This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/A0vguZeSZvjbO1iAp7ep30taXaU.roa
File:                     A0vguZeSZvjbO1iAp7ep30taXaU.roa (raw, json)
Hash identifier:          OFdk7Efqg14eKcFzGkyEl7CmU/rQu1LKkHn7D4lTfd0=
Subject key identifier:   03:4B:E0:B9:97:92:66:F8:DB:3B:58:80:A7:B7:A9:DF:4B:5A:5D:A5
Certificate issuer:       /CN=215181b82776978ad2dbb69528dce9b2098eb07e
Certificate serial:       019B7CEE52F4F9A6DA122C097769CF387474
Authority key identifier: 21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/A0vguZeSZvjbO1iAp7ep30taXaU.roa
Signing time:             Fri 02 Jan 2026 04:19:12 +0000
ROA not before:           Fri 02 Jan 2026 04:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206293
IP address blocks:        195.5.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:52:f4:f9:a6:da:12:2c:09:77:69:cf:38:74:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215181b82776978ad2dbb69528dce9b2098eb07e
        Validity
            Not Before: Jan  2 04:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=034be0b9979266f8db3b5880a7b7a9df4b5a5da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:a5:09:80:e4:0f:e7:ac:10:c5:09:12:19:
                    d7:82:ad:e9:4f:0a:e1:cb:68:8a:c9:2b:a0:7e:4f:
                    41:a3:63:26:9c:fe:83:9c:c6:48:b5:67:86:f7:bb:
                    b0:59:a6:4e:63:b2:5c:c7:3a:34:9e:b1:ed:b8:cc:
                    44:a9:df:c4:ec:e4:05:9e:e3:67:d3:09:57:5f:c2:
                    a7:a6:c0:83:9c:0b:c6:d0:57:d0:19:33:3d:a9:19:
                    59:98:5c:78:98:87:7f:ea:6c:52:53:11:10:98:ed:
                    9d:a0:e0:7a:44:de:90:ae:1a:12:99:92:16:fd:97:
                    80:cb:dd:64:c3:9f:f4:b3:36:02:60:f3:49:32:60:
                    83:3c:5a:eb:01:f5:ff:e9:3a:fb:38:76:6e:4a:d9:
                    6c:fa:87:fd:bb:95:bf:de:8a:2d:88:81:09:77:9d:
                    71:72:92:42:b6:36:13:96:e8:75:eb:5e:78:2b:62:
                    ba:5d:43:cd:f4:73:d8:c6:3f:f6:14:2a:32:f0:b4:
                    59:88:87:87:9a:5f:68:af:a1:0f:60:ee:03:7a:1e:
                    1b:34:7b:f2:82:97:d0:c2:37:98:d2:29:bc:2a:9b:
                    4b:25:b1:2a:31:81:8d:e5:b8:53:80:d4:8c:01:66:
                    8b:66:f1:b3:33:42:da:c9:e1:fc:0d:2d:18:9b:87:
                    9e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4B:E0:B9:97:92:66:F8:DB:3B:58:80:A7:B7:A9:DF:4B:5A:5D:A5
            X509v3 Authority Key Identifier:
                keyid:21:51:81:B8:27:76:97:8A:D2:DB:B6:95:28:DC:E9:B2:09:8E:B0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVGBuCd2l4rS27aVKNzpsgmOsH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/A0vguZeSZvjbO1iAp7ep30taXaU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a3e965-9cf4-40e8-a085-49031c770487/1/IVGBuCd2l4rS27aVKNzpsgmOsH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.5.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:21:db:ac:e1:1d:35:52:00:73:0d:8e:83:e0:4b:75:75:6d:
         09:5b:a4:49:4d:90:89:de:66:4c:a3:39:f6:bc:b3:f6:d3:a6:
         85:f9:37:95:a3:ac:90:f5:c5:cb:7d:e6:19:02:e1:ea:de:4b:
         bc:ed:17:c0:00:19:7b:b8:2c:85:f0:f4:2f:65:dd:95:74:41:
         98:7c:bd:a1:55:2b:68:e1:0a:7f:4d:cc:8a:54:7e:3b:d4:ae:
         04:cf:82:c2:92:76:12:70:a8:c7:9a:03:9c:8d:04:d0:ba:d8:
         80:d8:6d:06:08:d3:ba:f5:02:ba:82:5c:55:c2:03:42:e5:57:
         e0:2e:1a:50:1c:60:e8:c2:d7:59:b6:d1:a9:b0:e1:1a:5e:6e:
         fb:3e:89:bf:7b:11:a4:50:3a:12:61:7b:ad:e3:b6:79:64:10:
         21:1b:87:5c:fb:b3:0f:5a:af:48:e9:f7:dc:74:75:07:c3:63:
         ac:d0:5a:9a:95:59:d5:e2:00:33:d2:a2:8d:1c:9f:18:c0:c9:
         fd:d0:ac:4f:72:d6:13:3c:85:1d:e8:d7:a3:bb:1c:d9:55:59:
         1f:da:7d:0a:9b:ad:f1:dd:fa:08:9b:37:54:ed:74:27:15:64:
         a7:23:e2:bc:4e:97:ce:26:c0:f7:2f:51:00:af:12:4a:9e:89:
         a2:f8:97:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:46:48 2026 by rpki-client