This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/k03boUcf0sBbvgMy6qVMZ6yiUj8.roa
File:                     k03boUcf0sBbvgMy6qVMZ6yiUj8.roa (raw, json)
Hash identifier:          R5y19Mc0a/YiceWfhEtoKmQ2Yrg6MOd2n1g9gi/iAhw=
Subject key identifier:   93:4D:DB:A1:47:1F:D2:C0:5B:BE:03:32:EA:A5:4C:67:AC:A2:52:3F
Certificate issuer:       /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial:       019B954FE1C36A7DF39A5BFC562A875C89B9
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/k03boUcf0sBbvgMy6qVMZ6yiUj8.roa
Signing time:             Tue 06 Jan 2026 21:56:38 +0000
ROA not before:           Tue 06 Jan 2026 21:56:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        62.106.83.0/24 maxlen: 24
                          77.246.242.0/24 maxlen: 24
                          146.19.142.0/24 maxlen: 24
                          146.19.228.0/24 maxlen: 24
                          185.218.184.0/24 maxlen: 24
                          193.109.82.0/24 maxlen: 24
                          195.216.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:95:4f:e1:c3:6a:7d:f3:9a:5b:fc:56:2a:87:5c:89:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
        Validity
            Not Before: Jan  6 21:56:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=934ddba1471fd2c05bbe0332eaa54c67aca2523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d0:f7:cd:e6:9b:fb:96:09:ca:97:e8:40:68:
                    4e:f4:6b:02:23:54:32:c8:e2:91:7d:e7:2c:4b:8d:
                    3e:83:b5:9c:d9:8e:64:2f:64:35:23:24:9e:e5:b7:
                    52:1b:db:6c:7c:69:68:d8:0d:ff:5d:a1:e5:44:1a:
                    1b:00:1f:6e:77:03:33:ca:ce:8c:b4:db:a3:9f:22:
                    ee:78:f8:2e:2b:87:e4:08:67:34:6d:24:d3:a4:49:
                    9e:5c:60:14:d8:ee:8a:fb:ca:24:d7:39:ed:34:0b:
                    ef:47:22:47:25:9b:3d:37:13:3d:52:ac:4d:ad:bb:
                    40:d8:70:65:ae:72:32:09:4e:fa:be:3e:81:12:aa:
                    65:23:d2:db:c3:16:65:5f:73:46:1f:cf:58:b5:f8:
                    90:b4:d6:36:5a:84:ef:b8:17:36:aa:3d:03:13:d2:
                    45:9e:29:80:75:97:91:c5:0a:b8:4f:23:f6:73:82:
                    21:82:db:8e:95:0d:26:43:96:bc:88:77:04:f4:6f:
                    5f:cc:50:6b:0d:16:27:4f:e6:b7:a3:91:d7:f4:8e:
                    1c:14:10:44:6a:58:da:89:e4:a8:3e:be:c3:c3:6d:
                    ba:fd:ba:60:04:5b:ef:85:57:00:76:5b:1a:17:83:
                    ba:a0:7a:93:40:e7:54:4d:0f:5a:ff:83:a9:28:ab:
                    9c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4D:DB:A1:47:1F:D2:C0:5B:BE:03:32:EA:A5:4C:67:AC:A2:52:3F
            X509v3 Authority Key Identifier:
                keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/k03boUcf0sBbvgMy6qVMZ6yiUj8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.83.0/24
                  77.246.242.0/24
                  146.19.142.0/24
                  146.19.228.0/24
                  185.218.184.0/24
                  193.109.82.0/24
                  195.216.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:a9:6d:84:77:3e:15:55:65:81:1e:09:f3:c7:a5:e9:e8:73:
         39:a4:05:f9:d9:c2:62:5e:b6:55:f3:8d:8b:42:57:a9:08:b2:
         43:6f:b3:87:b0:3f:8d:47:7b:c7:18:d8:35:ce:e0:2f:c8:1e:
         50:96:21:bf:6b:52:0c:09:e2:19:d9:d9:d8:ce:de:1b:70:bd:
         41:86:1e:bb:8c:d1:c3:b8:46:8f:35:df:6b:38:2b:45:6f:0b:
         ac:09:69:c2:72:b6:92:db:20:33:b0:87:8f:c7:a0:62:96:02:
         21:79:62:93:19:9e:45:2b:aa:6a:ff:a8:02:ba:eb:92:cf:cd:
         38:13:38:d8:e0:62:13:e6:ff:30:95:b1:5d:ec:de:a4:e7:d5:
         d4:eb:7b:04:78:2c:cc:af:4e:77:bc:73:fd:92:8e:7c:e2:38:
         4a:fb:08:73:f6:7e:83:4e:9f:20:b9:b7:8f:d8:e4:6d:9e:92:
         4f:c8:22:9b:59:59:ab:6f:54:28:4f:3b:35:d1:8c:f2:21:4c:
         ad:00:94:ee:77:65:e6:1d:e5:43:25:f0:78:e6:c6:d8:bd:69:
         99:2e:bd:cf:cb:6a:0a:10:81:2e:5c:04:62:b3:dc:9b:de:7e:
         bd:07:af:ba:6c:8e:37:f5:79:e2:6d:3c:64:e2:6e:c6:27:c4:
         1c:cd:63:ff
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZuVT+HDan3zmlv8ViqHXIm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh
Y2IwY2UwHhcNMjYwMTA2MjE1NjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzRkZGJhMTQ3MWZkMmMwNWJiZTAzMzJlYWE1NGM2N2FjYTI1MjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntD3zeab+5YJypfoQGhO9GsCI1Qy
yOKRfecsS40+g7Wc2Y5kL2Q1IySe5bdSG9tsfGlo2A3/XaHlRBobAB9udwMzys6M
tNujnyLuePguK4fkCGc0bSTTpEmeXGAU2O6K+8ok1zntNAvvRyJHJZs9NxM9UqxN
rbtA2HBlrnIyCU76vj6BEqplI9LbwxZlX3NGH89YtfiQtNY2WoTvuBc2qj0DE9JF
nimAdZeRxQq4TyP2c4IhgtuOlQ0mQ5a8iHcE9G9fzFBrDRYnT+a3o5HX9I4cFBBE
aljaieSoPr7Dw226/bpgBFvvhVcAdlsaF4O6oHqTQOdUTQ9a/4OpKKucqwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFJNN26FHH9LAW74DMuqlTGesolI/MB8GA1UdIwQY
MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct
MDUwMzc0OWFkZWEwLzEvazAzYm9VY2Ywc0JidmdNeTZxVk1aNnlpVWo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw
LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAPmpTAwQA
TfbyAwQAkhOOAwQAkhPkAwQAudq4AwQAwW1SAwQAw9j4MA0GCSqGSIb3DQEBCwUA
A4IBAQCrqW2Edz4VVWWBHgnzx6Xp6HM5pAX52cJiXrZV842LQlepCLJDb7OHsD+N
R3vHGNg1zuAvyB5QliG/a1IMCeIZ2dnYzt4bcL1Bhh67jNHDuEaPNd9rOCtFbwus
CWnCcraS2yAzsIePx6BilgIheWKTGZ5FK6pq/6gCuuuSz804EzjY4GIT5v8wlbFd
7N6k59XU63sEeCzMr053vHP9ko584jhK+whz9n6DTp8gubeP2ORtnpJPyCKbWVmr
b1QoTzs10YzyIUytAJTud2XmHeVDJfB45sbYvWmZLr3Py2oKEIEuXARis9yb3n69
B6+6bI439XnibTxk4m7GJ8QczWP/
-----END CERTIFICATE-----
Generated at Sun Jan 25 03:58:44 2026 by rpki-client