This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-P4ZLvB_6zGzP0MEJcjgABYhYEU.roa
File:                     1-P4ZLvB_6zGzP0MEJcjgABYhYEU.roa (raw, json)
Hash identifier:          ClVDt2CezCgflIGXqS6DwhrijNfqyRY8Wdh3wgVWXPo=
Subject key identifier:   F8:FE:19:2E:F0:7F:EB:31:B3:3F:43:04:25:C8:E0:00:16:21:60:45
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       019B7B35603551B5CC92B4CBBA29E70C0A66
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-P4ZLvB_6zGzP0MEJcjgABYhYEU.roa
Signing time:             Thu 01 Jan 2026 20:17:34 +0000
ROA not before:           Thu 01 Jan 2026 20:17:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16157
IP address blocks:        194.176.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:60:35:51:b5:cc:92:b4:cb:ba:29:e7:0c:0a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:17:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f8fe192ef07feb31b33f430425c8e00016216045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:cd:e3:56:83:62:b8:11:50:40:e4:83:6e:
                    c2:2b:f6:79:c5:27:dd:b2:c7:f4:6b:de:1c:60:5a:
                    8b:b5:21:d9:a7:33:36:69:40:d8:5e:9a:4d:b9:b3:
                    35:d8:7f:28:74:33:d6:9a:e2:e3:fd:3d:91:c6:55:
                    3b:59:b0:fd:cf:1b:c1:a2:83:dd:02:fe:06:c9:cc:
                    6e:6d:90:00:80:2c:0b:d6:ee:3e:62:9b:35:5f:94:
                    0c:db:7c:a0:88:56:56:ec:52:48:59:2e:3b:e9:c6:
                    9a:3b:28:02:8c:19:68:4a:dc:df:85:14:c3:e3:7e:
                    02:c0:9e:88:88:4b:3e:e5:67:53:88:04:11:db:00:
                    2c:c5:0b:d9:42:89:99:ab:32:cf:28:50:1d:d5:24:
                    9f:2a:17:87:f1:02:61:b8:1c:7d:c8:9b:00:09:8b:
                    25:67:c9:1e:bd:1e:de:c6:41:e5:bf:09:b1:7b:fa:
                    26:45:0c:38:91:68:fb:c1:3f:b3:4a:f3:33:bb:4b:
                    29:77:1d:ed:49:6e:60:e5:dd:35:24:34:64:69:e7:
                    88:62:61:e0:b4:1b:58:df:1a:8c:55:f6:87:42:b5:
                    77:c3:9a:10:56:86:42:a8:4d:67:cd:c8:28:f1:da:
                    86:ca:e4:d5:d4:87:8f:98:8c:12:32:2b:42:ef:1c:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FE:19:2E:F0:7F:EB:31:B3:3F:43:04:25:C8:E0:00:16:21:60:45
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-P4ZLvB_6zGzP0MEJcjgABYhYEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.176.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:5f:95:ad:4f:06:ae:45:15:6c:b5:94:e7:a1:a0:1c:5c:c8:
         ad:61:75:a9:8e:b0:74:17:07:f4:ca:5e:31:68:9b:49:51:d3:
         35:c3:10:9f:27:16:d3:57:96:65:00:ab:13:6d:4b:14:bf:d7:
         ce:eb:32:5c:e5:50:fe:d3:ed:0c:e0:b1:c6:91:33:06:4c:99:
         55:fc:f9:81:6e:a4:68:41:c1:69:01:7e:f6:37:49:65:a3:5b:
         62:18:40:c7:6a:0b:74:46:13:26:69:94:75:15:20:e2:76:13:
         bf:50:8e:ee:0a:0a:6c:58:04:61:11:bc:e8:34:95:b0:a0:a9:
         af:99:b5:0c:15:59:63:46:4e:ea:e0:6d:58:50:5a:61:06:51:
         43:f2:d2:6a:2d:04:e5:66:aa:68:29:e0:43:f1:56:4c:49:bf:
         be:dd:42:53:c1:b9:d6:6a:69:0a:d5:b7:0d:5c:bb:2d:ff:e5:
         e0:33:b4:c0:36:72:50:b8:2a:a6:d2:66:0f:bd:64:dd:78:77:
         5e:6c:90:62:3d:65:83:83:a2:86:47:ea:e3:15:db:89:f2:86:
         2d:57:81:a5:b4:e4:e3:b1:eb:c2:5d:1b:87:68:a4:c4:46:92:
         ef:cf:2f:e3:d3:ac:84:8b:58:d4:d4:86:7a:1f:54:2f:6f:a6:
         42:b7:72:ce
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZt7NWA1UbXMkrTLuinnDApmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwMTAxMjAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGZlMTkyZWYwN2ZlYjMxYjMzZjQzMDQyNWM4ZTAwMDE2MjE2MDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6XN41aDYrgRUEDkg27CK/Z5xSfd
ssf0a94cYFqLtSHZpzM2aUDYXppNubM12H8odDPWmuLj/T2RxlU7WbD9zxvBooPd
Av4GycxubZAAgCwL1u4+Yps1X5QM23ygiFZW7FJIWS476caaOygCjBloStzfhRTD
434CwJ6IiEs+5WdTiAQR2wAsxQvZQomZqzLPKFAd1SSfKheH8QJhuBx9yJsACYsl
Z8kevR7exkHlvwmxe/omRQw4kWj7wT+zSvMzu0spdx3tSW5g5d01JDRkaeeIYmHg
tBtY3xqMVfaHQrV3w5oQVoZCqE1nzcgo8dqGyuTV1IePmIwSMitC7xyiKwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPj+GS7wf+sxsz9DBCXI4AAWIWBFMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvMS1QNFpMdkJfNnpHelAwTUVKY2pnQUJZaFlFVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTUvNzE5M2RiLTdmODUtNDJiYi1iMDlhLWY1MmM0N2MyMjVk
Yi8xL01ZTjRXUmJObU5mSGNOYUZGRlNacUtDaFZ5SS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKwuTAN
BgkqhkiG9w0BAQsFAAOCAQEAmF+VrU8GrkUVbLWU56GgHFzIrWF1qY6wdBcH9Mpe
MWibSVHTNcMQnycW01eWZQCrE21LFL/XzusyXOVQ/tPtDOCxxpEzBkyZVfz5gW6k
aEHBaQF+9jdJZaNbYhhAx2oLdEYTJmmUdRUg4nYTv1CO7goKbFgEYRG86DSVsKCp
r5m1DBVZY0ZO6uBtWFBaYQZRQ/LSai0E5WaqaCngQ/FWTEm/vt1CU8G51mppCtW3
DVy7Lf/l4DO0wDZyULgqptJmD71k3Xh3XmyQYj1lg4Oihkfq4xXbifKGLVeBpbTk
47Hrwl0bh2ikxEaS788v49OshItY1NSGeh9UL2+mQrdyzg==
-----END CERTIFICATE-----
Generated at Tue Jan 20 02:49:13 2026 by rpki-client