This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/sq8rzyi0UVog1iS5Ju1CZc-6dl0.roa
File:                     sq8rzyi0UVog1iS5Ju1CZc-6dl0.roa (raw, json)
Hash identifier:          hTNSZci/jvQbgI5g6zcbraZud5VHWLa8WEC2pVISMYE=
Subject key identifier:   B2:AF:2B:CF:28:B4:51:5A:20:D6:24:B9:26:ED:42:65:CF:BA:76:5D
Certificate issuer:       /CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Certificate serial:       019B7834B6FF0F7DD43FA2FA4DED2C5D65E0
Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/sq8rzyi0UVog1iS5Ju1CZc-6dl0.roa
Signing time:             Thu 01 Jan 2026 06:17:59 +0000
ROA not before:           Thu 01 Jan 2026 06:17:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47692
IP address blocks:        193.105.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:b6:ff:0f:7d:d4:3f:a2:fa:4d:ed:2c:5d:65:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d
        Validity
            Not Before: Jan  1 06:17:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b2af2bcf28b4515a20d624b926ed4265cfba765d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1c:32:35:fd:a0:04:ed:a8:fa:78:63:f8:7d:
                    82:f3:0a:d1:2e:4c:95:a0:4d:52:fc:72:33:58:21:
                    7f:e1:24:97:cd:98:2d:70:b9:e3:8a:64:5c:e8:49:
                    0b:c3:1a:84:62:41:47:9d:98:d9:e0:c4:8e:09:c0:
                    01:b1:b6:2f:2b:95:ae:70:c9:3b:97:ea:3a:6d:95:
                    9a:4b:8d:98:9d:13:8a:c6:64:52:e4:36:a1:0a:81:
                    fa:24:6a:e0:bb:4f:a9:39:eb:b6:7d:0d:4b:f7:a3:
                    c8:8f:dd:0c:53:70:e4:dc:cf:c2:60:4c:10:39:4b:
                    b2:b2:ef:08:f7:f3:05:9f:b2:4d:c3:4d:87:aa:cd:
                    a5:06:5c:db:69:91:f5:24:db:26:0f:79:ec:04:08:
                    d5:4b:ca:fc:5f:a6:d1:f9:33:86:62:fa:15:28:31:
                    00:16:0b:1f:84:6c:00:89:d2:e1:89:b3:6f:52:b3:
                    e5:82:7a:9b:e8:6d:6f:6b:4d:8e:e1:7e:c8:28:f1:
                    e0:7c:ef:ce:f9:77:f8:1c:f8:8d:24:9d:b2:00:45:
                    8e:3a:01:ab:54:45:11:c7:14:c0:2c:97:47:9b:42:
                    c9:7f:72:12:f7:f4:19:a9:e6:d6:39:c7:f3:03:44:
                    70:27:bd:67:7a:01:93:1d:56:10:43:74:e2:a7:42:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AF:2B:CF:28:B4:51:5A:20:D6:24:B9:26:ED:42:65:CF:BA:76:5D
            X509v3 Authority Key Identifier:
                keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/sq8rzyi0UVog1iS5Ju1CZc-6dl0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:65:f4:8c:e1:b3:7a:4e:fd:80:aa:bf:dc:9e:e6:e3:2d:ea:
         7c:bc:20:6e:1b:1b:fa:ec:06:71:ad:3e:56:94:66:57:d6:d0:
         a2:79:85:77:7d:7f:d0:ff:fd:49:50:3b:2f:34:be:00:73:e7:
         1e:91:5a:71:11:4b:8a:a7:43:81:bc:a4:62:76:eb:86:0b:82:
         37:e8:54:85:28:5b:36:36:14:d1:e0:97:16:f6:03:ba:19:05:
         69:45:65:a3:38:a7:cc:cb:1f:e7:37:80:15:b2:4a:17:80:ee:
         8d:3a:7c:6f:dd:15:22:2c:5c:a1:47:46:63:5e:ed:22:3f:0b:
         5b:fb:85:51:45:81:35:68:22:66:da:81:11:bc:37:74:c1:d9:
         5d:61:74:13:f9:78:58:0e:db:2f:9a:28:aa:50:e9:43:a7:f0:
         11:6f:4f:fc:3d:e3:6b:50:11:05:31:d7:53:8d:02:e1:d9:2a:
         45:d5:6b:4b:64:0a:2f:cd:4d:75:44:8d:0a:2e:0c:b3:a1:ef:
         f8:8a:b2:96:4c:46:5f:76:6c:25:f6:83:e6:a6:0e:32:0b:bc:
         a3:8b:43:de:c1:e3:3c:ca:7d:f7:84:ed:84:5f:dc:49:a1:d1:
         b9:cb:18:f5:bb:d3:40:de:c3:0d:d5:71:1f:f2:a3:a2:1d:f4:
         93:c3:aa:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NLb/D33UP6L6Te0sXWXgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjY0OGYxMjkwZDQ0NzFiY2RiNTBiODJiZTRlZDkzMjAw
MzA5NGQwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmFmMmJjZjI4YjQ1MTVhMjBkNjI0YjkyNmVkNDI2NWNmYmE3NjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RwyNf2gBO2o+nhj+H2C8wrRLkyV
oE1S/HIzWCF/4SSXzZgtcLnjimRc6EkLwxqEYkFHnZjZ4MSOCcABsbYvK5WucMk7
l+o6bZWaS42YnROKxmRS5DahCoH6JGrgu0+pOeu2fQ1L96PIj90MU3Dk3M/CYEwQ
OUuysu8I9/MFn7JNw02Hqs2lBlzbaZH1JNsmD3nsBAjVS8r8X6bR+TOGYvoVKDEA
FgsfhGwAidLhibNvUrPlgnqb6G1va02O4X7IKPHgfO/O+Xf4HPiNJJ2yAEWOOgGr
VEURxxTALJdHm0LJf3IS9/QZqebWOcfzA0RwJ71negGTHVYQQ3Tip0LuAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLKvK88otFFaINYkuSbtQmXPunZdMB8GA1UdIwQY
MBaAFF4mSPEpDURxvNtQuCvk7ZMgAwlNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iYzRjNTMtMGRiNS00ZjExLTg0ZjYt
ZjU1ZmNkZjk3ODQ2LzEvc3E4cnp5aTBVVm9nMWlTNUp1MUNaYy02ZGwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iYzRjNTMtMGRiNS00ZjExLTg0ZjYtZjU1ZmNkZjk3ODQ2
LzEvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWm1MA0G
CSqGSIb3DQEBCwUAA4IBAQAvZfSM4bN6Tv2Aqr/cnubjLep8vCBuGxv67AZxrT5W
lGZX1tCieYV3fX/Q//1JUDsvNL4Ac+cekVpxEUuKp0OBvKRiduuGC4I36FSFKFs2
NhTR4JcW9gO6GQVpRWWjOKfMyx/nN4AVskoXgO6NOnxv3RUiLFyhR0ZjXu0iPwtb
+4VRRYE1aCJm2oERvDd0wdldYXQT+XhYDtsvmiiqUOlDp/ARb0/8PeNrUBEFMddT
jQLh2SpF1WtLZAovzU11RI0KLgyzoe/4irKWTEZfdmwl9oPmpg4yC7yji0PeweM8
yn33hO2EX9xJodG5yxj1u9NA3sMN1XEf8qOiHfSTw6r+
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:09:16 2026 by rpki-client