This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/V1X5AoJuWVktixeEEeg847CrLW4.roa
File:                     V1X5AoJuWVktixeEEeg847CrLW4.roa (raw, json)
Hash identifier:          sDvrIAa5SeWcR7s8zM+NUTwaLMsawn+2eiUy7AxPXYo=
Subject key identifier:   57:55:F9:02:82:6E:59:59:2D:8B:17:84:11:E8:3C:E3:B0:AB:2D:6E
Certificate issuer:       /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial:       019B7B36D43CEEDAB59E8BDD7D88DBAC6D16
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/V1X5AoJuWVktixeEEeg847CrLW4.roa
Signing time:             Thu 01 Jan 2026 20:19:09 +0000
ROA not before:           Thu 01 Jan 2026 20:19:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20847
IP address blocks:        195.60.212.0/22 maxlen: 24
                          2001:67c:78::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:d4:3c:ee:da:b5:9e:8b:dd:7d:88:db:ac:6d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
        Validity
            Not Before: Jan  1 20:19:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5755f902826e59592d8b178411e83ce3b0ab2d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cd:69:32:65:13:74:6e:32:06:ee:38:8d:34:
                    42:9b:f7:cf:df:15:4e:26:89:e7:fc:bc:c4:48:4d:
                    c6:81:75:9b:6c:b8:11:ff:09:9f:21:d7:b0:c6:2d:
                    71:e6:38:6f:c2:d3:64:3b:bc:58:0e:23:18:b3:d6:
                    d3:32:7f:7c:14:b5:ef:9b:7a:86:ba:cf:85:31:f8:
                    d1:35:a2:ca:a7:71:b7:02:47:b3:aa:29:b2:64:49:
                    fc:94:29:ea:5d:73:33:b2:26:96:21:c0:22:50:5d:
                    09:ca:2c:56:5e:b4:66:b0:e1:9f:5d:e7:5b:83:39:
                    ab:1f:2c:35:7b:89:97:92:02:f4:66:ec:25:ec:89:
                    cb:2a:55:e0:68:c4:a1:bc:6b:a2:23:a7:f8:a8:e6:
                    95:4f:82:7c:23:a6:3e:e6:dd:98:81:08:44:bc:0f:
                    69:97:40:b5:3f:dc:2a:d9:2d:15:fe:02:81:f3:45:
                    62:6c:b5:38:13:5f:03:0c:65:4c:6a:97:d7:f0:83:
                    14:aa:a2:63:00:9f:b0:45:76:ca:ff:5e:ae:ad:ea:
                    e9:9c:24:ab:4b:7d:9e:b4:89:2a:03:43:93:9f:10:
                    b2:f9:ba:8e:e2:72:09:43:e4:ee:79:54:b8:fa:35:
                    98:f6:7e:15:5b:c8:98:e1:ab:33:25:eb:bb:97:d1:
                    e1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:55:F9:02:82:6E:59:59:2D:8B:17:84:11:E8:3C:E3:B0:AB:2D:6E
            X509v3 Authority Key Identifier:
                keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/V1X5AoJuWVktixeEEeg847CrLW4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.60.212.0/22
                IPv6:
                  2001:67c:78::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:bb:37:23:ce:88:b6:ac:6b:d7:85:b1:b6:1e:74:73:ca:c0:
         96:c1:1b:6d:8e:56:00:d3:d7:b2:70:d4:13:eb:74:ab:d0:cb:
         4e:af:5d:ca:42:5b:e7:98:57:a0:1a:52:be:c4:ed:1e:f3:b6:
         40:40:62:d7:83:de:a6:0c:04:f9:12:ff:9f:30:a6:b0:2b:ca:
         a4:be:c8:5a:30:7a:02:38:95:5e:8e:d1:1b:9e:15:54:70:f3:
         5e:a2:32:a2:f6:b6:40:9c:5f:d1:e8:33:46:32:cc:bb:d0:c3:
         da:6f:2d:84:b9:b4:5b:2b:f8:03:1d:1f:8c:6f:85:26:62:b4:
         2d:ad:f2:67:b8:ff:88:20:5c:12:74:d8:32:b3:a9:0d:9f:e2:
         21:8a:9e:ee:19:7b:2b:82:0b:24:c2:5f:62:4e:78:9d:6a:88:
         fe:d8:84:8f:c0:c2:bd:b8:13:4a:80:94:75:1c:5c:58:60:0d:
         08:3b:aa:e4:a1:81:fb:b5:19:99:0e:6c:c4:e2:c0:5f:4f:04:
         ec:ed:92:ec:4c:f9:df:c4:ec:c1:da:17:1b:9b:11:3a:f2:1a:
         f8:8e:06:e7:29:ab:a8:92:80:4f:d0:dd:87:43:b2:11:46:a2:
         b1:50:cc:6e:5a:96:2b:83:b4:37:1e:02:24:ea:84:b6:e6:fa:
         49:82:12:dc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt7NtQ87tq1novdfYjbrG0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2ExMWNjYWQxMmU0NTUyODZmNWQwZWIzMDQwZTg2M2Yz
MGM5OTMwHhcNMjYwMTAxMjAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzU1ZjkwMjgyNmU1OTU5MmQ4YjE3ODQxMWU4M2NlM2IwYWIyZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs1pMmUTdG4yBu44jTRCm/fP3xVO
Jonn/LzESE3GgXWbbLgR/wmfIdewxi1x5jhvwtNkO7xYDiMYs9bTMn98FLXvm3qG
us+FMfjRNaLKp3G3AkezqimyZEn8lCnqXXMzsiaWIcAiUF0JyixWXrRmsOGfXedb
gzmrHyw1e4mXkgL0Zuwl7InLKlXgaMShvGuiI6f4qOaVT4J8I6Y+5t2YgQhEvA9p
l0C1P9wq2S0V/gKB80VibLU4E18DDGVMapfX8IMUqqJjAJ+wRXbK/16urerpnCSr
S32etIkqA0OTnxCy+bqO4nIJQ+TueVS4+jWY9n4VW8iY4aszJeu7l9Hh/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFdV+QKCbllZLYsXhBHoPOOwqy1uMB8GA1UdIwQY
MBaAFMd6EcytEuRVKG9dDrMEDoY/MMmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgt
MDkwZTViZDU4MGIzLzEvVjFYNUFvSnVXVmt0aXhlRUVlZzg0N0NyTFc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iNjY0Y2ItMzQ5YS00ZmZiLWIyNjgtMDkwZTViZDU4MGIz
LzEveDNvUnpLMFM1RlVvYjEwT3N3UU9oajh3eVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwzzUMA8E
AgACMAkDBwAgAQZ8AHgwDQYJKoZIhvcNAQELBQADggEBAEG7NyPOiLasa9eFsbYe
dHPKwJbBG22OVgDT17Jw1BPrdKvQy06vXcpCW+eYV6AaUr7E7R7ztkBAYteD3qYM
BPkS/58wprAryqS+yFowegI4lV6O0RueFVRw816iMqL2tkCcX9HoM0YyzLvQw9pv
LYS5tFsr+AMdH4xvhSZitC2t8me4/4ggXBJ02DKzqQ2f4iGKnu4ZeyuCCyTCX2JO
eJ1qiP7YhI/Awr24E0qAlHUcXFhgDQg7quShgfu1GZkObMTiwF9PBOztkuxM+d/E
7MHaFxubETryGviOBucpq6iSgE/Q3YdDshFGorFQzG5aliuDtDceAiTqhLbm+kmC
Etw=
-----END CERTIFICATE-----
Generated at Mon Jan 26 10:24:17 2026 by rpki-client