This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tv--uDVRTnOlBD4wLkX6klTWyHk.roa
File:                     tv--uDVRTnOlBD4wLkX6klTWyHk.roa (raw, json)
Hash identifier:          qEzAzrlSWokkIKeqyNT/8ISEi/Bgf6cihp7sm1A5ZoM=
Subject key identifier:   B6:FF:BE:B8:35:51:4E:73:A5:04:3E:30:2E:45:FA:92:54:D6:C8:79
Certificate issuer:       /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial:       019B7D5A97C5612AB28BE26B17E17C9F3865
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tv--uDVRTnOlBD4wLkX6klTWyHk.roa
Signing time:             Fri 02 Jan 2026 06:17:27 +0000
ROA not before:           Fri 02 Jan 2026 06:17:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     40124
IP address blocks:        62.60.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5a:97:c5:61:2a:b2:8b:e2:6b:17:e1:7c:9f:38:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
        Validity
            Not Before: Jan  2 06:17:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b6ffbeb835514e73a5043e302e45fa9254d6c879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:04:68:f1:97:03:db:a4:b1:9f:6b:bf:a3:10:
                    7a:2c:f9:fd:df:21:23:5e:ff:4b:83:14:4f:44:74:
                    53:9d:a3:ed:c6:76:2c:07:86:d5:6f:63:8d:5f:4b:
                    8c:4b:0a:15:f5:62:5f:42:9e:b7:32:e6:2c:97:81:
                    98:66:aa:49:03:38:b3:60:b4:f7:5c:e9:58:84:94:
                    c5:96:9b:f8:a4:7c:90:47:f4:1e:59:4a:55:2a:ea:
                    e3:b2:fc:d3:20:5e:0b:b9:3d:9c:86:99:46:91:f2:
                    61:55:bd:d4:89:d9:e8:b4:2c:28:4c:e6:fb:34:3f:
                    70:d7:1c:66:70:c9:db:75:3f:e5:7b:27:a6:af:c9:
                    a5:43:ed:d9:05:9f:92:9d:ff:81:36:3b:84:68:b1:
                    59:3b:87:e6:44:fd:38:18:31:63:9b:69:98:68:5d:
                    c6:26:dc:d2:3e:91:65:ab:cc:73:50:4b:94:19:d4:
                    5f:f5:b2:1a:5b:4e:03:ab:66:a2:c7:de:d5:62:0a:
                    8b:01:0e:88:50:52:9d:c6:2a:d0:ed:ae:62:9e:a4:
                    06:f4:08:7a:33:cf:c6:51:07:14:3c:e0:1f:f5:6b:
                    72:25:84:c3:cc:1d:1d:50:39:9e:ce:cc:96:69:db:
                    c7:c0:14:d2:bd:32:a5:3f:be:a7:7b:88:d6:9c:96:
                    46:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FF:BE:B8:35:51:4E:73:A5:04:3E:30:2E:45:FA:92:54:D6:C8:79
            X509v3 Authority Key Identifier:
                keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/tv--uDVRTnOlBD4wLkX6klTWyHk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.60.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:84:a6:9f:34:c2:60:cf:6a:62:b6:d6:5c:e3:83:82:e3:98:
         41:8c:79:d0:41:bc:93:7c:92:18:6b:c9:3f:2f:6d:39:5c:c1:
         1a:57:bc:28:ac:52:97:df:10:e0:87:9b:4a:9f:85:ae:c4:8d:
         e9:36:29:7f:7e:57:de:76:74:1b:8a:d1:83:a4:f7:57:2e:fc:
         61:7c:63:68:93:22:c8:14:b4:7e:4a:c6:3e:5c:72:e5:ee:85:
         cb:7e:5b:8e:c4:6a:28:8d:84:95:ee:89:d5:2d:2f:a9:36:13:
         2d:ca:f6:8c:8b:ad:96:a1:a8:13:f7:47:d0:e5:a7:f3:ca:62:
         98:90:d9:bb:bf:1d:3a:d5:9a:4d:ce:00:b5:a7:a7:84:95:0e:
         44:0c:86:db:ba:46:c3:71:3e:a5:0e:9e:41:2d:1a:0c:0c:e8:
         d2:b7:70:44:d9:df:09:b6:1d:a0:78:e9:a4:c4:68:f1:24:45:
         72:a1:2f:f7:20:fd:51:ff:fc:9c:35:70:77:7f:96:b1:c5:0a:
         35:91:95:49:36:98:09:64:7c:68:83:a4:d6:48:3b:1d:53:21:
         a2:d1:86:fa:8c:c1:ec:dd:b9:a7:c5:26:bd:ea:ed:40:28:2d:
         b5:38:e3:cc:a2:e1:aa:49:90:84:d2:1a:ce:5a:e2:3e:aa:44:
         27:64:58:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:50:00 2026 by rpki-client