPs+bkcNqqQfvoREAuKoBxNiXvmaECr9PmlCYxMOP5K
QLvMMtwzuG2LZofK60qTynVDbUPr/P9LmsKDcC1Rpz3jMdfDZA6Zz03uKG0LX+rI
9mXoka8ZD6UMequEKzGCNHsSZvILO/LSTZKdEYP4dCT4obcYO4eFCOZT5yJ9Ocxv
Nu6/DT+RYyMo+Eklx827j/jMIs0q1h1aebObFs7Th81+dRAKpCMwgsXFvtR8Hc/V
PFEh+Xxvc1zT13GpGyr1hggIS2LQIloutOVZZvMDhx9a
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:07:24 2026 by rpki-client