This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/E6053yR1CqVaJr7LtSIy8wHoaGg.roa
File:                     E6053yR1CqVaJr7LtSIy8wHoaGg.roa (raw, json)
Hash identifier:          YpgpJxbI9F9bF2mcDpVeWkbBTRfl6cIoKyEc+QXfAaA=
Subject key identifier:   13:AD:39:DF:24:75:0A:A5:5A:26:BE:CB:B5:22:32:F3:01:E8:68:68
Certificate issuer:       /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial:       019B775889F0D6270527E5313EB4FC6296E5
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/E6053yR1CqVaJr7LtSIy8wHoaGg.roa
Signing time:             Thu 01 Jan 2026 02:17:29 +0000
ROA not before:           Thu 01 Jan 2026 02:17:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205364
IP address blocks:        195.230.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:89:f0:d6:27:05:27:e5:31:3e:b4:fc:62:96:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
        Validity
            Not Before: Jan  1 02:17:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=13ad39df24750aa55a26becbb52232f301e86868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:aa:a6:f6:27:cd:38:e4:c2:2e:a7:13:2d:4e:
                    3a:39:3e:2f:17:4c:67:bd:af:65:8e:c2:bd:3d:78:
                    6c:60:0e:41:ae:fb:61:82:ea:d4:04:57:04:21:a5:
                    0a:78:2e:b9:16:57:40:e5:e0:33:6c:39:24:74:76:
                    6e:5f:4e:28:8e:8a:94:cf:a1:8e:fe:eb:4f:75:47:
                    95:42:ca:2b:49:9c:95:48:c7:57:52:8d:55:35:29:
                    29:fc:66:04:9c:c3:80:3c:ca:45:02:00:6a:85:97:
                    25:61:f1:e0:f6:87:f5:d1:92:27:c8:57:b9:02:91:
                    1f:77:fd:5d:8a:10:56:da:8d:cb:29:ce:72:77:16:
                    69:e9:a6:08:3c:db:0f:c0:04:01:28:4c:d3:81:af:
                    2e:18:78:cb:67:9a:42:dd:c5:67:a4:fd:05:42:4f:
                    20:bf:94:fe:20:ea:0f:06:1b:48:83:96:e7:e6:de:
                    9b:63:1d:e2:da:b7:7a:b0:67:cb:4d:8b:69:81:31:
                    96:09:a8:e1:d0:a6:87:5c:e0:d2:1b:64:72:75:65:
                    c0:89:61:47:bd:61:57:b2:91:fa:91:c4:27:a2:b7:
                    42:26:08:d0:53:7a:35:19:2d:69:e2:e7:a3:a6:7f:
                    e4:d5:a1:61:7c:74:a0:1e:0d:79:7f:bf:16:ab:08:
                    31:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AD:39:DF:24:75:0A:A5:5A:26:BE:CB:B5:22:32:F3:01:E8:68:68
            X509v3 Authority Key Identifier:
                keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/E6053yR1CqVaJr7LtSIy8wHoaGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.230.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:93:1a:4f:51:d4:a2:41:d6:25:74:40:f2:4e:49:42:f4:47:
         7e:a4:d5:09:4f:9e:fe:74:57:58:65:eb:27:33:98:da:9c:28:
         1e:0f:a2:cc:e2:d7:40:dc:e4:3c:d2:9c:df:a7:10:92:cc:a8:
         36:16:c0:01:82:96:7e:56:71:ee:c6:7a:37:ca:48:f8:4b:98:
         82:8b:e4:8d:c1:17:fb:86:07:e1:ab:dc:c2:58:4a:76:d8:31:
         26:d9:af:6c:84:bd:46:7f:55:99:89:2e:d2:7a:b2:14:87:a4:
         0c:f5:e8:60:51:a4:18:34:1f:bd:c6:c7:d5:70:b6:3a:59:35:
         de:90:a0:de:59:c9:80:bd:1c:de:91:40:d6:97:dc:35:d2:d0:
         28:7e:64:9d:1a:b2:a4:7d:39:95:d2:d4:92:33:06:54:72:97:
         19:de:14:c6:6d:79:49:d1:f1:a5:35:63:3e:58:13:4c:a5:fe:
         a7:89:38:07:eb:4f:31:09:ac:62:d5:6e:ab:f3:bf:87:4d:41:
         a0:40:42:ae:8a:94:f1:0a:22:d4:77:4b:38:50:db:b1:6c:01:
         77:03:37:7b:7b:34:e1:84:66:77:2e:2d:c6:c9:41:e5:f0:22:
         57:16:9a:ac:16:49:22:30:14:06:b5:e6:b5:a4:cc:c2:2f:cf:
         3e:e5:1d:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WInw1icFJ+UxPrT8YpblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNzhhNGE5YzUyMzI1YTg1OTIwODA5YmExYTRkODllMjFj
MDJmMTcwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2FkMzlkZjI0NzUwYWE1NWEyNmJlY2JiNTIyMzJmMzAxZTg2ODY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Kqm9ifNOOTCLqcTLU46OT4vF0xn
va9ljsK9PXhsYA5BrvthgurUBFcEIaUKeC65FldA5eAzbDkkdHZuX04ojoqUz6GO
/utPdUeVQsorSZyVSMdXUo1VNSkp/GYEnMOAPMpFAgBqhZclYfHg9of10ZInyFe5
ApEfd/1dihBW2o3LKc5ydxZp6aYIPNsPwAQBKEzTga8uGHjLZ5pC3cVnpP0FQk8g
v5T+IOoPBhtIg5bn5t6bYx3i2rd6sGfLTYtpgTGWCajh0KaHXODSG2RydWXAiWFH
vWFXspH6kcQnordCJgjQU3o1GS1p4uejpn/k1aFhfHSgHg15f78WqwgxKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBOtOd8kdQqlWia+y7UiMvMB6GhoMB8GA1UdIwQY
MBaAFCN4pKnFIyWoWSCAm6Gk2J4hwC8XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmIt
OTM3ZTI3ZWUxYjViLzEvRTYwNTN5UjFDcVZhSnI3THRTSXk4d0hvYUdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9kNjU0YmUtMTc0ZS00MWY3LTljZmItOTM3ZTI3ZWUxYjVi
LzEvSTNpa3FjVWpKYWhaSUlDYm9hVFluaUhBTHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+aUMA0G
CSqGSIb3DQEBCwUAA4IBAQAJkxpPUdSiQdYldEDyTklC9Ed+pNUJT57+dFdYZesn
M5janCgeD6LM4tdA3OQ80pzfpxCSzKg2FsABgpZ+VnHuxno3ykj4S5iCi+SNwRf7
hgfhq9zCWEp22DEm2a9shL1Gf1WZiS7SerIUh6QM9ehgUaQYNB+9xsfVcLY6WTXe
kKDeWcmAvRzekUDWl9w10tAofmSdGrKkfTmV0tSSMwZUcpcZ3hTGbXlJ0fGlNWM+
WBNMpf6niTgH608xCaxi1W6r87+HTUGgQEKuipTxCiLUd0s4UNuxbAF3Azd7ezTh
hGZ3Li3GyUHl8CJXFpqsFkkiMBQGtea1pMzCL88+5R3j
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:41:44 2026 by rpki-client