This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/k6R2EMc1jHcegHcYvsEaV2UvlZA.roa
File:                     k6R2EMc1jHcegHcYvsEaV2UvlZA.roa (raw, json)
Hash identifier:          byoNW/ZgL2eaul6bek1NQxuUanhUUajegKqr92UrXrU=
Subject key identifier:   93:A4:76:10:C7:35:8C:77:1E:80:77:18:BE:C1:1A:57:65:2F:95:90
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       019B7F843F61CF2DF85D46BCD51D5BDA63E4
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/k6R2EMc1jHcegHcYvsEaV2UvlZA.roa
Signing time:             Fri 02 Jan 2026 16:22:11 +0000
ROA not before:           Fri 02 Jan 2026 16:22:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     174
IP address blocks:        194.39.216.0/24 maxlen: 24
                          2a0c:9e06::/32 maxlen: 32
                          2a0e:a944::/32 maxlen: 32
                          2a0e:a945::/32 maxlen: 32
                          2a0e:a946::/32 maxlen: 32
                          2a0e:a947::/32 maxlen: 32
                          2a0f:3b80::/32 maxlen: 32
                          2a0f:3b81::/32 maxlen: 32
                          2a0f:3b82::/32 maxlen: 32
                          2a0f:3b83::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 16:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:3f:61:cf:2d:f8:5d:46:bc:d5:1d:5b:da:63:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Jan  2 16:22:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=93a47610c7358c771e807718bec11a57652f9590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:11:c1:fc:75:61:11:eb:99:2a:d1:70:fd:
                    2f:30:08:87:53:aa:0e:5e:4b:63:15:83:49:fc:bf:
                    ff:a5:21:8c:36:70:41:6d:ae:1b:6a:6d:01:78:73:
                    47:73:3c:8f:9e:18:58:6f:4b:69:02:1f:6d:27:a1:
                    b2:41:e1:ad:dc:f6:de:38:3a:db:64:09:90:ef:e6:
                    1e:53:14:23:0f:24:c6:3b:99:9b:09:f0:14:56:3d:
                    c9:c9:19:22:27:56:e4:bf:ec:b9:9d:3b:80:b3:19:
                    98:79:0f:a4:8f:24:bd:b2:3c:64:17:bd:0b:2f:af:
                    f1:13:16:72:b6:a5:18:55:5a:cb:7d:c2:ed:4f:a4:
                    a7:8b:91:6d:52:ff:c3:94:58:14:3e:42:d3:9d:48:
                    5c:0f:7a:2e:90:02:52:02:8a:fc:e7:5a:6d:c5:5c:
                    0b:39:c9:2c:1c:b6:8c:b1:59:77:69:29:37:43:8e:
                    a3:ed:90:a2:81:52:a2:ab:a4:50:16:f1:7e:08:66:
                    cd:75:92:a6:a0:98:04:a3:c2:82:fc:fe:8f:a0:f1:
                    2c:91:02:5f:c1:c5:97:15:54:2d:81:e8:b6:45:d6:
                    be:c6:f7:12:a6:45:03:14:25:ea:c2:6e:6e:06:7d:
                    41:3c:8d:95:f1:06:53:68:d4:ad:a7:fb:61:e5:37:
                    53:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A4:76:10:C7:35:8C:77:1E:80:77:18:BE:C1:1A:57:65:2F:95:90
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/k6R2EMc1jHcegHcYvsEaV2UvlZA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.39.216.0/24
                IPv6:
                  2a0c:9e06::/32
                  2a0e:a944::/30
                  2a0f:3b80::/30

    Signature Algorithm: sha256WithRSAEncryption
         83:31:99:1c:60:85:a3:de:08:20:3d:42:eb:67:20:9c:6e:d6:
         28:61:84:84:19:15:e5:97:ca:3b:9d:d1:b7:c1:d9:74:1d:17:
         b8:29:6a:5c:f4:af:3c:a3:9d:6c:cc:03:ae:a6:ae:81:a5:eb:
         d8:7d:9e:5c:ac:9c:35:70:93:a4:19:3f:6b:8d:3d:14:f9:8e:
         54:ac:3d:df:68:20:43:86:a3:70:c2:3f:ce:5b:09:e0:6a:15:
         89:bc:8e:d8:91:b3:14:cd:a4:35:fe:0f:f2:a4:99:8a:b7:06:
         e5:89:25:7b:c0:d8:84:66:38:00:37:f4:c7:e3:3e:39:1b:31:
         ac:7f:26:0c:e3:7f:eb:f6:61:73:71:c7:a8:af:b5:c1:b7:e5:
         5f:57:ee:61:36:8d:ab:4f:33:82:00:30:85:f8:ed:9e:31:c0:
         d3:0a:f3:76:69:17:e5:0b:17:88:a5:e2:f3:67:88:30:ff:95:
         0f:a6:85:52:12:b0:d0:04:b8:7b:a9:45:ac:32:0b:92:33:1d:
         22:33:51:6b:9e:a9:f8:c4:10:bc:3c:fa:18:f6:6f:48:a0:a6:
         af:f3:92:50:37:2c:ef:5b:f1:9c:d7:2a:16:a8:d6:b3:70:28:
         5f:ba:04:e4:dd:78:03:2e:b1:b8:00:ff:02:ec:5d:cc:c8:73:
         e2:ba:b3:e3
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZt/hD9hzy34XUa81R1b2mPkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjYwMTAyMTYyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2E0NzYxMGM3MzU4Yzc3MWU4MDc3MThiZWMxMWE1NzY1MmY5NTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnMRwfx1YRHrmSrRcP0vMAiHU6oO
XktjFYNJ/L//pSGMNnBBba4bam0BeHNHczyPnhhYb0tpAh9tJ6GyQeGt3PbeODrb
ZAmQ7+YeUxQjDyTGO5mbCfAUVj3JyRkiJ1bkv+y5nTuAsxmYeQ+kjyS9sjxkF70L
L6/xExZytqUYVVrLfcLtT6Sni5FtUv/DlFgUPkLTnUhcD3oukAJSAor851ptxVwL
OcksHLaMsVl3aSk3Q46j7ZCigVKiq6RQFvF+CGbNdZKmoJgEo8KC/P6PoPEskQJf
wcWXFVQtgei2Rda+xvcSpkUDFCXqwm5uBn1BPI2V8QZTaNStp/th5TdTPwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFJOkdhDHNYx3HoB3GL7BGldlL5WQMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvazZSMkVNYzFqSGNlZ0hjWXZzRWFWMlV2bFpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAMBAIAATAGAwQAwifYMBsE
AgACMBUDBQAqDJ4GAwUCKg6pRAMFAioPO4AwDQYJKoZIhvcNAQELBQADggEBAIMx
mRxghaPeCCA9QutnIJxu1ihhhIQZFeWXyjud0bfB2XQdF7gpalz0rzyjnWzMA66m
roGl69h9nlysnDVwk6QZP2uNPRT5jlSsPd9oIEOGo3DCP85bCeBqFYm8jtiRsxTN
pDX+D/KkmYq3BuWJJXvA2IRmOAA39MfjPjkbMax/Jgzjf+v2YXNxx6ivtcG35V9X
7mE2jatPM4IAMIX47Z4xwNMK83ZpF+ULF4il4vNniDD/lQ+mhVISsNAEuHupRawy
C5IzHSIzUWueqfjEELw8+hj2b0igpq/zklA3LO9b8ZzXKhao1rNwKF+6BOTdeAMu
sbgA/wLsXczIc+K6s+M=
-----END CERTIFICATE-----
Generated at Mon Jan 12 00:54:09 2026 by rpki-client