This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/KEev86svpAueO8veqiaCNQVfz30.roa
File:                     KEev86svpAueO8veqiaCNQVfz30.roa (raw, json)
Hash identifier:          RXmQ1JxbRP874/lUmshbm4kXFA2isYp/rpxg78PyQss=
Subject key identifier:   28:47:AF:F3:AB:2F:A4:0B:9E:3B:CB:DE:AA:26:82:35:05:5F:CF:7D
Certificate issuer:       /CN=7008acce90d475a0faa11d285486a453520b81f0
Certificate serial:       019B7A5AC0A28F944FEE259220AFBA3F1B84
Authority key identifier: 70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/KEev86svpAueO8veqiaCNQVfz30.roa
Signing time:             Thu 01 Jan 2026 16:18:46 +0000
ROA not before:           Thu 01 Jan 2026 16:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210434
IP address blocks:        2001:67c:16cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:c0:a2:8f:94:4f:ee:25:92:20:af:ba:3f:1b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7008acce90d475a0faa11d285486a453520b81f0
        Validity
            Not Before: Jan  1 16:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2847aff3ab2fa40b9e3bcbdeaa268235055fcf7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ae:0d:ef:a4:1f:1c:74:49:4b:dd:25:43:48:
                    62:95:9d:04:b4:17:eb:eb:7e:6a:7b:69:1e:88:5d:
                    c5:1b:4b:b5:0f:7c:67:36:8b:30:98:f1:d6:2b:d0:
                    03:72:f1:a4:51:d6:29:71:51:d5:95:46:96:b7:e0:
                    cd:d9:2b:9d:47:84:ec:67:7a:26:2d:cf:bd:04:f8:
                    f7:ce:5a:ff:0d:78:a5:77:4d:ce:e9:9c:26:07:ea:
                    5e:3e:53:b6:6f:39:f9:84:57:e5:35:50:d2:3d:87:
                    b4:da:4c:ee:a5:68:d8:89:d0:76:57:26:fc:8b:0d:
                    08:77:cf:f9:4b:a5:af:f2:c9:aa:c4:44:12:24:fc:
                    56:a2:03:94:c3:8b:7e:0c:1c:f2:da:1b:41:bc:19:
                    3d:4c:63:3f:df:ba:3d:fd:8f:fe:7d:3a:56:14:f5:
                    8f:f4:ef:bc:66:28:d5:38:33:2e:e4:7c:ca:e4:27:
                    b9:f0:48:e9:04:0d:76:62:01:db:84:02:d8:05:8a:
                    d2:1a:8c:c3:c8:d6:4a:67:48:bb:12:1a:c6:ee:9a:
                    12:2c:39:a7:b4:f6:eb:fa:08:da:21:8b:b4:21:18:
                    c1:79:03:af:e3:d2:d4:a8:be:ac:1d:0f:86:6a:aa:
                    b6:01:2d:7c:f0:98:0f:c5:ab:34:bb:97:93:80:a2:
                    19:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:47:AF:F3:AB:2F:A4:0B:9E:3B:CB:DE:AA:26:82:35:05:5F:CF:7D
            X509v3 Authority Key Identifier:
                keyid:70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/KEev86svpAueO8veqiaCNQVfz30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:16cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:2e:bc:96:44:e9:3e:38:84:be:d3:f7:9e:b0:a5:6d:d5:95:
         0d:ba:93:10:55:48:92:fa:4d:5c:00:ed:ab:9c:9c:30:a4:ff:
         81:5f:0b:da:3e:9e:1e:d4:2c:59:68:17:50:78:55:44:19:8a:
         df:59:4e:46:d2:ba:d5:ee:0a:d3:95:5c:8f:5b:f9:ae:bd:2c:
         1a:d2:7f:82:06:44:dc:18:b4:02:b4:92:02:d1:a0:d9:75:05:
         f7:30:95:d0:63:a8:00:c9:a4:04:96:e4:5d:33:62:51:cc:65:
         e6:ee:92:7d:4d:70:0b:b5:ef:e0:59:04:b7:d8:24:b1:5a:d1:
         5d:29:00:e5:4f:5d:1e:9d:46:f6:2d:01:6d:ee:06:1c:60:ee:
         f4:c9:88:1e:cb:59:4f:ee:2e:98:d1:a5:99:83:d7:87:24:99:
         8f:f7:00:95:4f:90:2f:ae:00:f6:9b:35:71:12:b8:55:9c:b8:
         77:e0:9f:98:4f:03:fe:b9:99:ba:8b:ba:78:43:e1:1b:11:d6:
         b2:24:22:1a:13:12:0a:a3:b0:ea:aa:71:a4:11:45:4e:83:06:
         1b:9f:3a:7a:54:af:f3:a3:dc:8d:f0:30:98:2a:47:70:01:e0:
         7f:91:03:8f:4d:2c:4a:c7:ad:8f:96:3f:e8:36:7c:89:58:5a:
         5e:c4:e9:76
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZt6WsCij5RP7iWSIK+6PxuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMDhhY2NlOTBkNDc1YTBmYWExMWQyODU0ODZhNDUzNTIw
YjgxZjAwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODQ3YWZmM2FiMmZhNDBiOWUzYmNiZGVhYTI2ODIzNTA1NWZjZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl64N76QfHHRJS90lQ0hilZ0EtBfr
635qe2keiF3FG0u1D3xnNoswmPHWK9ADcvGkUdYpcVHVlUaWt+DN2SudR4TsZ3om
Lc+9BPj3zlr/DXild03O6ZwmB+pePlO2bzn5hFflNVDSPYe02kzupWjYidB2Vyb8
iw0Id8/5S6Wv8smqxEQSJPxWogOUw4t+DBzy2htBvBk9TGM/37o9/Y/+fTpWFPWP
9O+8ZijVODMu5HzK5Ce58EjpBA12YgHbhALYBYrSGozDyNZKZ0i7EhrG7poSLDmn
tPbr+gjaIYu0IRjBeQOv49LUqL6sHQ+Gaqq2AS188JgPxas0u5eTgKIZdwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFChHr/OrL6QLnjvL3qomgjUFX899MB8GA1UdIwQY
MBaAFHAIrM6Q1HWg+qEdKFSGpFNSC4HwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0Fpc3pwRFVkYUQ2b1Iwb1ZJYWtVMUlMZ2ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85MTdkNTAtZmM2NC00YjNlLTkxZTkt
YTMxODkzYjBlYWZjLzEvS0Vldjg2c3ZwQXVlTzh2ZXFpYUNOUVZmejMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85MTdkNTAtZmM2NC00YjNlLTkxZTktYTMxODkzYjBlYWZj
LzEvY0Fpc3pwRFVkYUQ2b1Iwb1ZJYWtVMUlMZ2ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBbM
MA0GCSqGSIb3DQEBCwUAA4IBAQAHLryWROk+OIS+0/eesKVt1ZUNupMQVUiS+k1c
AO2rnJwwpP+BXwvaPp4e1CxZaBdQeFVEGYrfWU5G0rrV7grTlVyPW/muvSwa0n+C
BkTcGLQCtJIC0aDZdQX3MJXQY6gAyaQEluRdM2JRzGXm7pJ9TXALte/gWQS32CSx
WtFdKQDlT10enUb2LQFt7gYcYO70yYgey1lP7i6Y0aWZg9eHJJmP9wCVT5AvrgD2
mzVxErhVnLh34J+YTwP+uZm6i7p4Q+EbEdayJCIaExIKo7DqqnGkEUVOgwYbnzp6
VK/zo9yN8DCYKkdwAeB/kQOPTSxKx62Plj/oNnyJWFpexOl2
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:34 2026 by rpki-client