This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/9v-l33jCMl7rwdu0oXnlRnQEqBs.roa
File:                     9v-l33jCMl7rwdu0oXnlRnQEqBs.roa (raw, json)
Hash identifier:          2jKRrL+e+UImVS2cPwGRw3x8ntBeAdP6i/ZHh0EdqQQ=
Subject key identifier:   F6:FF:A5:DF:78:C2:32:5E:EB:C1:DB:B4:A1:79:E5:46:74:04:A8:1B
Certificate issuer:       /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial:       019B77C703B852F7CA21EF8AF9F3CDACDDE1
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/9v-l33jCMl7rwdu0oXnlRnQEqBs.roa
Signing time:             Thu 01 Jan 2026 04:18:09 +0000
ROA not before:           Thu 01 Jan 2026 04:18:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209564
IP address blocks:        212.108.184.0/21 maxlen: 24
                          2a02:358:1000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:03:b8:52:f7:ca:21:ef:8a:f9:f3:cd:ac:dd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
        Validity
            Not Before: Jan  1 04:18:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f6ffa5df78c2325eebc1dbb4a179e5467404a81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:37:0f:35:64:2c:45:16:ef:71:87:24:a3:
                    8c:1c:76:4d:8b:fb:23:a6:d3:83:f9:75:14:59:43:
                    18:c8:46:f0:b7:3d:3b:8f:15:de:e1:d9:09:3e:b9:
                    47:82:8b:de:a6:d8:e7:b9:2c:eb:7b:f9:d3:f6:63:
                    1e:94:2a:53:ca:4e:dd:8d:7c:b6:37:3a:77:01:8f:
                    4b:92:21:a4:a6:a1:38:a7:3b:ae:c3:80:66:27:ed:
                    a7:23:85:4d:f7:fc:c1:d6:83:5c:b3:15:12:d9:12:
                    69:c1:97:56:f1:ad:ce:4c:01:b6:c0:4b:bb:07:08:
                    44:5a:bb:28:0d:64:30:a2:ad:11:fd:c8:46:37:1c:
                    fb:5f:a3:16:d9:43:ad:74:60:ee:96:7d:fe:9a:3a:
                    db:0e:f2:ea:dd:28:bf:6a:de:b8:0f:76:3a:07:99:
                    28:60:23:6e:07:58:82:de:48:89:29:b2:98:48:e3:
                    1a:ac:82:12:ff:43:3d:e5:c7:b9:44:b0:f5:38:e9:
                    f4:d9:fb:a4:f9:d1:86:a7:a5:6b:65:72:36:00:ab:
                    b1:9c:30:9e:1b:ff:ed:70:a4:a7:89:8e:37:49:90:
                    84:aa:2a:24:a5:0d:fb:85:fd:61:7b:9e:8a:64:c5:
                    fc:d8:e1:20:bb:c2:eb:98:77:50:e0:90:96:56:6b:
                    29:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FF:A5:DF:78:C2:32:5E:EB:C1:DB:B4:A1:79:E5:46:74:04:A8:1B
            X509v3 Authority Key Identifier:
                keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/9v-l33jCMl7rwdu0oXnlRnQEqBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.108.184.0/21
                IPv6:
                  2a02:358:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         87:82:f9:33:c2:5b:03:b3:26:ff:d1:ab:0f:ec:9e:b7:3e:e7:
         b8:a0:24:4d:c5:ae:df:31:27:68:01:51:27:ca:35:da:2b:0a:
         01:eb:93:51:fd:35:da:48:23:c0:7f:69:5c:18:35:b7:0d:f8:
         d3:78:b3:45:89:94:32:ec:fc:48:9b:2a:0e:f2:aa:5a:bb:0e:
         12:58:eb:48:8f:14:49:27:78:74:21:fc:59:ab:4c:01:83:1a:
         08:42:b3:65:5f:a9:fc:f4:e0:ec:b6:93:a7:d7:0c:c8:01:de:
         f7:59:94:df:3b:e4:80:b4:39:1c:84:8d:97:b8:b2:c0:38:1a:
         fd:27:af:b6:82:54:4a:2b:1f:48:57:8c:c0:8e:cb:10:a7:b7:
         de:ca:03:7d:13:0a:41:16:fc:d1:3a:fd:d7:b9:cd:33:0e:8b:
         2a:32:1f:7f:6a:45:51:c1:06:ca:e8:b6:3d:bd:01:43:c1:a9:
         95:30:bf:7b:94:f3:49:5f:bc:99:b9:1e:99:5d:5b:0d:dc:4a:
         0d:f0:52:90:74:7a:48:a9:48:33:ee:8c:b7:9a:13:c5:2b:ca:
         12:56:5e:c0:8b:7d:91:f3:4b:ce:c9:ed:67:d8:11:d0:3c:99:
         27:95:ab:e1:1c:2e:24:45:cf:aa:ef:bb:eb:44:f6:b5:1a:70:
         1a:8b:1c:99
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZt3xwO4UvfKIe+K+fPNrN3hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MDE5MGJkZmIwYTNmMjNiNDQxMWU3ZDc0OGVkZGJiZDA5
Zjg1NDYwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmZmYTVkZjc4YzIzMjVlZWJjMWRiYjRhMTc5ZTU0Njc0MDRhODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz43DzVkLEUW73GHJKOMHHZNi/sj
ptOD+XUUWUMYyEbwtz07jxXe4dkJPrlHgoveptjnuSzre/nT9mMelCpTyk7djXy2
Nzp3AY9LkiGkpqE4pzuuw4BmJ+2nI4VN9/zB1oNcsxUS2RJpwZdW8a3OTAG2wEu7
BwhEWrsoDWQwoq0R/chGNxz7X6MW2UOtdGDuln3+mjrbDvLq3Si/at64D3Y6B5ko
YCNuB1iC3kiJKbKYSOMarIIS/0M95ce5RLD1OOn02fuk+dGGp6VrZXI2AKuxnDCe
G//tcKSniY43SZCEqiokpQ37hf1he56KZMX82OEgu8LrmHdQ4JCWVmspqwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFPb/pd94wjJe68HbtKF55UZ0BKgbMB8GA1UdIwQY
MBaAFFYBkL37Cj8jtEEefXSO3bvQn4VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmdHUXZmc0tQeU8wUVI1OWRJN2R1OUNmaFVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iNjZjODMtMGQ2MS00MjFmLWIwODMt
MmI5ZmM0MWUwYTgwLzEvOXYtbDMzakNNbDdyd2R1MG9YbmxSblFFcUJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9iNjZjODMtMGQ2MS00MjFmLWIwODMtMmI5ZmM0MWUwYTgw
LzEvVmdHUXZmc0tQeU8wUVI1OWRJN2R1OUNmaFVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQD1Gy4MA4E
AgACMAgDBgQqAgNYEDANBgkqhkiG9w0BAQsFAAOCAQEAh4L5M8JbA7Mm/9GrD+ye
tz7nuKAkTcWu3zEnaAFRJ8o12isKAeuTUf012kgjwH9pXBg1tw3403izRYmUMuz8
SJsqDvKqWrsOEljrSI8USSd4dCH8WatMAYMaCEKzZV+p/PTg7LaTp9cMyAHe91mU
3zvkgLQ5HISNl7iywDga/SevtoJUSisfSFeMwI7LEKe33soDfRMKQRb80Tr917nN
Mw6LKjIff2pFUcEGyui2Pb0BQ8GplTC/e5TzSV+8mbkemV1bDdxKDfBSkHR6SKlI
M+6Mt5oTxSvKElZewIt9kfNLzsntZ9gR0DyZJ5Wr4RwuJEXPqu+760T2tRpwGosc
mQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:47:36 2026 by rpki-client