This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/RvyFZGbQbeijXMu4H6shnCgImmo.roa
File:                     RvyFZGbQbeijXMu4H6shnCgImmo.roa (raw, json)
Hash identifier:          DYIYWvmC8bzZdyJiE46TNQl9vdrwG3VWwrzYZPcGmag=
Subject key identifier:   46:FC:85:64:66:D0:6D:E8:A3:5C:CB:B8:1F:AB:21:9C:28:08:9A:6A
Certificate issuer:       /CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Certificate serial:       019B7758CE1D715E20118383036BFF99A347
Authority key identifier: E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/RvyFZGbQbeijXMu4H6shnCgImmo.roa
Signing time:             Thu 01 Jan 2026 02:17:47 +0000
ROA not before:           Thu 01 Jan 2026 02:17:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204541
IP address blocks:        185.239.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:ce:1d:71:5e:20:11:83:83:03:6b:ff:99:a3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
        Validity
            Not Before: Jan  1 02:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=46fc856466d06de8a35ccbb81fab219c28089a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:55:20:d9:04:4c:0a:83:75:f6:25:83:ee:38:
                    1b:3c:b3:f3:11:4f:9f:dd:9b:50:d5:f9:55:01:f7:
                    b8:f6:9a:47:72:e6:b7:55:e3:9a:e5:63:6d:b5:b7:
                    e7:6a:9a:9c:6a:3f:4e:31:e1:90:e8:79:87:4e:2f:
                    12:85:b3:29:3b:11:42:07:33:99:e1:2c:5d:eb:d8:
                    8e:60:ff:41:ae:33:f0:6a:26:dc:e9:ab:0b:d5:12:
                    41:26:cb:0a:5c:08:f6:70:35:10:35:3a:08:ce:ce:
                    5e:5d:df:4d:42:0c:77:34:54:ab:2f:16:ce:6c:01:
                    76:1c:b5:51:b4:53:50:61:39:45:0e:d1:67:0f:5d:
                    6d:11:bb:f7:94:7c:5e:72:37:b5:b1:cc:1d:0d:95:
                    98:ee:be:7d:fb:5c:ae:f1:cf:3a:12:6b:e6:6e:17:
                    2a:1f:4e:78:96:99:27:c6:22:05:e3:5e:c7:31:a4:
                    3a:33:b6:c4:97:e0:70:7f:56:07:4c:f7:0a:f6:8b:
                    4b:67:f2:79:73:8e:93:91:1e:f3:cd:e2:30:48:7e:
                    f4:88:ca:80:d8:85:2b:32:2e:83:1b:cf:27:c0:6b:
                    f3:d2:34:12:7e:81:c6:c3:2d:ee:e1:8d:3f:1d:b6:
                    37:98:a7:ee:73:9c:fe:c7:cf:83:f7:12:6b:12:c6:
                    b0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FC:85:64:66:D0:6D:E8:A3:5C:CB:B8:1F:AB:21:9C:28:08:9A:6A
            X509v3 Authority Key Identifier:
                keyid:E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/RvyFZGbQbeijXMu4H6shnCgImmo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.239.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:16:8c:bb:2b:c3:4c:a8:8d:24:92:a5:d8:1a:ab:f5:c0:96:
         68:04:01:55:de:e4:11:25:8c:ce:f1:c2:26:3b:63:b7:46:93:
         82:3f:aa:b0:30:5d:61:d6:a3:b9:65:af:c7:42:26:8c:d4:00:
         e8:0d:1f:fb:28:a3:bb:9e:0b:2c:df:f1:bc:39:b1:25:6d:e2:
         26:43:86:0a:21:22:66:f5:fb:7c:be:e8:1b:cf:6d:f6:63:72:
         09:11:ad:71:e4:fd:5b:8c:01:ab:bd:32:6c:8b:a3:73:8d:ff:
         03:22:96:cd:fa:3a:46:a2:ed:7f:9d:79:dd:3d:c8:b1:8e:10:
         3a:d3:19:21:67:0a:24:f5:83:f8:46:63:a1:75:a0:f3:77:38:
         cf:ea:f2:35:78:64:76:25:a7:2e:60:e3:46:d9:3b:33:92:da:
         a1:43:89:4d:6d:67:07:f1:12:87:a8:e9:db:bc:7b:e0:8d:89:
         2c:a6:56:5b:8c:ed:d2:b9:3c:e0:51:52:ee:eb:6d:d5:2a:12:
         78:4a:a2:bc:e9:ce:9a:e6:15:27:a2:61:f4:cb:10:60:74:05:
         03:67:5c:91:1f:56:48:cc:3f:29:e1:7f:39:b2:78:84:16:63:
         3d:f0:8b:83:68:9c:06:50:6c:a0:df:06:18:ec:48:d3:2e:82:
         ea:ed:a3:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WM4dcV4gEYODA2v/maNHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NzdiYzhlM2VjMjUwY2U4NWZiOTA5MTNjMmM0OTA1MTA0
M2ViYzUwHhcNMjYwMTAxMDIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmZjODU2NDY2ZDA2ZGU4YTM1Y2NiYjgxZmFiMjE5YzI4MDg5YTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FUg2QRMCoN19iWD7jgbPLPzEU+f
3ZtQ1flVAfe49ppHcua3VeOa5WNttbfnapqcaj9OMeGQ6HmHTi8ShbMpOxFCBzOZ
4Sxd69iOYP9BrjPwaibc6asL1RJBJssKXAj2cDUQNToIzs5eXd9NQgx3NFSrLxbO
bAF2HLVRtFNQYTlFDtFnD11tEbv3lHxecje1scwdDZWY7r59+1yu8c86Emvmbhcq
H054lpknxiIF417HMaQ6M7bEl+Bwf1YHTPcK9otLZ/J5c46TkR7zzeIwSH70iMqA
2IUrMi6DG88nwGvz0jQSfoHGwy3u4Y0/HbY3mKfuc5z+x8+D9xJrEsawgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEb8hWRm0G3oo1zLuB+rIZwoCJpqMB8GA1UdIwQY
MBaAFOd3vI4+wlDOhfuQkTwsSQUQQ+vFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWIt
ZmFlMGU1ZDJlZWJmLzEvUnZ5RlpHYlFiZWlqWE11NEg2c2huQ2dJbW1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWItZmFlMGU1ZDJlZWJm
LzEvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue+5MA0G
CSqGSIb3DQEBCwUAA4IBAQBiFoy7K8NMqI0kkqXYGqv1wJZoBAFV3uQRJYzO8cIm
O2O3RpOCP6qwMF1h1qO5Za/HQiaM1ADoDR/7KKO7ngss3/G8ObElbeImQ4YKISJm
9ft8vugbz232Y3IJEa1x5P1bjAGrvTJsi6Nzjf8DIpbN+jpGou1/nXndPcixjhA6
0xkhZwok9YP4RmOhdaDzdzjP6vI1eGR2JacuYONG2TszktqhQ4lNbWcH8RKHqOnb
vHvgjYksplZbjO3SuTzgUVLu623VKhJ4SqK86c6a5hUnomH0yxBgdAUDZ1yRH1ZI
zD8p4X85sniEFmM98IuDaJwGUGyg3wYY7EjTLoLq7aPn
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:42:56 2026 by rpki-client