This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/tro6X7iK51XkgaSmWZxLK58RXTg.roa
File:                     tro6X7iK51XkgaSmWZxLK58RXTg.roa (raw, json)
Hash identifier:          +pwaDz9z8O9fqdmWMuriQ57/jbWFBhz44aGxqAFwVXQ=
Subject key identifier:   B6:BA:3A:5F:B8:8A:E7:55:E4:81:A4:A6:59:9C:4B:2B:9F:11:5D:38
Certificate issuer:       /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial:       019AA691AA429FCF2BC5D20B3A241357665C
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/tro6X7iK51XkgaSmWZxLK58RXTg.roa
Signing time:             Fri 21 Nov 2025 13:19:15 +0000
ROA not before:           Fri 21 Nov 2025 13:19:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     205886
IP address blocks:        212.100.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:a6:91:aa:42:9f:cf:2b:c5:d2:0b:3a:24:13:57:66:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
        Validity
            Not Before: Nov 21 13:19:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=b6ba3a5fb88ae755e481a4a6599c4b2b9f115d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:b5:80:9a:24:c8:da:de:4e:26:07:e7:1b:
                    c3:40:1f:10:1e:c9:f4:ed:24:d0:b1:75:cc:a0:59:
                    7c:2c:4c:9f:cd:87:85:e9:c3:80:91:31:17:d0:84:
                    85:91:a6:99:a0:5d:2c:3c:dc:4b:cc:72:d9:7e:70:
                    e1:59:64:a8:0c:2f:1c:9e:1e:81:e6:ee:13:9a:11:
                    ec:28:3d:16:34:fb:25:9d:fa:c3:6d:41:3e:ea:13:
                    27:3c:b2:d2:c1:3e:5d:3d:27:e8:c0:32:46:7c:fe:
                    c4:4e:53:e7:19:bd:ce:54:49:27:40:88:4b:b0:9d:
                    68:c0:08:9c:61:33:53:03:9f:50:dc:cf:e5:6e:00:
                    e6:14:17:ef:14:8a:c0:76:b0:43:91:2c:fd:4d:18:
                    ff:5b:79:98:11:16:53:81:a2:cb:26:e0:1f:25:c6:
                    0a:42:1d:5d:7d:91:c2:87:c3:88:40:61:15:ec:9f:
                    02:70:27:48:4d:05:8d:ae:44:ea:75:aa:43:2c:0d:
                    e1:66:d3:89:e8:9e:d3:7d:17:7b:7a:e2:08:d0:5e:
                    eb:95:62:39:a9:da:bb:4e:10:72:0b:8d:2f:92:8e:
                    8d:e4:95:7b:8a:4b:2b:73:b0:1a:d0:29:fd:09:f1:
                    a6:9e:1d:03:be:64:93:ec:b0:ff:ab:fe:ae:b0:42:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BA:3A:5F:B8:8A:E7:55:E4:81:A4:A6:59:9C:4B:2B:9F:11:5D:38
            X509v3 Authority Key Identifier:
                keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/tro6X7iK51XkgaSmWZxLK58RXTg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.100.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:76:39:d9:04:d7:5f:9c:20:f7:6c:67:bb:9e:b2:68:aa:1f:
         53:2d:e4:ab:d1:f1:ee:17:4d:21:0a:d7:11:af:20:67:3c:3e:
         51:4d:63:15:d3:98:13:b2:30:c6:63:42:d2:ca:45:1f:55:d2:
         e3:65:34:fc:5d:b3:0a:0a:e6:28:16:39:11:d9:98:a3:05:bc:
         17:7d:b0:38:5a:22:2e:ad:32:f2:b1:6c:85:28:66:68:8b:3d:
         a6:03:f0:3b:78:c3:af:dc:7d:11:2e:df:0e:8c:fe:0a:a1:e1:
         bf:0a:8b:2d:27:c3:1a:07:e2:40:fd:05:b4:7d:d6:41:fe:86:
         63:c0:84:e7:34:87:54:35:3c:cd:a8:ca:1f:e8:36:20:15:cf:
         ec:47:ff:9d:ed:81:40:16:17:6b:5d:48:78:a0:81:da:1e:15:
         e3:ba:9f:1d:4d:7c:2f:8a:ea:bc:e8:11:08:53:52:0c:26:6c:
         91:87:3d:9d:11:1b:a9:89:16:a3:d6:a0:5a:8f:57:8d:42:e3:
         82:77:39:3a:02:32:53:3e:21:8d:5a:45:c6:68:09:a4:d7:14:
         53:dc:85:04:cd:a7:ae:02:05:14:95:63:0f:5c:23:de:5e:59:
         79:33:33:d7:56:53:45:1d:80:61:a5:40:70:4a:e0:c4:30:b6:
         65:99:5f:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZqmkapCn88rxdILOiQTV2ZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjQ5YmEwZGQ4NjE1MTI4NjE4ZDUwMTU5Y2IwZjNiNWU5
ZWU2MjYwHhcNMjUxMTIxMTMxOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmJhM2E1ZmI4OGFlNzU1ZTQ4MWE0YTY1OTljNGIyYjlmMTE1ZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUy1gJokyNreTiYH5xvDQB8QHsn0
7STQsXXMoFl8LEyfzYeF6cOAkTEX0ISFkaaZoF0sPNxLzHLZfnDhWWSoDC8cnh6B
5u4TmhHsKD0WNPslnfrDbUE+6hMnPLLSwT5dPSfowDJGfP7ETlPnGb3OVEknQIhL
sJ1owAicYTNTA59Q3M/lbgDmFBfvFIrAdrBDkSz9TRj/W3mYERZTgaLLJuAfJcYK
Qh1dfZHCh8OIQGEV7J8CcCdITQWNrkTqdapDLA3hZtOJ6J7TfRd7euII0F7rlWI5
qdq7ThByC40vko6N5JV7iksrc7Aa0Cn9CfGmnh0DvmST7LD/q/6usEIIrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLa6Ol+4iudV5IGkplmcSyufEV04MB8GA1UdIwQY
MBaAFFG0m6DdhhUShhjVAVnLDztenuYmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQt
NGFiOWU4YWEzMjYyLzEvdHJvNlg3aUs1MVhrZ2FTbVdaeExLNThSWFRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yNmMwNDktNDdlZS00ODg2LTk4NDQtNGFiOWU4YWEzMjYy
LzEvVWJTYm9OMkdGUktHR05VQldjc1BPMTZlNWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GSlMA0G
CSqGSIb3DQEBCwUAA4IBAQBudjnZBNdfnCD3bGe7nrJoqh9TLeSr0fHuF00hCtcR
ryBnPD5RTWMV05gTsjDGY0LSykUfVdLjZTT8XbMKCuYoFjkR2ZijBbwXfbA4WiIu
rTLysWyFKGZoiz2mA/A7eMOv3H0RLt8OjP4KoeG/CostJ8MaB+JA/QW0fdZB/oZj
wITnNIdUNTzNqMof6DYgFc/sR/+d7YFAFhdrXUh4oIHaHhXjup8dTXwviuq86BEI
U1IMJmyRhz2dERupiRaj1qBaj1eNQuOCdzk6AjJTPiGNWkXGaAmk1xRT3IUEzaeu
AgUUlWMPXCPeXll5MzPXVlNFHYBhpUBwSuDEMLZlmV9u
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:08 2025 by rpki-client