This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/B0AwT1AxvZConXxpfYlz8S5oSuI.roa
File:                     B0AwT1AxvZConXxpfYlz8S5oSuI.roa (raw, json)
Hash identifier:          /ba96dMiwiLgM5bGs3qQwa8ZJcQUvwrwpVlv05ryZOI=
Subject key identifier:   07:40:30:4F:50:31:BD:90:A8:9D:7C:69:7D:89:73:F1:2E:68:4A:E2
Certificate issuer:       /CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
Certificate serial:       019B7A5B9A53E9549514EDAA6748A8035988
Authority key identifier: 5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/B0AwT1AxvZConXxpfYlz8S5oSuI.roa
Signing time:             Thu 01 Jan 2026 16:19:42 +0000
ROA not before:           Thu 01 Jan 2026 16:19:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     56612
IP address blocks:        195.128.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:9a:53:e9:54:95:14:ed:aa:67:48:a8:03:59:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c7196dc5f40f96d2de6799dc771baa3b53dcd82
        Validity
            Not Before: Jan  1 16:19:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0740304f5031bd90a89d7c697d8973f12e684ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:0b:52:05:37:a9:9b:e3:cc:d1:01:8a:49:
                    d2:1e:ba:c8:8a:27:38:3d:c1:03:c4:0d:aa:f8:b7:
                    4d:6c:12:2f:f5:df:a5:41:6c:68:31:65:a6:53:ab:
                    96:64:de:3c:27:30:58:fe:d5:fb:84:9e:0c:55:50:
                    03:b8:18:2c:5a:98:e6:4b:90:58:e8:ab:de:30:a1:
                    53:98:36:1e:8f:67:13:66:e5:59:3e:2c:5a:3b:fa:
                    79:48:1d:3c:77:dc:43:13:20:3d:8b:9e:9a:1a:cd:
                    b0:2a:6f:16:1c:c6:4c:3f:28:8f:e7:40:bb:86:78:
                    c9:e7:a4:5d:09:72:c5:b6:7f:50:51:71:02:9d:82:
                    57:58:02:b4:2d:52:b4:12:36:b8:9d:e3:d5:50:aa:
                    7e:aa:c2:a2:5f:47:ef:75:76:61:51:0f:0b:ad:0c:
                    3f:7a:62:a8:be:7f:f3:57:0f:7f:45:88:41:aa:a5:
                    aa:74:00:4e:c5:60:7b:36:7e:a4:54:d2:fb:a9:1c:
                    65:33:82:26:41:28:a3:16:0b:1c:49:21:71:e0:72:
                    d0:5e:fd:b1:05:41:81:8f:72:21:6e:67:45:ee:eb:
                    72:7b:c0:bc:b7:5c:95:83:ef:54:77:e1:65:4b:56:
                    2d:5a:28:fa:65:2c:fd:b1:db:34:19:35:e0:61:96:
                    74:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:40:30:4F:50:31:BD:90:A8:9D:7C:69:7D:89:73:F1:2E:68:4A:E2
            X509v3 Authority Key Identifier:
                keyid:5C:71:96:DC:5F:40:F9:6D:2D:E6:79:9D:C7:71:BA:A3:B5:3D:CD:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHGW3F9A-W0t5nmdx3G6o7U9zYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/B0AwT1AxvZConXxpfYlz8S5oSuI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/73ea59-c14d-42b8-b69c-c52b5dd0e7ac/1/XHGW3F9A-W0t5nmdx3G6o7U9zYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.128.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:53:4d:5a:a2:8a:fc:6d:9b:28:5c:6f:6a:f1:85:d7:ff:a5:
         08:95:49:87:4b:36:6d:77:bf:81:fd:92:5e:c0:5a:c4:e6:86:
         32:39:9c:45:bf:12:53:83:ca:f3:95:2c:bb:da:8d:08:ea:08:
         16:d5:b3:3b:f6:12:5c:95:43:64:88:34:26:b6:c4:68:03:7a:
         ed:40:4e:f4:3a:94:5c:9b:73:df:19:be:c9:65:3b:98:fd:0a:
         3d:26:89:6f:8e:14:a5:aa:21:65:56:6a:fb:c5:67:3b:ae:4b:
         62:3a:0f:10:58:67:d5:57:51:17:b8:0e:64:54:e4:6e:1a:1d:
         eb:92:ba:3f:ab:e2:d3:a1:ca:3b:8d:c9:b5:f1:1e:45:15:4c:
         90:76:a3:ff:5c:50:56:68:9b:82:12:a7:91:90:87:44:c4:64:
         cd:67:01:0d:7b:73:b8:d6:5a:81:68:c2:f8:e5:4d:f4:3c:85:
         c3:53:b1:26:8d:65:7c:4c:69:e1:c2:b9:19:97:c3:e4:ba:f3:
         c2:42:ee:a8:71:ef:00:18:36:a8:f9:5c:b7:b2:ec:60:10:8c:
         e4:25:6f:5f:c2:f6:f8:f4:e6:ba:70:ee:e4:7c:87:1f:fb:01:
         42:3f:fb:2a:12:34:56:69:75:1d:75:b0:04:3f:fb:b2:32:b2:
         ed:25:65:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6W5pT6VSVFO2qZ0ioA1mIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzE5NmRjNWY0MGY5NmQyZGU2Nzk5ZGM3NzFiYWEzYjUz
ZGNkODIwHhcNMjYwMTAxMTYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzQwMzA0ZjUwMzFiZDkwYTg5ZDdjNjk3ZDg5NzNmMTJlNjg0YWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjELUgU3qZvjzNEBiknSHrrIiic4
PcEDxA2q+LdNbBIv9d+lQWxoMWWmU6uWZN48JzBY/tX7hJ4MVVADuBgsWpjmS5BY
6KveMKFTmDYej2cTZuVZPixaO/p5SB08d9xDEyA9i56aGs2wKm8WHMZMPyiP50C7
hnjJ56RdCXLFtn9QUXECnYJXWAK0LVK0Eja4nePVUKp+qsKiX0fvdXZhUQ8LrQw/
emKovn/zVw9/RYhBqqWqdABOxWB7Nn6kVNL7qRxlM4ImQSijFgscSSFx4HLQXv2x
BUGBj3IhbmdF7utye8C8t1yVg+9Ud+FlS1YtWij6ZSz9sds0GTXgYZZ0PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAdAME9QMb2QqJ18aX2Jc/EuaEriMB8GA1UdIwQY
MBaAFFxxltxfQPltLeZ5ncdxuqO1Pc2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhHVzNGOUEtVzB0NW5tZHgzRzZvN1U5ellJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi83M2VhNTktYzE0ZC00MmI4LWI2OWMt
YzUyYjVkZDBlN2FjLzEvQjBBd1QxQXh2WkNvblh4cGZZbHo4UzVvU3VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi83M2VhNTktYzE0ZC00MmI4LWI2OWMtYzUyYjVkZDBlN2Fj
LzEvWEhHVzNGOUEtVzB0NW5tZHgzRzZvN1U5ellJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4CWMA0G
CSqGSIb3DQEBCwUAA4IBAQCLU01aoor8bZsoXG9q8YXX/6UIlUmHSzZtd7+B/ZJe
wFrE5oYyOZxFvxJTg8rzlSy72o0I6ggW1bM79hJclUNkiDQmtsRoA3rtQE70OpRc
m3PfGb7JZTuY/Qo9JolvjhSlqiFlVmr7xWc7rktiOg8QWGfVV1EXuA5kVORuGh3r
kro/q+LToco7jcm18R5FFUyQdqP/XFBWaJuCEqeRkIdExGTNZwENe3O41lqBaML4
5U30PIXDU7EmjWV8TGnhwrkZl8PkuvPCQu6oce8AGDao+Vy3suxgEIzkJW9fwvb4
9Oa6cO7kfIcf+wFCP/sqEjRWaXUddbAEP/uyMrLtJWVs
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:36 2026 by rpki-client