This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/Rbnn8vOqhEtpTSEQt713qR9tMnI.roa
File:                     Rbnn8vOqhEtpTSEQt713qR9tMnI.roa (raw, json)
Hash identifier:          qBesz6qk+N2ewTuXp6/Sp8ImseGY5f2ykMjdMftaW6U=
Subject key identifier:   45:B9:E7:F2:F3:AA:84:4B:69:4D:21:10:B7:BD:77:A9:1F:6D:32:72
Certificate issuer:       /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial:       019B7C7FC82456B1E554D0AB585C4BFBD8C1
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/Rbnn8vOqhEtpTSEQt713qR9tMnI.roa
Signing time:             Fri 02 Jan 2026 02:18:27 +0000
ROA not before:           Fri 02 Jan 2026 02:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197075
IP address blocks:        95.169.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:c8:24:56:b1:e5:54:d0:ab:58:5c:4b:fb:d8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
        Validity
            Not Before: Jan  2 02:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=45b9e7f2f3aa844b694d2110b7bd77a91f6d3272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:c6:b7:98:de:90:2c:ef:2b:bc:6c:de:9e:
                    6a:8e:56:c5:d3:74:d0:75:b2:ae:26:e8:cc:d0:0f:
                    cd:57:1b:43:bf:5d:0b:3c:40:42:6a:c2:fd:89:37:
                    f2:76:58:11:31:07:20:bb:cb:e2:55:de:ea:6d:32:
                    49:ab:80:fa:9e:ba:52:25:10:f8:56:d0:77:98:28:
                    5b:06:41:19:22:35:a6:5e:af:01:3d:45:18:c3:af:
                    12:fb:0f:fd:f2:44:e7:ce:09:87:7b:6e:35:89:70:
                    fd:6b:d5:3d:bb:13:db:39:c9:e8:a1:4d:69:03:c8:
                    34:3c:35:3b:0f:2e:8b:32:3c:81:ea:14:36:57:78:
                    65:9f:97:7c:1d:dc:d9:3b:86:38:4c:3c:c6:9c:90:
                    f0:64:a7:33:b2:e6:95:4b:ee:54:c6:38:ef:c8:6c:
                    15:8e:e5:78:29:a8:62:1b:27:64:26:7c:68:10:ff:
                    b0:2f:1f:a4:cf:25:5e:58:b7:07:ba:0e:4d:38:e6:
                    42:a5:96:fc:38:f6:f9:a8:6b:05:75:59:f5:33:24:
                    4d:6a:6b:ce:7c:64:d5:cf:fa:c5:b5:47:92:43:81:
                    40:3d:fc:15:6b:de:e3:a3:3e:bc:fe:ce:e4:a8:1b:
                    de:38:13:84:eb:3e:3d:a4:3d:55:cc:71:67:e3:7a:
                    99:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B9:E7:F2:F3:AA:84:4B:69:4D:21:10:B7:BD:77:A9:1F:6D:32:72
            X509v3 Authority Key Identifier:
                keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/Rbnn8vOqhEtpTSEQt713qR9tMnI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.169.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:ff:bc:3c:fa:88:83:ac:c7:ef:f6:cd:3c:5d:8b:62:11:d3:
         09:72:97:6a:f6:27:c0:af:ce:08:58:ed:10:5d:68:21:ba:5e:
         c2:aa:b8:86:e2:b2:18:bf:f4:dc:8e:a3:0c:4e:03:49:c3:07:
         63:73:cd:4a:fc:15:cf:6f:6b:fa:35:71:aa:1c:ba:e8:3a:78:
         a3:63:1e:e6:d9:89:2f:9a:73:35:3d:3b:c5:90:1b:f7:e0:09:
         1e:bd:fa:70:cf:1b:45:8a:1c:23:22:17:37:b7:78:ac:61:38:
         f2:1f:7a:e4:d7:54:28:0d:7f:4a:dd:b8:ab:0c:27:44:40:6b:
         a9:99:64:5f:38:18:93:c6:5e:83:b4:32:79:a8:c3:f7:d9:a8:
         95:df:45:e0:18:d4:d1:d5:d9:7e:fe:b3:24:2b:7b:00:08:85:
         16:9f:c4:bd:07:d3:f9:2c:4e:33:9d:0e:b8:29:fe:86:0e:5c:
         e5:2f:0b:c2:98:a2:7a:e5:b6:cd:20:60:73:07:06:e9:38:b7:
         43:04:26:91:0c:17:44:f0:78:02:f4:f1:a6:68:8a:21:a3:1f:
         bd:c5:0e:37:48:11:82:40:6e:eb:76:93:a2:08:db:07:f3:93:
         27:8f:e3:6b:f7:66:85:80:dc:cf:ec:f1:de:94:cd:3f:e0:8a:
         0a:62:95:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8f8gkVrHlVNCrWFxL+9jBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzZlOTg1NWY5YmNhMzAxN2ExMDEzN2I0NDNlZThjNTI4
Y2E5NTIwHhcNMjYwMTAyMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWI5ZTdmMmYzYWE4NDRiNjk0ZDIxMTBiN2JkNzdhOTFmNmQzMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwDGt5jekCzvK7xs3p5qjlbF03TQ
dbKuJujM0A/NVxtDv10LPEBCasL9iTfydlgRMQcgu8viVd7qbTJJq4D6nrpSJRD4
VtB3mChbBkEZIjWmXq8BPUUYw68S+w/98kTnzgmHe241iXD9a9U9uxPbOcnooU1p
A8g0PDU7Dy6LMjyB6hQ2V3hln5d8HdzZO4Y4TDzGnJDwZKczsuaVS+5UxjjvyGwV
juV4KahiGydkJnxoEP+wLx+kzyVeWLcHug5NOOZCpZb8OPb5qGsFdVn1MyRNamvO
fGTVz/rFtUeSQ4FAPfwVa97joz68/s7kqBveOBOE6z49pD1VzHFn43qZAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEW55/LzqoRLaU0hELe9d6kfbTJyMB8GA1UdIwQY
MBaAFDB26YVfm8owF6EBN7RD7oxSjKlSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lMjUyNjktY2ZjOS00ODQ4LWIxZTUt
N2Y3ODZiYjM0MzQ0LzEvUmJubjh2T3FoRXRwVFNFUXQ3MTNxUjl0TW5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lMjUyNjktY2ZjOS00ODQ4LWIxZTUtN2Y3ODZiYjM0MzQ0
LzEvTUhicGhWLWJ5akFYb1FFM3RFUHVqRktNcVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX6lUMA0G
CSqGSIb3DQEBCwUAA4IBAQBn/7w8+oiDrMfv9s08XYtiEdMJcpdq9ifAr84IWO0Q
XWghul7CqriG4rIYv/TcjqMMTgNJwwdjc81K/BXPb2v6NXGqHLroOnijYx7m2Ykv
mnM1PTvFkBv34AkevfpwzxtFihwjIhc3t3isYTjyH3rk11QoDX9K3birDCdEQGup
mWRfOBiTxl6DtDJ5qMP32aiV30XgGNTR1dl+/rMkK3sACIUWn8S9B9P5LE4znQ64
Kf6GDlzlLwvCmKJ65bbNIGBzBwbpOLdDBCaRDBdE8HgC9PGmaIohox+9xQ43SBGC
QG7rdpOiCNsH85Mnj+Nr92aFgNzP7PHelM0/4IoKYpXW
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:32:35 2026 by rpki-client