This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/bibLXd2QMXWhIPN351uwe5pif5E.roa
File:                     bibLXd2QMXWhIPN351uwe5pif5E.roa (raw, json)
Hash identifier:          EI1f720U8hF45F4c42GggfIC9rfQowEl7G1EqOJ9eT4=
Subject key identifier:   6E:26:CB:5D:DD:90:31:75:A1:20:F3:77:E7:5B:B0:7B:9A:62:7F:91
Certificate issuer:       /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial:       019B7F832BF8B21029183E750DE4689648D1
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/bibLXd2QMXWhIPN351uwe5pif5E.roa
Signing time:             Fri 02 Jan 2026 16:21:01 +0000
ROA not before:           Fri 02 Jan 2026 16:21:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     400529
IP address blocks:        80.244.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:2b:f8:b2:10:29:18:3e:75:0d:e4:68:96:48:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
        Validity
            Not Before: Jan  2 16:21:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6e26cb5ddd903175a120f377e75bb07b9a627f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:41:d3:21:1e:81:e4:c5:dc:38:37:a3:c3:26:
                    cb:1c:18:d7:cd:19:7a:3b:6b:e8:76:a0:2b:1f:60:
                    f7:ae:28:3b:27:20:3e:e1:c0:08:e7:dc:52:5a:f6:
                    fa:d1:d9:c5:0e:48:5e:4b:9c:59:9b:11:e5:95:11:
                    39:c5:64:05:b5:65:5f:6b:7f:78:43:82:b4:cf:3e:
                    05:6a:4f:c4:53:b8:d8:e7:bb:8f:96:55:60:fb:03:
                    35:70:16:d2:0f:59:a1:81:be:89:45:92:2c:0d:f6:
                    cf:2d:00:52:0f:71:f3:2c:d5:1d:56:1b:49:1b:1f:
                    1e:58:2f:4f:f6:f9:5a:ba:a9:eb:b0:35:8b:4c:25:
                    b8:12:f5:12:f9:c3:10:16:03:84:25:45:ff:eb:dd:
                    02:a7:c2:52:08:6c:fa:1c:0c:25:6f:aa:01:c2:ec:
                    d1:63:67:51:bc:24:ce:66:d2:58:5c:69:f5:54:d7:
                    aa:f5:a6:8e:0a:27:94:89:a3:61:42:61:6e:4f:4e:
                    a9:1d:54:55:6a:a7:ff:df:b9:df:81:cb:b6:67:a5:
                    f9:ab:ad:22:1a:45:65:84:e1:66:19:28:cb:3e:74:
                    a4:fe:d4:60:6e:1d:5d:ad:1e:38:28:0a:15:07:44:
                    fa:7b:79:ec:f8:0d:cd:1e:cc:6e:a7:f6:90:b1:69:
                    38:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:26:CB:5D:DD:90:31:75:A1:20:F3:77:E7:5B:B0:7B:9A:62:7F:91
            X509v3 Authority Key Identifier:
                keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/bibLXd2QMXWhIPN351uwe5pif5E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.244.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:01:47:ef:19:f9:ff:48:28:70:68:5b:92:58:1f:bd:02:0e:
         99:1e:6b:ea:de:62:3b:c8:d6:c5:65:22:45:52:ec:9b:51:06:
         b2:ee:ec:0b:b4:78:6f:c5:22:b8:ad:60:90:c0:25:3b:3a:ea:
         47:35:cd:c0:50:16:93:17:5b:f5:88:f2:42:2e:6a:4a:ac:c4:
         c8:42:54:eb:75:57:bc:f0:2f:01:b6:12:51:7f:75:d2:dd:b7:
         0f:6d:9b:c0:f7:b9:91:3e:fc:16:db:e5:fa:34:f7:39:86:91:
         30:3e:30:aa:5f:26:45:08:f7:50:bb:78:c0:01:d9:fc:dd:42:
         1c:8a:9f:2a:2a:1a:da:f3:5b:0f:87:39:dc:45:b9:3b:16:b7:
         6b:ef:1b:ca:90:67:2d:37:bf:89:76:c4:3a:47:6a:01:01:ea:
         10:0b:94:f6:ad:f4:d7:69:60:40:cc:60:9d:b8:45:cd:59:56:
         81:26:b1:64:9d:f8:dc:d2:7d:8f:23:d9:cf:57:0e:e5:98:27:
         5e:20:87:ee:06:be:f5:f9:af:2a:f3:84:83:9e:a3:da:21:a5:
         88:7e:58:04:62:0b:b3:c0:78:76:31:7f:3d:1e:16:04:21:dd:
         43:19:47:8b:55:75:f2:81:dd:84:be:78:06:60:00:52:90:d5:
         f5:a5:72:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/gyv4shApGD51DeRolkjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZGNiOGUxNDEwYzhjZDE4ZTUyNDU3ZjdlMWE5NTgwZDZk
YTUyMjYwHhcNMjYwMTAyMTYyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTI2Y2I1ZGRkOTAzMTc1YTEyMGYzNzdlNzViYjA3YjlhNjI3ZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30HTIR6B5MXcODejwybLHBjXzRl6
O2vodqArH2D3rig7JyA+4cAI59xSWvb60dnFDkheS5xZmxHllRE5xWQFtWVfa394
Q4K0zz4Fak/EU7jY57uPllVg+wM1cBbSD1mhgb6JRZIsDfbPLQBSD3HzLNUdVhtJ
Gx8eWC9P9vlauqnrsDWLTCW4EvUS+cMQFgOEJUX/690Cp8JSCGz6HAwlb6oBwuzR
Y2dRvCTOZtJYXGn1VNeq9aaOCieUiaNhQmFuT06pHVRVaqf/37nfgcu2Z6X5q60i
GkVlhOFmGSjLPnSk/tRgbh1drR44KAoVB0T6e3ns+A3NHsxup/aQsWk4eQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG4my13dkDF1oSDzd+dbsHuaYn+RMB8GA1UdIwQY
MBaAFBLcuOFBDIzRjlJFf34alYDW2lImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXR5NDRVRU1qTkdPVWtWX2ZocVZnTmJhVWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jM2MzYzQtMjdhMS00Yzc5LWI3ZGUt
Yjk0MDNmNjRiYTYwLzEvYmliTFhkMlFNWFdoSVBOMzUxdXdlNXBpZjVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9jM2MzYzQtMjdhMS00Yzc5LWI3ZGUtYjk0MDNmNjRiYTYw
LzEvRXR5NDRVRU1qTkdPVWtWX2ZocVZnTmJhVWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPQMMA0G
CSqGSIb3DQEBCwUAA4IBAQA1AUfvGfn/SChwaFuSWB+9Ag6ZHmvq3mI7yNbFZSJF
UuybUQay7uwLtHhvxSK4rWCQwCU7OupHNc3AUBaTF1v1iPJCLmpKrMTIQlTrdVe8
8C8BthJRf3XS3bcPbZvA97mRPvwW2+X6NPc5hpEwPjCqXyZFCPdQu3jAAdn83UIc
ip8qKhra81sPhzncRbk7Frdr7xvKkGctN7+JdsQ6R2oBAeoQC5T2rfTXaWBAzGCd
uEXNWVaBJrFknfjc0n2PI9nPVw7lmCdeIIfuBr71+a8q84SDnqPaIaWIflgEYguz
wHh2MX89HhYEId1DGUeLVXXygd2EvngGYABSkNX1pXJW
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:35:59 2026 by rpki-client