This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RuW_JMeiBcDQE85HV1YwQT7oBdo.roa
File:                     RuW_JMeiBcDQE85HV1YwQT7oBdo.roa (raw, json)
Hash identifier:          KFY10v7O+4BxNGP02Y+zwFzv2T+zQfO0fowpEljrzi0=
Subject key identifier:   46:E5:BF:24:C7:A2:05:C0:D0:13:CE:47:57:56:30:41:3E:E8:05:DA
Certificate issuer:       /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial:       019B7A5AB928230A2686843CDC91868A14F6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RuW_JMeiBcDQE85HV1YwQT7oBdo.roa
Signing time:             Thu 01 Jan 2026 16:18:44 +0000
ROA not before:           Thu 01 Jan 2026 16:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202662
IP address blocks:        82.152.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:b9:28:23:0a:26:86:84:3c:dc:91:86:8a:14:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
        Validity
            Not Before: Jan  1 16:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=46e5bf24c7a205c0d013ce47575630413ee805da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fb:f0:b3:64:17:f2:1a:57:27:78:c0:24:78:
                    e8:f0:39:41:eb:88:ff:2a:2b:81:6b:9f:f0:6a:65:
                    ca:38:23:ec:d2:30:1d:96:09:dd:f2:02:20:43:b2:
                    77:f2:5a:a4:61:e8:25:ae:d1:17:94:b8:42:96:f0:
                    d3:d1:a7:24:04:27:79:bb:2f:1a:65:8c:12:f7:85:
                    95:21:d0:64:62:05:ba:80:4c:4f:c1:0e:8d:00:0d:
                    a2:72:cf:0d:5f:32:f3:00:50:be:24:e4:11:a4:1f:
                    46:44:6a:59:b7:6e:90:4c:23:95:2e:bc:85:1b:1c:
                    f0:2d:bc:c9:b9:23:6b:82:f6:0f:2e:3a:fe:23:de:
                    01:c8:be:50:d7:08:cf:6f:5e:f7:7f:d1:54:6c:93:
                    e1:80:0e:65:c3:73:b1:bb:04:19:ae:29:c0:52:a4:
                    5a:3e:03:71:ef:dd:c1:f2:b7:3b:2b:f4:7e:08:56:
                    3d:a7:35:c7:d3:40:2a:b2:8c:6c:12:8a:b2:d4:64:
                    70:7e:f7:f7:75:c4:06:26:56:2b:88:2a:cf:af:92:
                    a0:62:7f:14:f2:1f:58:ff:a8:b3:ac:be:a2:67:bf:
                    39:e0:e2:65:e0:24:da:2e:55:2f:5b:c3:60:03:be:
                    c7:5e:81:db:97:3f:0a:0c:ed:2b:59:29:1c:b7:42:
                    53:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E5:BF:24:C7:A2:05:C0:D0:13:CE:47:57:56:30:41:3E:E8:05:DA
            X509v3 Authority Key Identifier:
                keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/RuW_JMeiBcDQE85HV1YwQT7oBdo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.152.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:8c:1f:18:6c:74:de:7b:ca:3a:cd:59:8d:d4:14:59:b3:3e:
         57:3f:0f:f2:7c:ee:30:88:6a:a4:7d:d1:11:8c:1f:6f:28:cf:
         7e:25:27:48:f1:98:44:2e:8b:cf:9b:4e:56:0f:6f:47:ec:a4:
         e3:5c:e3:3d:7d:bc:1a:90:f4:16:a5:3c:53:93:98:db:9e:40:
         15:d6:0b:48:e5:6a:34:c1:87:e9:c8:33:02:a7:fe:21:df:6d:
         33:1d:bc:58:52:9b:c7:2c:dc:89:40:aa:fd:22:81:4a:e8:fd:
         c1:46:3b:39:64:90:ca:d6:c5:25:cf:f8:5e:c9:49:ca:03:60:
         47:18:09:99:3a:17:9e:4f:d1:7f:bc:71:14:d8:43:b0:47:11:
         ab:18:97:c3:30:3e:fb:3e:8a:db:b0:1c:d2:56:e1:98:dc:0a:
         27:26:0a:fc:be:b9:0b:1c:43:e6:fc:d2:c5:ac:c0:3c:34:dc:
         d1:04:e1:f5:67:41:c9:86:59:82:0d:08:4e:1a:c7:48:38:c1:
         0c:e6:2a:6b:3b:c6:56:64:ed:70:10:a0:1c:7e:54:c4:8d:84:
         bc:fc:55:20:dd:27:a5:cc:29:07:17:68:9a:0f:aa:43:c5:da:
         04:5b:39:39:ca:a1:c2:80:a9:c7:81:54:8d:2b:13:01:c5:b8:
         c0:3e:52:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6WrkoIwomhoQ83JGGihT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmU1YmYyNGM3YTIwNWMwZDAxM2NlNDc1NzU2MzA0MTNlZTgwNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPvws2QX8hpXJ3jAJHjo8DlB64j/
KiuBa5/wamXKOCPs0jAdlgnd8gIgQ7J38lqkYeglrtEXlLhClvDT0ackBCd5uy8a
ZYwS94WVIdBkYgW6gExPwQ6NAA2ics8NXzLzAFC+JOQRpB9GRGpZt26QTCOVLryF
GxzwLbzJuSNrgvYPLjr+I94ByL5Q1wjPb173f9FUbJPhgA5lw3OxuwQZrinAUqRa
PgNx793B8rc7K/R+CFY9pzXH00AqsoxsEoqy1GRwfvf3dcQGJlYriCrPr5KgYn8U
8h9Y/6izrL6iZ7854OJl4CTaLlUvW8NgA77HXoHblz8KDO0rWSkct0JTTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEblvyTHogXA0BPOR1dWMEE+6AXaMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUnVXX0pNZWlCY0RRRTg1SFYxWXdRVDdvQmRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDUpigMA0G
CSqGSIb3DQEBCwUAA4IBAQCQjB8YbHTee8o6zVmN1BRZsz5XPw/yfO4wiGqkfdER
jB9vKM9+JSdI8ZhELovPm05WD29H7KTjXOM9fbwakPQWpTxTk5jbnkAV1gtI5Wo0
wYfpyDMCp/4h320zHbxYUpvHLNyJQKr9IoFK6P3BRjs5ZJDK1sUlz/heyUnKA2BH
GAmZOheeT9F/vHEU2EOwRxGrGJfDMD77PorbsBzSVuGY3AonJgr8vrkLHEPm/NLF
rMA8NNzRBOH1Z0HJhlmCDQhOGsdIOMEM5iprO8ZWZO1wEKAcflTEjYS8/FUg3Sel
zCkHF2iaD6pDxdoEWzk5yqHCgKnHgVSNKxMBxbjAPlK/
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:15:57 2026 by rpki-client