This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/h0v3oBgbKQiyRbRBGPYugxHzdWY.roa
File:                     h0v3oBgbKQiyRbRBGPYugxHzdWY.roa (raw, json)
Hash identifier:          9x/39H1etXG02A8CjACZgUG8kycOzA/F/x5LJT/aF8U=
Subject key identifier:   87:4B:F7:A0:18:1B:29:08:B2:45:B4:41:18:F6:2E:83:11:F3:75:66
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       019B7D5AA2474A5E2A794BA64FBDEAF3EC34
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/h0v3oBgbKQiyRbRBGPYugxHzdWY.roa
Signing time:             Fri 02 Jan 2026 06:17:30 +0000
ROA not before:           Fri 02 Jan 2026 06:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210814
IP address blocks:        62.60.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 07:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:a2:47:4a:5e:2a:79:4b:a6:4f:bd:ea:f3:ec:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jan  2 06:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=874bf7a0181b2908b245b44118f62e8311f37566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:20:c5:5f:44:4a:8b:9d:7f:22:86:9e:21:
                    66:0a:65:98:48:55:b9:1f:50:aa:3e:7f:2e:79:60:
                    0c:0e:63:f9:12:26:67:2e:09:3b:28:cf:47:f9:2c:
                    a2:5e:d0:54:6d:af:11:27:d3:2a:55:09:0d:b2:1c:
                    af:82:38:eb:d5:99:c3:fd:ca:bf:e9:42:0e:cd:d4:
                    77:1c:27:45:20:d6:e7:63:7b:c1:22:f7:29:c9:e4:
                    5e:54:ae:c0:40:d8:60:77:4a:61:95:37:e1:59:ef:
                    8d:a1:8c:74:d0:c0:64:45:4e:ab:1e:83:2d:9e:69:
                    4a:ab:73:d1:a9:73:2f:75:e6:05:5c:86:db:34:89:
                    27:83:1d:2b:0b:be:05:22:eb:19:96:3b:1b:41:2b:
                    c6:06:90:93:87:24:78:1b:26:56:e2:6b:85:c6:06:
                    62:2a:73:1e:e8:c0:e1:0d:7e:55:08:34:7a:a6:09:
                    7c:6f:ad:a2:7f:52:58:aa:3f:3f:35:9c:0d:b6:e5:
                    a9:44:f3:35:50:df:2b:0f:17:ea:8d:cb:c2:fb:28:
                    ca:8d:6d:e3:4a:fc:f3:68:1e:37:2a:d1:4b:1e:25:
                    12:e3:46:24:59:7b:8b:b7:aa:36:3b:15:0c:b3:e6:
                    08:ef:8a:0d:61:df:60:fa:74:99:f2:5b:cc:68:6a:
                    62:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4B:F7:A0:18:1B:29:08:B2:45:B4:41:18:F6:2E:83:11:F3:75:66
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/h0v3oBgbKQiyRbRBGPYugxHzdWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:6f:9d:1d:0d:09:c8:39:d3:76:18:af:dc:42:20:4e:b9:60:
         17:a2:ef:38:1c:5d:db:88:be:03:be:9a:ba:12:48:ba:11:2c:
         a1:ac:c5:8c:10:a1:fb:2e:c2:14:2a:bc:10:19:ac:64:9c:d7:
         0e:d4:f1:c3:bf:7d:7d:98:de:e7:81:8a:16:e8:7c:1e:76:b0:
         14:d4:bf:34:9a:6d:56:dc:ad:06:61:eb:cb:d0:ff:50:da:6e:
         c1:d5:ca:88:83:10:2b:f4:38:0a:2d:5c:a8:68:7e:64:c6:4b:
         33:b6:76:c5:f6:0a:9a:d6:13:7e:f1:4b:1f:7d:67:17:6b:65:
         c7:79:12:de:5d:40:c6:cb:43:f9:c5:ca:7e:2b:d5:40:98:e7:
         49:41:54:4a:3c:5d:31:b4:58:94:d4:8f:28:60:c0:18:43:af:
         72:86:8a:64:14:32:f7:d4:6b:6a:bb:a5:99:e5:7a:f5:f7:ac:
         fa:2a:df:ab:a3:2f:b9:9a:d2:c3:28:fe:16:ae:a5:03:88:f5:
         34:3b:35:96:fd:db:18:06:08:e4:89:c5:5d:b6:9c:49:aa:53:
         6b:11:09:51:8f:f7:3b:7e:e1:ed:7e:4b:29:41:3d:8c:ca:6c:
         bd:bb:33:81:0f:4a:42:ba:a0:15:e7:f1:8c:f3:47:7b:d8:b4:
         9c:d3:4e:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9WqJHSl4qeUumT73q8+w0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjYwMTAyMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzRiZjdhMDE4MWIyOTA4YjI0NWI0NDExOGY2MmU4MzExZjM3NTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK8gxV9ESoudfyKGniFmCmWYSFW5
H1CqPn8ueWAMDmP5EiZnLgk7KM9H+SyiXtBUba8RJ9MqVQkNshyvgjjr1ZnD/cq/
6UIOzdR3HCdFINbnY3vBIvcpyeReVK7AQNhgd0phlTfhWe+NoYx00MBkRU6rHoMt
nmlKq3PRqXMvdeYFXIbbNIkngx0rC74FIusZljsbQSvGBpCThyR4GyZW4muFxgZi
KnMe6MDhDX5VCDR6pgl8b62if1JYqj8/NZwNtuWpRPM1UN8rDxfqjcvC+yjKjW3j
SvzzaB43KtFLHiUS40YkWXuLt6o2OxUMs+YI74oNYd9g+nSZ8lvMaGpiEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIdL96AYGykIskW0QRj2LoMR83VmMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvaDB2M29CZ2JLUWl5UmJSQkdQWXVneEh6ZFdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPjy+MA0G
CSqGSIb3DQEBCwUAA4IBAQDHb50dDQnIOdN2GK/cQiBOuWAXou84HF3biL4Dvpq6
Eki6ESyhrMWMEKH7LsIUKrwQGaxknNcO1PHDv319mN7ngYoW6HwedrAU1L80mm1W
3K0GYevL0P9Q2m7B1cqIgxAr9DgKLVyoaH5kxksztnbF9gqa1hN+8UsffWcXa2XH
eRLeXUDGy0P5xcp+K9VAmOdJQVRKPF0xtFiU1I8oYMAYQ69yhopkFDL31Gtqu6WZ
5Xr196z6Kt+roy+5mtLDKP4WrqUDiPU0OzWW/dsYBgjkicVdtpxJqlNrEQlRj/c7
fuHtfkspQT2Mymy9uzOBD0pCuqAV5/GM80d72LSc007G
-----END CERTIFICATE-----
Generated at Wed Jan 21 10:48:33 2026 by rpki-client