This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/SvlUHPEW1JYqvcx4Sig5w6ZvEs4.roa
File:                     SvlUHPEW1JYqvcx4Sig5w6ZvEs4.roa (raw, json)
Hash identifier:          3dzxteST3Sn7w/rnwxT18SvADMJCfIyrcHE037Z9lyU=
Subject key identifier:   4A:F9:54:1C:F1:16:D4:96:2A:BD:CC:78:4A:28:39:C3:A6:6F:12:CE
Certificate issuer:       /CN=9422958431af5347bfd80e35503ddb48e71cf4d6
Certificate serial:       019B7B36B3FEAF56F588A054D47561E9204D
Authority key identifier: 94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/SvlUHPEW1JYqvcx4Sig5w6ZvEs4.roa
Signing time:             Thu 01 Jan 2026 20:19:01 +0000
ROA not before:           Thu 01 Jan 2026 20:19:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61206
IP address blocks:        193.169.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:b3:fe:af:56:f5:88:a0:54:d4:75:61:e9:20:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9422958431af5347bfd80e35503ddb48e71cf4d6
        Validity
            Not Before: Jan  1 20:19:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4af9541cf116d4962abdcc784a2839c3a66f12ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e5:f3:16:e8:3a:c6:50:4e:03:fb:d0:bb:91:
                    9c:b0:53:92:76:60:87:ce:73:d7:89:9a:8c:66:0d:
                    92:c4:91:f3:c4:c0:95:22:c2:c3:2f:b5:41:95:8a:
                    99:c8:85:43:d8:50:92:51:28:4f:45:6c:89:e6:b6:
                    5b:4e:bc:fb:ac:f3:d7:dc:be:80:26:c5:e5:64:dd:
                    73:cf:d6:94:32:78:8e:5b:d7:ea:8a:cf:a4:8d:b9:
                    1e:09:f3:cc:a1:65:f8:a9:e0:72:52:5b:c2:52:78:
                    33:b2:85:f2:67:18:2f:4f:e1:6a:c0:e2:2a:76:e9:
                    f1:c3:90:88:48:b6:9b:f6:f5:93:ce:c3:02:ce:f0:
                    c5:e6:4c:e3:81:61:59:75:87:a6:18:78:01:bf:76:
                    44:34:cf:48:bb:69:f8:11:f5:59:45:ee:5b:93:77:
                    9a:48:f0:be:7c:9d:f9:77:5c:95:b2:ca:97:95:b8:
                    a0:6b:06:cd:8f:10:68:1a:0a:40:1e:bf:3b:51:1b:
                    02:27:14:51:4d:40:ab:7a:59:21:28:f1:a1:94:a1:
                    01:c5:78:3b:b5:af:b6:a7:8b:0e:11:82:0e:b3:77:
                    04:d8:fd:2e:e9:78:b3:3e:a5:7a:97:3b:17:72:fb:
                    1b:aa:da:ee:ee:25:94:3d:b8:97:74:96:67:a5:8a:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F9:54:1C:F1:16:D4:96:2A:BD:CC:78:4A:28:39:C3:A6:6F:12:CE
            X509v3 Authority Key Identifier:
                keyid:94:22:95:84:31:AF:53:47:BF:D8:0E:35:50:3D:DB:48:E7:1C:F4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCKVhDGvU0e_2A41UD3bSOcc9NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/SvlUHPEW1JYqvcx4Sig5w6ZvEs4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/755468-2acc-4e9b-a5ea-e8a083f56ace/1/lCKVhDGvU0e_2A41UD3bSOcc9NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.169.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:37:d1:21:45:4c:54:0d:4f:ae:46:52:4b:e5:87:d1:78:e1:
         20:71:9e:b9:b3:8b:48:0c:56:d5:0c:50:b5:78:17:df:f3:af:
         8a:99:28:fa:6a:d4:fa:88:2b:b4:7d:af:10:66:51:76:31:63:
         af:b0:8f:54:27:93:3f:b7:1a:c4:07:d4:e6:87:0d:98:f1:b9:
         9c:0c:23:13:0e:12:73:b7:0e:e1:bc:41:6e:27:a6:81:0b:96:
         7d:67:8b:84:4c:fb:07:e9:d2:80:15:30:7f:a8:ee:d0:4d:6f:
         e5:ab:2e:a1:08:69:5f:e8:bc:bf:f1:96:ea:3f:51:bd:c6:ed:
         ec:f8:59:fd:72:15:f4:37:76:64:b2:23:f6:5a:b6:e7:52:31:
         6f:cb:45:66:b0:17:19:1b:0b:92:bc:d5:08:2b:b7:2f:d0:51:
         8a:59:5c:f7:78:de:75:33:38:d6:a4:44:79:eb:eb:9a:48:75:
         19:37:ed:63:f8:ec:2e:92:a9:67:8f:73:84:0a:6c:5f:a5:e2:
         76:eb:47:54:21:73:97:02:63:11:91:05:52:f8:f4:4a:27:04:
         e3:b6:09:2a:34:3d:df:3b:1b:03:0d:27:c0:c0:7c:c6:8a:3c:
         28:d0:3c:30:3d:46:f4:af:7b:87:bf:4d:25:53:39:66:01:07:
         00:d7:89:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NrP+r1b1iKBU1HVh6SBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjI5NTg0MzFhZjUzNDdiZmQ4MGUzNTUwM2RkYjQ4ZTcx
Y2Y0ZDYwHhcNMjYwMTAxMjAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWY5NTQxY2YxMTZkNDk2MmFiZGNjNzg0YTI4MzljM2E2NmYxMmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OXzFug6xlBOA/vQu5GcsFOSdmCH
znPXiZqMZg2SxJHzxMCVIsLDL7VBlYqZyIVD2FCSUShPRWyJ5rZbTrz7rPPX3L6A
JsXlZN1zz9aUMniOW9fqis+kjbkeCfPMoWX4qeByUlvCUngzsoXyZxgvT+FqwOIq
dunxw5CISLab9vWTzsMCzvDF5kzjgWFZdYemGHgBv3ZENM9Iu2n4EfVZRe5bk3ea
SPC+fJ35d1yVssqXlbigawbNjxBoGgpAHr87URsCJxRRTUCrelkhKPGhlKEBxXg7
ta+2p4sOEYIOs3cE2P0u6XizPqV6lzsXcvsbqtru7iWUPbiXdJZnpYpaMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEr5VBzxFtSWKr3MeEooOcOmbxLOMB8GA1UdIwQY
MBaAFJQilYQxr1NHv9gONVA920jnHPTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEt
ZThhMDgzZjU2YWNlLzEvU3ZsVUhQRVcxSllxdmN4NFNpZzV3Nlp2RXM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83NTU0NjgtMmFjYy00ZTliLWE1ZWEtZThhMDgzZjU2YWNl
LzEvbENLVmhER3ZVMGVfMkE0MVVEM2JTT2NjOU5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwanVMA0G
CSqGSIb3DQEBCwUAA4IBAQByN9EhRUxUDU+uRlJL5YfReOEgcZ65s4tIDFbVDFC1
eBff86+KmSj6atT6iCu0fa8QZlF2MWOvsI9UJ5M/txrEB9Tmhw2Y8bmcDCMTDhJz
tw7hvEFuJ6aBC5Z9Z4uETPsH6dKAFTB/qO7QTW/lqy6hCGlf6Ly/8ZbqP1G9xu3s
+Fn9chX0N3ZksiP2WrbnUjFvy0VmsBcZGwuSvNUIK7cv0FGKWVz3eN51MzjWpER5
6+uaSHUZN+1j+Owukqlnj3OECmxfpeJ260dUIXOXAmMRkQVS+PRKJwTjtgkqND3f
OxsDDSfAwHzGijwo0DwwPUb0r3uHv00lUzlmAQcA14ng
-----END CERTIFICATE-----
Generated at Sun Jan 25 23:31:35 2026 by rpki-client