This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/M-v28PFLiT56tATmxh_dxjXIz48.roa
File:                     M-v28PFLiT56tATmxh_dxjXIz48.roa (raw, json)
Hash identifier:          wk4xU/TxE3WuvzAmyr1klkvnIlWP+ZayRu5Ot8is1ek=
Subject key identifier:   33:EB:F6:F0:F1:4B:89:3E:7A:B4:04:E6:C6:1F:DD:C6:35:C8:CF:8F
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       019B7F8448186515C79AF7CB75A942976F8E
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/M-v28PFLiT56tATmxh_dxjXIz48.roa
Signing time:             Fri 02 Jan 2026 16:22:14 +0000
ROA not before:           Fri 02 Jan 2026 16:22:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61029
IP address blocks:        185.227.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:24:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:48:18:65:15:c7:9a:f7:cb:75:a9:42:97:6f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Jan  2 16:22:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=33ebf6f0f14b893e7ab404e6c61fddc635c8cf8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b9:82:d5:40:87:74:9b:4c:24:86:c3:3e:85:
                    4f:f7:ca:6c:0f:e3:a3:28:4e:63:86:dc:42:1a:c7:
                    29:ae:39:1a:02:38:51:42:ed:a1:68:d7:b6:cb:a4:
                    ed:f3:20:10:44:42:91:f3:d4:50:a4:db:32:29:67:
                    92:eb:ef:29:85:70:48:8a:58:23:04:73:60:6c:04:
                    79:96:90:6e:81:59:48:97:80:98:76:0a:b4:92:69:
                    94:1e:70:3d:7c:95:49:8b:25:ad:14:8e:5b:3f:86:
                    b6:ef:0d:8f:91:b3:3c:91:79:03:37:d8:e7:64:aa:
                    2b:3e:6e:52:65:e2:cd:91:5f:b6:fa:0f:92:ff:6f:
                    10:0d:03:e1:a2:cc:23:a1:08:7e:4a:ce:b6:31:63:
                    01:b7:07:99:db:c8:a3:d3:74:92:f5:7b:11:14:78:
                    71:68:23:8e:97:04:3a:f8:22:be:86:06:6c:8b:52:
                    61:5b:04:4b:26:9a:a5:2e:43:ef:04:ed:96:fa:b8:
                    10:79:1c:7e:29:34:68:ee:28:eb:c9:89:5d:cb:c5:
                    41:d9:ee:6b:65:ea:8c:84:1d:2e:f6:0c:4f:39:b6:
                    49:5a:08:26:b5:e7:cd:53:47:d1:d3:df:8d:c6:da:
                    b9:8a:e8:a2:dc:e5:d5:b3:b9:09:e9:ae:ed:73:38:
                    59:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EB:F6:F0:F1:4B:89:3E:7A:B4:04:E6:C6:1F:DD:C6:35:C8:CF:8F
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/M-v28PFLiT56tATmxh_dxjXIz48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.227.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:3a:5d:23:4c:24:f3:77:43:fb:92:db:86:83:5b:dc:96:1e:
         5a:fb:ef:1a:d7:cc:6a:e2:b4:4f:af:b3:5f:1b:bd:40:bb:61:
         74:25:92:29:fe:8c:4b:c4:14:f4:b3:18:c8:d9:93:e6:d2:c4:
         fd:6b:fe:cc:c8:2a:e4:47:c8:c8:71:eb:4b:33:d7:6c:47:5d:
         fe:04:0f:14:01:e3:c5:c0:19:80:62:64:3d:ca:53:7a:fc:7d:
         42:34:31:14:20:12:df:70:81:fd:0b:d6:b0:0b:83:e6:78:d8:
         99:ab:11:69:b8:a3:ce:20:7f:2c:48:93:30:e6:c7:0b:8b:81:
         4a:4e:2e:88:bf:5b:98:5b:c1:69:89:36:43:6e:58:b0:dc:96:
         ee:14:6d:d0:0f:f7:23:75:77:00:3e:a6:80:60:3e:d2:f1:25:
         b2:c1:c3:ba:3d:e2:6d:38:ba:ec:97:b2:de:67:f6:3a:12:8f:
         ac:be:b4:bd:42:5c:db:bc:e6:4b:0c:12:d3:16:f6:5d:89:25:
         c0:19:9a:30:1b:d1:54:92:94:f8:3b:1d:c8:9f:b1:4c:67:0c:
         e9:4e:fd:41:50:15:36:40:98:52:61:84:6c:ea:cc:72:4f:95:
         75:e8:c2:c3:c7:cc:5c:77:13:15:9b:e5:d4:71:10:09:b3:28:
         2b:33:ef:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hEgYZRXHmvfLdalCl2+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2ViZjZmMGYxNGI4OTNlN2FiNDA0ZTZjNjFmZGRjNjM1YzhjZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrmC1UCHdJtMJIbDPoVP98psD+Oj
KE5jhtxCGscprjkaAjhRQu2haNe2y6Tt8yAQREKR89RQpNsyKWeS6+8phXBIilgj
BHNgbAR5lpBugVlIl4CYdgq0kmmUHnA9fJVJiyWtFI5bP4a27w2PkbM8kXkDN9jn
ZKorPm5SZeLNkV+2+g+S/28QDQPhoswjoQh+Ss62MWMBtweZ28ij03SS9XsRFHhx
aCOOlwQ6+CK+hgZsi1JhWwRLJpqlLkPvBO2W+rgQeRx+KTRo7ijryYldy8VB2e5r
ZeqMhB0u9gxPObZJWggmtefNU0fR09+Nxtq5iuii3OXVs7kJ6a7tczhZDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDPr9vDxS4k+erQE5sYf3cY1yM+PMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvTS12MjhQRkxpVDU2dEFUbXhoX2R4alhJejQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueNQMA0G
CSqGSIb3DQEBCwUAA4IBAQAlOl0jTCTzd0P7ktuGg1vclh5a++8a18xq4rRPr7Nf
G71Au2F0JZIp/oxLxBT0sxjI2ZPm0sT9a/7MyCrkR8jIcetLM9dsR13+BA8UAePF
wBmAYmQ9ylN6/H1CNDEUIBLfcIH9C9awC4PmeNiZqxFpuKPOIH8sSJMw5scLi4FK
Ti6Iv1uYW8FpiTZDbliw3JbuFG3QD/cjdXcAPqaAYD7S8SWywcO6PeJtOLrsl7Le
Z/Y6Eo+svrS9QlzbvOZLDBLTFvZdiSXAGZowG9FUkpT4Ox3In7FMZwzpTv1BUBU2
QJhSYYRs6sxyT5V16MLDx8xcdxMVm+XUcRAJsygrM+/m
-----END CERTIFICATE-----
Generated at Wed Jan 21 16:59:08 2026 by rpki-client