This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/sEgm3_XRgBoM_m_4MZWUdV255ek.roa
File:                     sEgm3_XRgBoM_m_4MZWUdV255ek.roa (raw, json)
Hash identifier:          CpbzWWdHJIuAL6B0XSOZioEdqbZ10CLLsSA3gtv0Imo=
Subject key identifier:   B0:48:26:DF:F5:D1:80:1A:0C:FE:6F:F8:31:95:94:75:5D:B9:E5:E9
Certificate issuer:       /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial:       019B7EA6BB65D855CF0F72C388A46077BB7D
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/sEgm3_XRgBoM_m_4MZWUdV255ek.roa
Signing time:             Fri 02 Jan 2026 12:20:14 +0000
ROA not before:           Fri 02 Jan 2026 12:20:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207534
IP address blocks:        212.6.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:bb:65:d8:55:cf:0f:72:c3:88:a4:60:77:bb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
        Validity
            Not Before: Jan  2 12:20:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b04826dff5d1801a0cfe6ff8319594755db9e5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:5f:58:92:6b:d8:ea:84:5c:66:e2:c7:f5:
                    a3:ab:ba:a2:f9:96:e7:f8:f9:f4:f6:f8:a2:4e:b1:
                    15:92:5b:4d:50:75:55:ed:83:7e:3e:00:f7:e7:f4:
                    2b:a3:13:58:a7:4a:8b:16:a1:5f:5f:36:2e:d6:42:
                    bb:c3:1a:00:bd:ac:ec:79:2b:05:a4:b2:5e:ac:23:
                    23:12:de:9a:8b:d5:17:bf:32:1b:7b:f6:7a:62:bd:
                    77:30:5c:e1:7a:e5:0d:c0:1f:7f:24:b2:54:92:d0:
                    25:49:4b:3f:d1:82:a9:02:15:f2:cb:4c:90:84:59:
                    49:7c:b8:95:6d:dc:49:c3:28:71:66:de:5f:49:9b:
                    2d:2b:2f:83:93:a5:90:f5:1f:ca:ad:49:8a:be:69:
                    84:9a:d6:91:2c:6e:16:f3:4c:67:43:a9:61:35:5e:
                    20:45:a7:03:7e:aa:8c:d3:18:20:70:6f:ca:64:d2:
                    8c:d4:7d:10:4a:4b:52:85:50:d0:36:12:9a:32:7c:
                    c8:40:24:b5:ad:41:71:b6:d8:88:80:74:9e:e9:9e:
                    a1:62:e9:f6:d0:f4:86:a1:c5:4b:89:f6:6a:6a:ec:
                    e9:7e:18:b2:f4:9d:0e:e2:4c:bf:2a:61:3c:b7:75:
                    e4:76:a2:e4:4a:4a:5d:70:2a:01:ae:37:ba:f7:e5:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:48:26:DF:F5:D1:80:1A:0C:FE:6F:F8:31:95:94:75:5D:B9:E5:E9
            X509v3 Authority Key Identifier:
                keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/sEgm3_XRgBoM_m_4MZWUdV255ek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:dd:67:fe:eb:7f:cc:87:bc:7e:e0:08:e0:6e:94:b7:6a:81:
         9a:3a:b2:15:47:71:a0:34:a6:e0:12:50:71:ac:d9:ed:d0:52:
         92:50:00:ad:e8:d2:5b:90:cc:28:12:69:2d:bf:4a:6f:81:da:
         ff:4b:73:c8:3c:cb:60:2c:14:0e:07:b2:89:5d:47:44:f1:7d:
         7e:84:d3:4d:f5:31:d6:8b:ec:90:f6:33:34:56:cc:b0:13:a0:
         a4:7c:2a:b5:66:c7:55:42:23:ab:87:78:14:04:52:de:d9:b3:
         4b:42:e1:bf:6b:93:cb:9e:d2:61:8d:1f:d6:75:c5:85:73:28:
         69:a8:23:20:c7:77:22:c3:fa:40:ee:6f:39:09:d8:5a:51:e2:
         95:9a:a7:d8:4a:fd:3f:6b:71:f4:44:9a:73:ee:23:c7:86:d3:
         47:d4:0d:56:6c:26:00:67:78:3b:a2:88:bb:6d:1f:9d:89:cc:
         16:fa:24:2d:22:2c:1f:9a:c5:ef:a6:d3:7a:fe:08:21:67:4a:
         76:f5:d3:70:d5:15:77:1b:8f:b7:04:05:09:fc:4e:8c:db:65:
         01:6f:e7:d5:ac:6e:82:e0:14:47:f4:73:b4:aa:8c:87:70:da:
         30:8e:eb:72:3c:a4:5d:3e:95:e2:ce:75:2c:56:30:27:89:4c:
         31:8c:cc:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+prtl2FXPD3LDiKRgd7t9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZmMyNjg2YzI5YWJlZjE4ZjQwYjMwZTdlOTUxMzI0N2E2
NmVmMTMwHhcNMjYwMTAyMTIyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDQ4MjZkZmY1ZDE4MDFhMGNmZTZmZjgzMTk1OTQ3NTVkYjllNWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk9fWJJr2OqEXGbix/Wjq7qi+Zbn
+Pn09viiTrEVkltNUHVV7YN+PgD35/QroxNYp0qLFqFfXzYu1kK7wxoAvazseSsF
pLJerCMjEt6ai9UXvzIbe/Z6Yr13MFzheuUNwB9/JLJUktAlSUs/0YKpAhXyy0yQ
hFlJfLiVbdxJwyhxZt5fSZstKy+Dk6WQ9R/KrUmKvmmEmtaRLG4W80xnQ6lhNV4g
RacDfqqM0xggcG/KZNKM1H0QSktShVDQNhKaMnzIQCS1rUFxttiIgHSe6Z6hYun2
0PSGocVLifZqauzpfhiy9J0O4ky/KmE8t3XkdqLkSkpdcCoBrje69+U+wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLBIJt/10YAaDP5v+DGVlHVdueXpMB8GA1UdIwQY
MBaAFN78JobCmr7xj0CzDn6VEyR6Zu8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3Z3bWhzS2F2dkdQUUxNT2ZwVVRKSHBtN3hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNDUxNWUtODY0MS00NWIwLWI3NWYt
MDk2OTIxYzkxYzQxLzEvc0VnbTNfWFJnQm9NX21fNE1aV1VkVjI1NWVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNDUxNWUtODY0MS00NWIwLWI3NWYtMDk2OTIxYzkxYzQx
LzEvM3Z3bWhzS2F2dkdQUUxNT2ZwVVRKSHBtN3hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1AYhMA0G
CSqGSIb3DQEBCwUAA4IBAQAl3Wf+63/Mh7x+4AjgbpS3aoGaOrIVR3GgNKbgElBx
rNnt0FKSUACt6NJbkMwoEmktv0pvgdr/S3PIPMtgLBQOB7KJXUdE8X1+hNNN9THW
i+yQ9jM0VsywE6CkfCq1ZsdVQiOrh3gUBFLe2bNLQuG/a5PLntJhjR/WdcWFcyhp
qCMgx3ciw/pA7m85CdhaUeKVmqfYSv0/a3H0RJpz7iPHhtNH1A1WbCYAZ3g7ooi7
bR+dicwW+iQtIiwfmsXvptN6/gghZ0p29dNw1RV3G4+3BAUJ/E6M22UBb+fVrG6C
4BRH9HO0qoyHcNowjutyPKRdPpXiznUsVjAniUwxjMwx
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:37 2026 by rpki-client