This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/H6jqDEJRJpVr93f9cwyj02eDJQY.roa
File:                     H6jqDEJRJpVr93f9cwyj02eDJQY.roa (raw, json)
Hash identifier:          mWxd5ho3il9qT+YkcgFPJftqIG0LtGdKvw/h7Kypl5g=
Subject key identifier:   1F:A8:EA:0C:42:51:26:95:6B:F7:77:FD:73:0C:A3:D3:67:83:25:06
Certificate issuer:       /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial:       019B78352585CCE802E28DE7688CCCCA5548
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/H6jqDEJRJpVr93f9cwyj02eDJQY.roa
Signing time:             Thu 01 Jan 2026 06:18:27 +0000
ROA not before:           Thu 01 Jan 2026 06:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210895
IP address blocks:        188.137.178.0/24 maxlen: 24
                          188.137.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:25:85:cc:e8:02:e2:8d:e7:68:8c:cc:ca:55:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
        Validity
            Not Before: Jan  1 06:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1fa8ea0c425126956bf777fd730ca3d367832506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:05:74:b2:7f:d7:89:34:fa:10:80:ae:0b:6c:
                    ff:53:b2:a1:52:47:6c:53:25:ab:31:42:97:ff:d1:
                    7e:c8:69:79:20:17:f9:a6:ef:80:fb:ac:2b:50:6c:
                    4a:5a:86:fa:e6:22:4c:6b:53:45:88:42:8c:f8:c9:
                    cb:dc:db:46:68:ca:51:e7:bb:b3:ef:2f:ff:6e:e4:
                    a3:d7:a6:a2:75:02:ef:5c:9d:e0:a6:18:bc:09:34:
                    8c:8f:40:4f:fa:cb:ee:37:29:7c:53:e4:8a:c2:db:
                    a4:cd:72:a2:ad:af:7b:2e:6b:b4:97:81:6e:f6:3a:
                    4b:72:f8:6c:e2:c7:90:d1:73:cd:33:ee:98:00:41:
                    66:06:ce:f8:05:2b:1a:63:57:1a:32:52:a7:53:52:
                    87:05:12:9e:91:7c:2e:05:97:79:6a:f7:51:c9:d1:
                    35:60:33:fe:4a:de:63:d9:ec:43:3b:23:f5:fd:ab:
                    c5:d1:86:14:49:a0:38:89:6b:08:ca:98:29:bc:a9:
                    bf:bd:7a:ad:7a:d4:58:25:c4:45:ea:29:c4:13:67:
                    17:b6:bf:fe:a1:c7:23:5a:bf:10:cc:0e:2c:2c:63:
                    8f:9b:6b:a4:d8:46:bf:7f:65:58:94:9e:51:bc:c6:
                    b2:ec:4a:be:61:0c:41:26:db:75:e4:8a:cb:9e:e3:
                    82:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A8:EA:0C:42:51:26:95:6B:F7:77:FD:73:0C:A3:D3:67:83:25:06
            X509v3 Authority Key Identifier:
                keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/H6jqDEJRJpVr93f9cwyj02eDJQY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.137.178.0/24
                  188.137.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:c6:22:cf:fe:0c:7e:8c:bf:ea:55:cf:e3:33:8a:98:0a:b8:
         07:e7:68:58:4b:ce:31:4b:a0:6e:06:ae:49:88:3f:b0:92:33:
         ad:67:57:35:18:32:ff:9d:c1:e1:07:d8:5c:98:a0:92:41:52:
         72:de:d3:4d:e4:c3:da:40:40:e6:4b:eb:8b:a5:19:e1:93:6e:
         7b:ac:45:fd:56:22:11:8d:8e:07:ff:a9:12:5f:fb:68:47:1b:
         80:43:a0:b2:ec:bd:cf:8f:01:59:fa:e2:6d:3c:d4:ef:f6:fe:
         ec:61:22:12:2c:2d:71:fb:1a:20:d6:c3:c3:b2:34:28:0a:a7:
         d9:7c:5c:f9:bc:70:4e:26:b6:93:79:a1:bd:34:fe:23:b7:41:
         76:10:97:55:52:4e:d5:ac:c2:0e:2e:6d:38:85:51:37:f9:5e:
         e0:8e:87:91:0a:76:7f:97:90:59:48:0c:96:f4:65:0e:af:44:
         06:d1:8a:f8:b7:1a:da:f1:a9:cb:a6:5a:e9:81:69:c4:56:57:
         3d:34:f9:84:26:8c:c7:83:fd:2b:20:4a:72:6a:3c:b7:33:56:
         fa:a2:36:f7:2a:2f:90:2c:9a:88:0e:9a:cb:3a:76:8b:2d:45:
         4f:74:ba:15:a5:94:7d:24:db:ce:46:cf:4d:8c:9a:ec:c7:52:
         0a:6d:e6:3c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt4NSWFzOgC4o3naIzMylVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NGE4MmFhNWUyZWI3MTcxOWI3ZjlmMDQ5YTMwN2IxMjQ1
NDQ5N2UwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmE4ZWEwYzQyNTEyNjk1NmJmNzc3ZmQ3MzBjYTNkMzY3ODMyNTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQV0sn/XiTT6EICuC2z/U7KhUkds
UyWrMUKX/9F+yGl5IBf5pu+A+6wrUGxKWob65iJMa1NFiEKM+MnL3NtGaMpR57uz
7y//buSj16aidQLvXJ3gphi8CTSMj0BP+svuNyl8U+SKwtukzXKira97Lmu0l4Fu
9jpLcvhs4seQ0XPNM+6YAEFmBs74BSsaY1caMlKnU1KHBRKekXwuBZd5avdRydE1
YDP+St5j2exDOyP1/avF0YYUSaA4iWsIypgpvKm/vXqtetRYJcRF6inEE2cXtr/+
occjWr8QzA4sLGOPm2uk2Ea/f2VYlJ5RvMay7Eq+YQxBJtt15IrLnuOCzwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB+o6gxCUSaVa/d3/XMMo9NngyUGMB8GA1UdIwQY
MBaAFFRKgqpeLrcXGbf58EmjB7EkVEl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYt
MDJkZTAxMjQyMjhlLzEvSDZqcURFSlJKcFZyOTNmOWN3eWowMmVESlFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9jNTAxOGMtZmRjNi00MTRiLWJlZWYtMDJkZTAxMjQyMjhl
LzEvVkVxQ3FsNHV0eGNadF9ud1NhTUhzU1JVU1g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvImyAwQA
vIn0MA0GCSqGSIb3DQEBCwUAA4IBAQADxiLP/gx+jL/qVc/jM4qYCrgH52hYS84x
S6BuBq5JiD+wkjOtZ1c1GDL/ncHhB9hcmKCSQVJy3tNN5MPaQEDmS+uLpRnhk257
rEX9ViIRjY4H/6kSX/toRxuAQ6Cy7L3PjwFZ+uJtPNTv9v7sYSISLC1x+xog1sPD
sjQoCqfZfFz5vHBOJraTeaG9NP4jt0F2EJdVUk7VrMIOLm04hVE3+V7gjoeRCnZ/
l5BZSAyW9GUOr0QG0Yr4txra8anLplrpgWnEVlc9NPmEJozHg/0rIEpyajy3M1b6
ojb3Ki+QLJqIDprLOnaLLUVPdLoVpZR9JNvORs9NjJrsx1IKbeY8
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:47:11 2026 by rpki-client