This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RVVvZqE2aCfamO6lz5HGPA-z9tU.roa
File:                     RVVvZqE2aCfamO6lz5HGPA-z9tU.roa (raw, json)
Hash identifier:          F9eXuFliX8Jf6buytqidoQR9YlE1AbNl2mvuy1RVVZY=
Subject key identifier:   45:55:6F:66:A1:36:68:27:DA:98:EE:A5:CF:91:C6:3C:0F:B3:F6:D5
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019B78A35BBD2B16B44CF7A18308A5B93EC6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RVVvZqE2aCfamO6lz5HGPA-z9tU.roa
Signing time:             Thu 01 Jan 2026 08:18:50 +0000
ROA not before:           Thu 01 Jan 2026 08:18:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     395793
IP address blocks:        87.121.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:5b:bd:2b:16:b4:4c:f7:a1:83:08:a5:b9:3e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 08:18:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=45556f66a1366827da98eea5cf91c63c0fb3f6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ee:34:18:14:82:21:36:35:60:20:c0:8b:33:
                    13:6c:e1:33:a9:bf:dd:85:0f:0c:ba:da:99:5d:ce:
                    c1:be:b9:1e:58:e3:d7:a9:3f:e9:f3:a9:03:52:89:
                    95:ca:27:48:bf:ca:3e:cd:3b:40:cb:ac:bb:c5:d2:
                    1c:38:97:1a:b9:72:81:e1:a5:63:e8:77:2e:82:1a:
                    95:8d:9b:24:e1:79:c7:33:73:45:56:40:e8:6c:e3:
                    85:18:94:d5:03:49:84:7c:bc:71:0c:8d:cb:a8:3c:
                    b8:d2:f5:a9:1a:ab:2e:42:bf:6f:68:5b:a6:f4:b8:
                    7c:f7:33:e0:1c:97:92:71:a7:43:4d:cd:13:68:50:
                    d6:10:89:50:c4:8b:89:7c:20:bf:e3:a8:3e:07:cc:
                    27:1f:88:ab:53:cf:f9:20:4c:62:f9:a3:43:aa:c8:
                    85:55:cf:bc:83:99:55:9a:5b:eb:60:ca:2a:55:2f:
                    6c:c2:ab:20:5c:cc:0e:ca:da:30:7b:1f:d6:27:49:
                    64:67:c0:3d:0c:fd:f1:c1:f0:53:18:44:79:58:7f:
                    01:2d:f5:60:48:50:f7:08:58:37:0f:3f:81:47:d1:
                    74:18:61:bb:c8:b8:cc:63:6a:02:f7:0b:a7:c6:91:
                    aa:93:aa:b9:5f:9e:74:c8:3d:e9:8a:88:9b:3e:38:
                    f3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:55:6F:66:A1:36:68:27:DA:98:EE:A5:CF:91:C6:3C:0F:B3:F6:D5
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RVVvZqE2aCfamO6lz5HGPA-z9tU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.121.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:7f:f5:f0:00:7c:dc:82:97:c7:20:42:0d:12:89:3f:fc:82:
         06:19:f0:38:79:ee:76:8d:1e:db:c5:c6:a0:71:7a:b2:fc:1e:
         20:51:17:d6:48:aa:a7:3d:a3:0e:3d:8d:7c:2a:a4:67:19:e8:
         df:81:56:bd:c7:1b:b6:20:60:dd:e3:bf:64:8f:89:a7:26:ad:
         9f:47:29:6b:6a:c3:73:02:da:bd:39:c2:c0:bc:7b:e5:0f:c3:
         f2:f9:e7:8b:22:a4:50:47:63:64:e6:27:5f:58:3e:d6:dd:c8:
         d7:b0:2f:26:b4:38:49:74:84:ec:44:36:fb:04:03:c2:1d:72:
         74:8c:91:6c:63:34:0c:0b:17:1d:f7:44:71:2f:2f:3f:0f:70:
         06:33:82:25:68:9c:31:05:48:8b:d0:67:38:12:02:5e:8b:24:
         9e:8f:68:d3:e6:d4:2d:97:70:a1:d8:12:a0:05:1e:27:4d:b1:
         a0:d6:31:bc:ef:15:4d:b1:cc:9b:cd:78:83:33:c2:ae:23:b8:
         f9:b5:4e:d1:a9:ed:01:60:83:72:01:46:95:3d:3f:f7:b1:25:
         3e:d1:3d:96:47:82:5a:71:d0:7e:cc:01:5d:56:8f:b6:cb:9c:
         ae:8f:22:e7:fa:4b:10:d8:3e:69:2b:c2:dd:d4:65:39:d8:85:
         bd:5f:b1:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4o1u9Kxa0TPehgwiluT7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTU1NmY2NmExMzY2ODI3ZGE5OGVlYTVjZjkxYzYzYzBmYjNmNmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO40GBSCITY1YCDAizMTbOEzqb/d
hQ8MutqZXc7BvrkeWOPXqT/p86kDUomVyidIv8o+zTtAy6y7xdIcOJcauXKB4aVj
6HcughqVjZsk4XnHM3NFVkDobOOFGJTVA0mEfLxxDI3LqDy40vWpGqsuQr9vaFum
9Lh89zPgHJeScadDTc0TaFDWEIlQxIuJfCC/46g+B8wnH4irU8/5IExi+aNDqsiF
Vc+8g5lVmlvrYMoqVS9swqsgXMwOytowex/WJ0lkZ8A9DP3xwfBTGER5WH8BLfVg
SFD3CFg3Dz+BR9F0GGG7yLjMY2oC9wunxpGqk6q5X550yD3pioibPjjzDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEVVb2ahNmgn2pjupc+RxjwPs/bVMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUlZWdlpxRTJhQ2ZhbU82bHo1SEdQQS16OXRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3mlMA0G
CSqGSIb3DQEBCwUAA4IBAQBRf/XwAHzcgpfHIEINEok//IIGGfA4ee52jR7bxcag
cXqy/B4gURfWSKqnPaMOPY18KqRnGejfgVa9xxu2IGDd479kj4mnJq2fRylrasNz
Atq9OcLAvHvlD8Py+eeLIqRQR2Nk5idfWD7W3cjXsC8mtDhJdITsRDb7BAPCHXJ0
jJFsYzQMCxcd90RxLy8/D3AGM4IlaJwxBUiL0Gc4EgJeiySej2jT5tQtl3Ch2BKg
BR4nTbGg1jG87xVNscybzXiDM8KuI7j5tU7Rqe0BYINyAUaVPT/3sSU+0T2WR4Ja
cdB+zAFdVo+2y5yujyLn+ksQ2D5pK8Ld1GU52IW9X7Er
-----END CERTIFICATE-----
Generated at Fri Jan 2 12:09:42 2026 by rpki-client