This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/tv3k8_tkXaxqUisHZsrZ24FV1-U.roa
File:                     tv3k8_tkXaxqUisHZsrZ24FV1-U.roa (raw, json)
Hash identifier:          +j2LkHTfDUaDhQsNd6JulSvZcuxXP5xrCRRkIe7nNyI=
Subject key identifier:   B6:FD:E4:F3:FB:64:5D:AC:6A:52:2B:07:66:CA:D9:DB:81:55:D7:E5
Certificate issuer:       /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial:       019B7910541FF0E84BD993DC800D116C2996
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/tv3k8_tkXaxqUisHZsrZ24FV1-U.roa
Signing time:             Thu 01 Jan 2026 10:17:51 +0000
ROA not before:           Thu 01 Jan 2026 10:17:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42831
IP address blocks:        37.75.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:54:1f:f0:e8:4b:d9:93:dc:80:0d:11:6c:29:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
        Validity
            Not Before: Jan  1 10:17:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b6fde4f3fb645dac6a522b0766cad9db8155d7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9a:20:43:51:3a:a2:7d:ef:b8:4f:16:cf:b6:
                    0c:b3:f2:07:b8:47:ed:bb:e4:82:1d:63:b5:c9:dc:
                    49:86:b5:26:1d:e1:c9:70:7b:2b:73:69:78:9d:21:
                    ca:62:af:cd:31:ab:50:0b:1a:ff:b8:e4:74:45:38:
                    4c:91:00:2a:2a:22:d8:cb:8a:a2:3a:f6:f8:ee:c4:
                    51:d9:78:04:50:25:d2:a8:90:06:f1:a0:3a:d8:33:
                    dd:08:6b:f8:d8:a5:67:6e:53:0d:f0:74:b2:42:2a:
                    84:40:0d:cd:9c:11:8a:1a:2e:05:59:89:6b:08:b9:
                    2c:2e:b4:5f:b6:8b:41:86:d2:63:84:4f:77:01:6b:
                    42:21:90:e6:7d:6b:ef:c2:3a:f7:94:f4:05:ba:cd:
                    e8:a9:1f:46:74:06:1e:89:4f:95:d4:2f:90:b2:b8:
                    0e:f8:67:36:11:0e:17:74:82:53:24:e6:41:00:d7:
                    03:3d:31:bd:36:5d:6e:1a:01:fc:4e:87:ce:ab:fb:
                    12:3a:17:fb:f5:4a:4c:8a:75:5d:3f:80:2b:d9:11:
                    5e:e4:19:c6:f7:46:1e:0d:de:2c:f6:b4:a8:f0:c8:
                    ed:3c:6f:e9:33:e2:c7:a9:1c:a5:a4:b6:9e:70:45:
                    42:a9:ca:0a:e7:c5:26:98:3c:93:b7:5b:83:74:4a:
                    9b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FD:E4:F3:FB:64:5D:AC:6A:52:2B:07:66:CA:D9:DB:81:55:D7:E5
            X509v3 Authority Key Identifier:
                keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/tv3k8_tkXaxqUisHZsrZ24FV1-U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.75.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:f0:0a:f2:b8:64:b6:ae:f0:e7:08:89:03:a0:60:41:ac:8a:
         1e:3d:e6:36:d9:c4:fa:c5:fa:b7:93:2d:f3:ac:26:b9:de:ac:
         36:a4:fc:bb:8e:20:41:1e:ba:e0:65:ce:af:db:e8:fa:2b:7c:
         0c:24:3e:12:29:7d:7f:91:aa:7d:c7:5f:f1:5f:fa:7e:34:71:
         8f:44:45:f5:b9:a3:0a:c6:c6:f0:20:5e:4b:6b:a2:e8:93:c0:
         60:d1:a2:70:91:35:62:b6:71:4b:8d:0c:2b:e8:85:bb:00:ef:
         37:e7:0d:a7:a8:0b:f5:0b:c4:17:ff:5f:3e:9a:7b:1e:d5:37:
         b1:c8:b7:77:e7:77:df:7c:0b:25:58:b8:cb:cc:85:31:8c:3d:
         bf:80:a8:07:74:da:4d:3e:d5:c7:b6:df:9a:36:7b:9d:5a:0d:
         20:3d:3c:28:4f:e7:96:50:e1:d1:4e:96:4b:6d:01:1c:dc:d5:
         cb:06:5f:a6:99:82:16:41:c7:a1:44:7c:a7:fc:3c:88:b6:c7:
         23:53:07:be:b2:d9:18:31:b3:e8:b3:70:0f:cb:34:56:9e:cb:
         b1:e6:b1:c7:44:66:cd:a8:e1:2c:06:54:23:c0:42:3c:96:e1:
         80:70:d8:47:4b:4c:71:bf:99:ab:09:2e:19:f7:64:bb:ff:30:
         fd:b4:9e:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5EFQf8OhL2ZPcgA0RbCmWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZjg0OTZiNzlkMWMwNGQwODJhZjgzZjFiZTZhNWVhYjBj
NjYwODkwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmZkZTRmM2ZiNjQ1ZGFjNmE1MjJiMDc2NmNhZDlkYjgxNTVkN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JogQ1E6on3vuE8Wz7YMs/IHuEft
u+SCHWO1ydxJhrUmHeHJcHsrc2l4nSHKYq/NMatQCxr/uOR0RThMkQAqKiLYy4qi
Ovb47sRR2XgEUCXSqJAG8aA62DPdCGv42KVnblMN8HSyQiqEQA3NnBGKGi4FWYlr
CLksLrRftotBhtJjhE93AWtCIZDmfWvvwjr3lPQFus3oqR9GdAYeiU+V1C+QsrgO
+Gc2EQ4XdIJTJOZBANcDPTG9Nl1uGgH8TofOq/sSOhf79UpMinVdP4Ar2RFe5BnG
90YeDd4s9rSo8MjtPG/pM+LHqRylpLaecEVCqcoK58UmmDyTt1uDdEqbmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLb95PP7ZF2salIrB2bK2duBVdflMB8GA1UdIwQY
MBaAFBP4SWt50cBNCCr4PxvmpeqwxmCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2Mt
NTRhMjVlMmNkYWE5LzEvdHYzazhfdGtYYXhxVWlzSFpzcloyNEZWMS1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9lZWIyNmYtNjc5MC00MmNlLThjY2MtNTRhMjVlMmNkYWE5
LzEvRV9oSmEzblJ3RTBJS3ZnX0ctYWw2ckRHWUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJUvrMA0G
CSqGSIb3DQEBCwUAA4IBAQBt8AryuGS2rvDnCIkDoGBBrIoePeY22cT6xfq3ky3z
rCa53qw2pPy7jiBBHrrgZc6v2+j6K3wMJD4SKX1/kap9x1/xX/p+NHGPREX1uaMK
xsbwIF5La6Lok8Bg0aJwkTVitnFLjQwr6IW7AO835w2nqAv1C8QX/18+mnse1Tex
yLd353fffAslWLjLzIUxjD2/gKgHdNpNPtXHtt+aNnudWg0gPTwoT+eWUOHRTpZL
bQEc3NXLBl+mmYIWQcehRHyn/DyItscjUwe+stkYMbPos3APyzRWnsux5rHHRGbN
qOEsBlQjwEI8luGAcNhHS0xxv5mrCS4Z92S7/zD9tJ6t
-----END CERTIFICATE-----
Generated at Mon Jan 19 23:20:50 2026 by rpki-client