This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/mtubXUlBQXjcnE7fuf616NzQiL8.roa
File:                     mtubXUlBQXjcnE7fuf616NzQiL8.roa (raw, json)
Hash identifier:          ZPi+7TMbUx5kPi5sDdlZQektqLQyg5jCkWs9e2Cya6g=
Subject key identifier:   9A:DB:9B:5D:49:41:41:78:DC:9C:4E:DF:B9:FE:B5:E8:DC:D0:88:BF
Certificate issuer:       /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial:       019B76EB0D61E4321EA2C57B51ED20AA5343
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/mtubXUlBQXjcnE7fuf616NzQiL8.roa
Signing time:             Thu 01 Jan 2026 00:17:54 +0000
ROA not before:           Thu 01 Jan 2026 00:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201807
IP address blocks:        194.56.233.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:0d:61:e4:32:1e:a2:c5:7b:51:ed:20:aa:53:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
        Validity
            Not Before: Jan  1 00:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9adb9b5d49414178dc9c4edfb9feb5e8dcd088bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:df:15:83:75:fb:d2:80:ff:da:e2:00:81:
                    b8:d9:8d:b5:e5:02:76:1c:21:19:d7:8c:85:d7:b8:
                    ce:12:b1:22:fb:1d:33:32:4c:83:a0:b2:03:28:3b:
                    80:e1:e5:58:3f:1f:4c:f7:94:85:32:e8:ae:56:7b:
                    12:9b:50:25:3e:f3:2a:24:52:77:3a:ef:ba:f8:f7:
                    ff:a9:b7:e6:99:80:4f:62:e2:dc:c8:a0:03:5c:c3:
                    8a:cf:49:a1:33:24:98:2c:57:73:75:2e:7f:71:e2:
                    5f:51:92:7e:15:a4:f3:9c:45:b9:b4:2d:1b:b4:58:
                    b8:a6:bc:ac:e9:e0:1d:09:5f:bd:e5:be:ea:df:c7:
                    68:c9:95:03:5a:db:37:f3:4c:4e:51:c3:65:bb:f7:
                    5f:c2:44:93:0c:09:4f:d5:54:2a:9a:99:b0:5c:43:
                    33:ec:f4:e3:2f:55:1d:3d:e9:5e:5e:4e:7d:9c:e2:
                    f9:0b:31:10:6d:b6:6c:58:a2:84:25:2e:34:e8:49:
                    65:c8:73:c7:49:82:39:87:ae:6b:2c:6b:13:39:59:
                    35:93:b7:0b:36:7b:ef:2f:87:01:b4:55:7c:17:5e:
                    23:82:5c:31:44:bd:50:fd:01:59:64:ac:f0:28:37:
                    75:99:47:7a:ec:ce:56:ff:e7:b7:28:56:b0:16:6c:
                    d0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DB:9B:5D:49:41:41:78:DC:9C:4E:DF:B9:FE:B5:E8:DC:D0:88:BF
            X509v3 Authority Key Identifier:
                keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/mtubXUlBQXjcnE7fuf616NzQiL8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:32:bb:e8:9c:2f:bd:81:0e:8f:4e:86:3a:67:d5:40:d7:
         9e:34:66:2e:51:ef:c2:68:32:b0:2c:42:1a:1d:4d:53:0f:51:
         ed:a5:17:fa:d8:2f:fa:a6:76:c1:86:f0:34:8a:b9:1f:cf:15:
         a7:c3:3c:df:58:7d:52:ea:35:6e:e8:81:93:64:d1:26:f6:da:
         8a:ff:0a:8d:09:05:d1:60:4d:1c:d1:f7:ba:c0:bf:7a:78:fb:
         9f:f2:83:a0:41:a5:01:b0:4d:90:cd:f5:cf:f7:18:62:9d:36:
         96:cc:58:42:66:51:30:e5:b6:78:aa:24:e8:de:2e:61:df:c8:
         72:62:3c:0a:c8:8a:57:79:9c:7f:cf:4c:b5:f9:d5:83:e5:0f:
         7a:ef:13:81:0b:21:46:78:b0:6e:8a:cd:3e:92:23:43:1d:71:
         23:f5:9e:b0:5a:4b:89:5b:0a:d3:db:a9:4e:aa:31:d5:3d:35:
         e9:50:cb:f2:ff:3f:bf:70:1d:a6:57:28:98:45:20:60:04:5b:
         2f:83:37:6b:89:d4:36:90:00:59:21:9c:88:fe:10:d6:77:2b:
         b2:d2:9e:93:d7:b8:42:99:9e:42:40:b3:33:5c:b5:5c:f4:ab:
         a5:e8:d4:dd:da:ec:ec:73:c2:cf:ae:b2:1d:da:88:2e:cb:0c:
         91:89:9a:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt26w1h5DIeosV7Ue0gqlNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy
MmQyNWIwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWRiOWI1ZDQ5NDE0MTc4ZGM5YzRlZGZiOWZlYjVlOGRjZDA4OGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNnfFYN1+9KA/9riAIG42Y215QJ2
HCEZ14yF17jOErEi+x0zMkyDoLIDKDuA4eVYPx9M95SFMuiuVnsSm1AlPvMqJFJ3
Ou+6+Pf/qbfmmYBPYuLcyKADXMOKz0mhMySYLFdzdS5/ceJfUZJ+FaTznEW5tC0b
tFi4prys6eAdCV+95b7q38doyZUDWts380xOUcNlu/dfwkSTDAlP1VQqmpmwXEMz
7PTjL1UdPeleXk59nOL5CzEQbbZsWKKEJS406EllyHPHSYI5h65rLGsTOVk1k7cL
NnvvL4cBtFV8F14jglwxRL1Q/QFZZKzwKDd1mUd67M5W/+e3KFawFmzQ1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJrbm11JQUF43JxO37n+tejc0Ii/MB8GA1UdIwQY
MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt
ZWI1YmM3ZDk3YWEwLzEvbXR1YlhVbEJRWGpjbkU3ZnVmNjE2TnpRaUw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw
LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjjpMA0G
CSqGSIb3DQEBCwUAA4IBAQAa0DK76JwvvYEOj06GOmfVQNeeNGYuUe/CaDKwLEIa
HU1TD1HtpRf62C/6pnbBhvA0irkfzxWnwzzfWH1S6jVu6IGTZNEm9tqK/wqNCQXR
YE0c0fe6wL96ePuf8oOgQaUBsE2QzfXP9xhinTaWzFhCZlEw5bZ4qiTo3i5h38hy
YjwKyIpXeZx/z0y1+dWD5Q967xOBCyFGeLBuis0+kiNDHXEj9Z6wWkuJWwrT26lO
qjHVPTXpUMvy/z+/cB2mVyiYRSBgBFsvgzdridQ2kABZIZyI/hDWdyuy0p6T17hC
mZ5CQLMzXLVc9Kul6NTd2uzsc8LPrrId2oguywyRiZqB
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:22:56 2026 by rpki-client