This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/t81L2oNMVs_4MY46GyX1yEvIj9U.roa
File:                     t81L2oNMVs_4MY46GyX1yEvIj9U.roa (raw, json)
Hash identifier:          pwrJ0qMNKkC1K6Zg9D2v0cfG34xENPHVhxlFb8guVdo=
Subject key identifier:   B7:CD:4B:DA:83:4C:56:CF:F8:31:8E:3A:1B:25:F5:C8:4B:C8:8F:D5
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       019B7F8566E7A574874231ED2395A5A466D4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/t81L2oNMVs_4MY46GyX1yEvIj9U.roa
Signing time:             Fri 02 Jan 2026 16:23:27 +0000
ROA not before:           Fri 02 Jan 2026 16:23:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206446
IP address blocks:        194.87.183.0/24 maxlen: 24
                          194.87.211.0/24 maxlen: 24
                          195.133.33.0/24 maxlen: 24
                          195.133.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 13:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:66:e7:a5:74:87:42:31:ed:23:95:a5:a4:66:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jan  2 16:23:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7cd4bda834c56cff8318e3a1b25f5c84bc88fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1b:d3:33:ac:2a:b9:1e:df:8f:76:49:47:27:
                    58:f2:88:67:32:dc:31:47:fe:05:7c:af:81:7f:5a:
                    0a:92:5b:9e:3d:f4:64:e7:fb:ca:4b:73:52:13:52:
                    03:fb:8b:bc:fb:f9:42:4d:30:b6:ea:64:f5:90:f7:
                    d8:67:66:56:60:57:92:f4:02:89:77:06:59:67:4d:
                    3a:64:fb:9c:b3:5f:6c:86:05:38:31:b4:68:7e:26:
                    8d:b6:c2:63:50:c5:cd:3f:74:b2:77:3e:3b:9f:98:
                    ed:b9:84:d5:14:ef:3b:c3:ca:15:d8:3f:f1:58:64:
                    dc:b6:a3:ba:a5:9c:02:25:38:b4:00:b7:c8:ab:43:
                    9e:6b:8c:85:16:bd:de:31:cc:5d:d8:de:61:d8:83:
                    69:4e:9d:5a:b9:d7:e1:b0:32:03:0f:84:2e:13:4e:
                    7c:9e:ca:66:be:e2:c6:e7:f7:fa:63:56:0c:d8:bc:
                    e5:14:57:dc:d7:0a:f8:57:46:d5:53:e8:33:c2:f5:
                    31:6f:93:41:27:ed:82:96:d6:4f:65:80:ba:ea:b6:
                    44:5c:a8:ec:4e:77:21:2d:c2:77:e9:1c:10:0d:44:
                    1b:b4:c9:6c:be:59:83:e3:e6:88:22:ec:04:31:50:
                    7b:17:db:33:13:47:0c:3d:99:0d:40:e9:58:5d:78:
                    38:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CD:4B:DA:83:4C:56:CF:F8:31:8E:3A:1B:25:F5:C8:4B:C8:8F:D5
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/t81L2oNMVs_4MY46GyX1yEvIj9U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.183.0/24
                  194.87.211.0/24
                  195.133.33.0/24
                  195.133.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:55:38:60:96:d9:54:c0:ad:00:84:86:18:30:23:32:43:71:
         84:cd:7c:77:f3:c0:69:d5:d3:44:20:c1:94:3e:d6:0c:ec:69:
         15:9b:a9:ea:a1:6d:4e:14:3a:2a:df:24:23:bd:12:2d:cd:ed:
         18:3e:93:bf:17:2f:1a:e2:fd:93:e5:ec:74:6c:f1:cc:6e:42:
         0e:0b:d3:fe:35:53:91:8b:6e:c4:a9:ae:23:11:74:64:8f:13:
         fd:82:72:93:b6:cc:57:e0:af:21:e1:75:5e:12:58:24:e6:5f:
         64:b2:d9:3b:a5:d5:7e:1b:05:03:a9:a1:e9:0d:68:cb:a2:f3:
         f2:6f:2c:0d:06:1e:4f:43:e8:64:ee:d7:23:5c:6a:84:b5:01:
         53:95:a5:18:b9:3d:ca:84:e1:59:07:1b:e4:52:60:f3:b9:1a:
         d5:a7:aa:b9:de:7b:bf:a0:a9:78:2f:2a:89:96:91:73:54:f9:
         a6:2f:15:32:7a:c2:21:0c:a0:4c:f0:b8:0f:a2:5c:96:ad:95:
         dd:c2:93:95:b4:c2:0e:14:e9:e6:3b:c2:5b:bf:77:7f:1d:8c:
         08:7c:6c:f9:10:dd:e4:f4:9a:1b:2c:83:2b:14:9d:76:1f:91:
         78:78:b1:23:4f:7c:0c:59:7a:15:d5:33:49:ef:e0:5f:57:4b:
         18:9f:69:8c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZt/hWbnpXSHQjHtI5WlpGbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwMTAyMTYyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2NkNGJkYTgzNGM1NmNmZjgzMThlM2ExYjI1ZjVjODRiYzg4ZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xvTM6wquR7fj3ZJRydY8ohnMtwx
R/4FfK+Bf1oKkluePfRk5/vKS3NSE1ID+4u8+/lCTTC26mT1kPfYZ2ZWYFeS9AKJ
dwZZZ006ZPucs19shgU4MbRofiaNtsJjUMXNP3Sydz47n5jtuYTVFO87w8oV2D/x
WGTctqO6pZwCJTi0ALfIq0Oea4yFFr3eMcxd2N5h2INpTp1audfhsDIDD4QuE058
nspmvuLG5/f6Y1YM2LzlFFfc1wr4V0bVU+gzwvUxb5NBJ+2CltZPZYC66rZEXKjs
TnchLcJ36RwQDUQbtMlsvlmD4+aIIuwEMVB7F9szE0cMPZkNQOlYXXg4QQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLfNS9qDTFbP+DGOOhsl9chLyI/VMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvdDgxTDJvTk1Wc180TVk0Nkd5WDF5RXZJajlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwle3AwQA
wlfTAwQAw4UhAwQAw4VfMA0GCSqGSIb3DQEBCwUAA4IBAQBiVThgltlUwK0AhIYY
MCMyQ3GEzXx388Bp1dNEIMGUPtYM7GkVm6nqoW1OFDoq3yQjvRItze0YPpO/Fy8a
4v2T5ex0bPHMbkIOC9P+NVORi27Eqa4jEXRkjxP9gnKTtsxX4K8h4XVeElgk5l9k
stk7pdV+GwUDqaHpDWjLovPybywNBh5PQ+hk7tcjXGqEtQFTlaUYuT3KhOFZBxvk
UmDzuRrVp6q53nu/oKl4LyqJlpFzVPmmLxUyesIhDKBM8LgPolyWrZXdwpOVtMIO
FOnmO8Jbv3d/HYwIfGz5EN3k9JobLIMrFJ12H5F4eLEjT3wMWXoV1TNJ7+BfV0sY
n2mM
-----END CERTIFICATE-----
Generated at Mon Jan 19 20:00:53 2026 by rpki-client