This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Nw9oUx1P_ZziFM706koS9GS7FJw.roa
File:                     Nw9oUx1P_ZziFM706koS9GS7FJw.roa (raw, json)
Hash identifier:          LBN1Ui1EWKIEFENTjLzYQ+tIWeEdr58O2UDEZN8eSZs=
Subject key identifier:   37:0F:68:53:1D:4F:FD:9C:E2:14:CE:F4:EA:4A:12:F4:64:BB:14:9C
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       019B7BA3DBFF9D0B4FBC230CB6A4C9A02177
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Nw9oUx1P_ZziFM706koS9GS7FJw.roa
Signing time:             Thu 01 Jan 2026 22:18:14 +0000
ROA not before:           Thu 01 Jan 2026 22:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216138
IP address blocks:        212.100.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:db:ff:9d:0b:4f:bc:23:0c:b6:a4:c9:a0:21:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Jan  1 22:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=370f68531d4ffd9ce214cef4ea4a12f464bb149c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:64:34:76:96:d8:18:6b:3b:4e:5e:a3:43:16:
                    aa:f6:67:1f:dd:72:46:8e:80:c3:45:f4:7c:2a:f7:
                    8c:60:f2:49:06:c5:fe:6e:eb:1a:ed:ae:87:55:03:
                    97:50:e6:e7:95:94:96:6c:47:98:18:12:67:38:de:
                    c7:fb:5e:3a:17:c3:e3:eb:a4:e9:d4:6f:de:29:f8:
                    39:41:9c:2b:e1:56:58:9e:22:a3:0a:be:9f:1e:d0:
                    bc:8f:0f:e8:cb:24:82:3b:15:a4:02:5f:ff:47:7b:
                    b5:e8:be:96:8e:3d:35:ab:50:75:0a:32:2d:04:0a:
                    70:40:2a:4f:e6:10:99:f4:31:e3:90:10:a1:66:94:
                    f8:51:bb:a4:da:61:f1:38:1c:b9:61:83:19:59:11:
                    82:62:5a:a3:fe:e6:43:7c:ae:fc:f5:d1:34:1a:87:
                    7b:93:16:f5:70:96:0c:69:3c:9c:cc:33:f2:dd:0a:
                    a0:c8:10:49:43:5b:0d:20:bf:07:cf:65:79:9b:90:
                    ae:20:7d:a1:20:14:4b:20:df:11:8e:4d:24:6d:80:
                    2f:7a:7e:d8:fa:f2:37:a9:d6:38:9a:fc:77:da:14:
                    66:69:e6:07:c3:dd:94:e0:1a:ea:8d:0b:cd:30:53:
                    01:c7:c5:9e:a0:f8:1c:e3:1b:6c:a6:4d:99:55:03:
                    25:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0F:68:53:1D:4F:FD:9C:E2:14:CE:F4:EA:4A:12:F4:64:BB:14:9C
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/Nw9oUx1P_ZziFM706koS9GS7FJw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.100.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:15:bb:62:45:87:c1:b9:6a:d3:c6:0f:7c:99:96:b5:d0:b8:
         74:4c:a9:8d:ed:a6:50:6d:ff:09:64:2a:8f:4c:c3:77:8b:9b:
         fe:a2:29:ba:21:8c:ac:5c:c1:31:32:e2:82:b1:97:5c:c5:b0:
         d5:27:58:d5:52:fa:90:8e:bd:8f:3a:77:45:f3:e0:08:b6:22:
         a4:2a:38:3e:c0:26:3c:3b:33:ea:09:d2:7a:a0:ea:da:30:39:
         ed:99:79:29:b1:06:0e:79:00:8a:59:68:d3:ad:9b:59:9e:16:
         a5:a2:90:31:15:27:14:d8:cc:4c:9e:97:81:60:09:c5:f7:4f:
         28:c8:2a:e2:5f:0c:22:af:40:10:46:6c:4e:a2:a2:7c:39:1d:
         99:9f:0b:92:83:a4:b1:85:cc:fc:54:35:3e:30:8a:0a:d4:1e:
         89:ee:9e:a4:db:b9:2d:96:11:a2:18:8b:a4:eb:5a:48:33:47:
         d8:eb:08:3f:1d:90:99:57:88:9e:5b:13:16:0e:85:8d:51:50:
         7a:83:c2:63:03:45:f5:28:87:26:a4:e4:68:8c:62:64:55:e0:
         46:ce:55:0a:44:b2:b7:e2:29:b9:28:d3:31:85:91:04:4e:00:
         80:63:a4:40:6f:40:d9:61:ce:98:1d:5d:99:7e:c7:19:4a:6c:
         60:b8:92:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7o9v/nQtPvCMMtqTJoCF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5
ZWU2MjYwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzBmNjg1MzFkNGZmZDljZTIxNGNlZjRlYTRhMTJmNDY0YmIxNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Q0dpbYGGs7Tl6jQxaq9mcf3XJG
joDDRfR8KveMYPJJBsX+busa7a6HVQOXUObnlZSWbEeYGBJnON7H+146F8Pj66Tp
1G/eKfg5QZwr4VZYniKjCr6fHtC8jw/oyySCOxWkAl//R3u16L6Wjj01q1B1CjIt
BApwQCpP5hCZ9DHjkBChZpT4Ubuk2mHxOBy5YYMZWRGCYlqj/uZDfK789dE0God7
kxb1cJYMaTyczDPy3QqgyBBJQ1sNIL8Hz2V5m5CuIH2hIBRLIN8Rjk0kbYAven7Y
+vI3qdY4mvx32hRmaeYHw92U4BrqjQvNMFMBx8WeoPgc4xtspk2ZVQMllwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDcPaFMdT/2c4hTO9OpKEvRkuxScMB8GA1UdIwQY
MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt
NGFiOWU4YWEzMjYyLzEvTnc5b1V4MVBfWnppRk03MDZrb1M5R1M3Rkp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy
LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GS+MA0G
CSqGSIb3DQEBCwUAA4IBAQABFbtiRYfBuWrTxg98mZa10Lh0TKmN7aZQbf8JZCqP
TMN3i5v+oim6IYysXMExMuKCsZdcxbDVJ1jVUvqQjr2POndF8+AItiKkKjg+wCY8
OzPqCdJ6oOraMDntmXkpsQYOeQCKWWjTrZtZnhalopAxFScU2MxMnpeBYAnF908o
yCriXwwir0AQRmxOoqJ8OR2ZnwuSg6Sxhcz8VDU+MIoK1B6J7p6k27ktlhGiGIuk
61pIM0fY6wg/HZCZV4ieWxMWDoWNUVB6g8JjA0X1KIcmpORojGJkVeBGzlUKRLK3
4im5KNMxhZEETgCAY6RAb0DZYc6YHV2ZfscZSmxguJK8
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:08:55 2026 by rpki-client