This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/gT51eBmH7VwiQiKc39LDpmUrWZk.roa
File:                     gT51eBmH7VwiQiKc39LDpmUrWZk.roa (raw, json)
Hash identifier:          FAXWHOz3lVHci6J7wLN3Cpw/RKiWjTYfUoTshVCcZgc=
Subject key identifier:   81:3E:75:78:19:87:ED:5C:22:42:22:9C:DF:D2:C3:A6:65:2B:59:99
Certificate issuer:       /CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
Certificate serial:       019B7834B0BA7984149B927D03E13ADE8ED5
Authority key identifier: 7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/gT51eBmH7VwiQiKc39LDpmUrWZk.roa
Signing time:             Thu 01 Jan 2026 06:17:57 +0000
ROA not before:           Thu 01 Jan 2026 06:17:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50737
IP address blocks:        193.105.111.0/24 maxlen: 24
                          2a03:4740::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:b0:ba:79:84:14:9b:92:7d:03:e1:3a:de:8e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff1b81cfe6abb118e97e0325b662eaf984f2f6a
        Validity
            Not Before: Jan  1 06:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=813e75781987ed5c2242229cdfd2c3a6652b5999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:90:52:8e:43:b3:7d:68:65:bd:2a:d2:6f:89:
                    01:1b:3f:22:f4:5c:2b:b4:69:97:e9:ac:3f:63:51:
                    da:9d:4d:a3:09:6e:ab:5b:3b:ff:94:16:6a:d0:1e:
                    95:21:be:bc:c8:4d:32:9b:cf:71:7b:36:bc:05:b5:
                    5a:6b:53:dd:53:59:51:6e:c7:07:29:23:63:b5:02:
                    4e:c2:ab:80:a5:74:ed:2f:67:e7:1a:d3:4a:e6:c5:
                    80:f2:20:df:57:0d:fb:d5:33:3d:3c:b3:e7:35:e4:
                    9e:0f:25:f5:3f:1e:7b:ec:e2:5d:ea:5a:e3:59:52:
                    24:3a:f9:55:6d:10:86:f6:bc:c6:2c:51:d9:cc:e8:
                    01:b6:af:e1:16:97:20:c6:cc:ba:e0:26:8f:64:8b:
                    da:1d:b7:12:72:71:bc:e8:ac:1e:43:e3:02:d8:17:
                    6f:25:6c:18:b3:49:a9:b2:b4:b1:87:c1:2a:63:98:
                    0b:58:07:c7:fa:35:af:84:f2:2b:f5:e5:a9:34:40:
                    be:ab:c8:65:9d:ec:83:58:de:7b:80:ae:a9:4e:c6:
                    de:83:24:f9:49:0f:23:b7:5c:15:09:ba:70:50:ec:
                    d7:70:a6:07:3e:e7:f2:56:f8:f4:96:e6:2e:e1:90:
                    08:33:ac:a2:12:4b:e3:bc:fb:23:05:f8:ae:69:b0:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3E:75:78:19:87:ED:5C:22:42:22:9C:DF:D2:C3:A6:65:2B:59:99
            X509v3 Authority Key Identifier:
                keyid:7F:F1:B8:1C:FE:6A:BB:11:8E:97:E0:32:5B:66:2E:AF:98:4F:2F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_G4HP5quxGOl-AyW2Yur5hPL2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/gT51eBmH7VwiQiKc39LDpmUrWZk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/186a18-5d7f-43ed-b06a-cea7eb350537/1/f_G4HP5quxGOl-AyW2Yur5hPL2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.111.0/24
                IPv6:
                  2a03:4740::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:a0:7d:81:f9:9b:54:28:b9:32:84:0e:cf:5a:e1:b3:81:10:
         42:ea:e8:c6:41:a2:cb:a2:6d:b1:40:f2:c4:55:84:1c:da:95:
         6e:db:ea:e0:ba:11:51:42:bb:aa:7e:83:1e:c6:b4:fc:45:78:
         93:f7:e4:55:f5:6a:b8:dd:78:cd:67:45:51:ca:0b:9d:7c:aa:
         01:76:53:16:2a:5a:7c:09:1e:ab:a8:35:ea:7c:27:53:2b:9d:
         d4:58:92:f2:16:78:4d:b5:ef:a2:12:c0:77:96:61:74:4c:cf:
         40:1d:91:23:4b:ac:b7:37:16:46:2f:9a:4e:d1:37:95:90:c5:
         09:fa:71:8b:d8:7e:36:d1:24:94:a4:fa:85:17:fe:2f:0d:b3:
         6c:b7:58:b8:4e:62:17:84:56:61:26:8a:e5:f2:d7:61:94:55:
         5f:e2:5e:07:b4:84:95:d3:c3:e4:df:46:53:87:d0:c2:f9:9f:
         e0:fa:82:28:ec:e4:ce:03:35:1e:df:f8:11:da:4d:29:7e:ee:
         c5:f5:ac:99:c5:c0:31:c1:b9:b0:f7:40:b4:36:c8:40:81:f4:
         21:31:21:d0:55:57:28:f5:fe:fb:ac:06:06:f4:9f:83:e7:27:
         0d:77:17:05:28:d2:50:85:40:bb:90:67:b2:f8:a8:9c:fd:55:
         26:ec:0c:f2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt4NLC6eYQUm5J9A+E63o7VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZjFiODFjZmU2YWJiMTE4ZTk3ZTAzMjViNjYyZWFmOTg0
ZjJmNmEwHhcNMjYwMTAxMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTNlNzU3ODE5ODdlZDVjMjI0MjIyOWNkZmQyYzNhNjY1MmI1OTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JBSjkOzfWhlvSrSb4kBGz8i9Fwr
tGmX6aw/Y1HanU2jCW6rWzv/lBZq0B6VIb68yE0ym89xeza8BbVaa1PdU1lRbscH
KSNjtQJOwquApXTtL2fnGtNK5sWA8iDfVw371TM9PLPnNeSeDyX1Px577OJd6lrj
WVIkOvlVbRCG9rzGLFHZzOgBtq/hFpcgxsy64CaPZIvaHbcScnG86KweQ+MC2Bdv
JWwYs0mpsrSxh8EqY5gLWAfH+jWvhPIr9eWpNEC+q8hlneyDWN57gK6pTsbegyT5
SQ8jt1wVCbpwUOzXcKYHPufyVvj0luYu4ZAIM6yiEkvjvPsjBfiuabCZ1wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIE+dXgZh+1cIkIinN/Sw6ZlK1mZMB8GA1UdIwQY
MBaAFH/xuBz+arsRjpfgMltmLq+YTy9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZl9HNEhQNXF1eEdPbC1BeVcyWXVyNWhQTDJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xODZhMTgtNWQ3Zi00M2VkLWIwNmEt
Y2VhN2ViMzUwNTM3LzEvZ1Q1MWVCbUg3VndpUWlLYzM5TERwbVVyV1prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xODZhMTgtNWQ3Zi00M2VkLWIwNmEtY2VhN2ViMzUwNTM3
LzEvZl9HNEhQNXF1eEdPbC1BeVcyWXVyNWhQTDJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwWlvMA0E
AgACMAcDBQAqA0dAMA0GCSqGSIb3DQEBCwUAA4IBAQCJoH2B+ZtUKLkyhA7PWuGz
gRBC6ujGQaLLom2xQPLEVYQc2pVu2+rguhFRQruqfoMexrT8RXiT9+RV9Wq43XjN
Z0VRygudfKoBdlMWKlp8CR6rqDXqfCdTK53UWJLyFnhNte+iEsB3lmF0TM9AHZEj
S6y3NxZGL5pO0TeVkMUJ+nGL2H420SSUpPqFF/4vDbNst1i4TmIXhFZhJorl8tdh
lFVf4l4HtISV08Pk30ZTh9DC+Z/g+oIo7OTOAzUe3/gR2k0pfu7F9ayZxcAxwbmw
90C0NshAgfQhMSHQVVco9f77rAYG9J+D5ycNdxcFKNJQhUC7kGey+Kic/VUm7Azy
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:39:49 2026 by rpki-client