This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CpRBVACibwm3_2GxedTo5wyXmWo.roa
File:                     CpRBVACibwm3_2GxedTo5wyXmWo.roa (raw, json)
Hash identifier:          vt5oSHfF0roihuDiaaK88SXEJWdGIsN3pKbNNcaMN8A=
Subject key identifier:   0A:94:41:54:00:A2:6F:09:B7:FF:61:B1:79:D4:E8:E7:0C:97:99:6A
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       019B797EC940C99878E5C1FEA5B63C8DE051
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CpRBVACibwm3_2GxedTo5wyXmWo.roa
Signing time:             Thu 01 Jan 2026 12:18:30 +0000
ROA not before:           Thu 01 Jan 2026 12:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     55201
IP address blocks:        178.253.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:c9:40:c9:98:78:e5:c1:fe:a5:b6:3c:8d:e0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jan  1 12:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0a94415400a26f09b7ff61b179d4e8e70c97996a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:a7:ef:80:d0:16:9e:c9:0f:85:18:08:a8:
                    e2:04:09:8e:53:c3:b9:e7:2b:0b:4b:4b:68:91:7b:
                    fe:5a:f3:03:60:06:a4:a0:17:85:9d:41:35:34:bc:
                    ed:d0:86:e2:89:11:e2:f3:59:a7:e6:59:80:a1:c5:
                    96:be:0c:71:24:84:1a:1b:75:81:71:c7:64:79:93:
                    e1:8c:e4:70:76:f0:7b:8e:b6:35:7b:3e:1d:3b:8a:
                    5b:d5:f4:31:94:17:cc:c3:37:21:fc:56:89:ae:d6:
                    b1:20:f5:ed:e9:5d:59:43:ee:a5:58:14:9a:59:c0:
                    16:0a:4d:61:c4:59:94:0b:87:cd:ed:23:87:0c:89:
                    15:0f:8d:ed:fe:d3:91:6e:58:34:a4:b1:27:e1:dd:
                    35:45:5d:e9:60:d1:95:7a:7d:27:c4:90:33:48:cb:
                    a8:1e:de:11:0b:89:83:08:10:d6:6f:74:50:8d:27:
                    78:e0:38:24:22:e5:a9:d0:bf:fe:ec:e7:fe:1c:dd:
                    d1:9e:ff:d3:14:53:88:82:03:a4:28:bf:35:44:e1:
                    dc:86:db:9e:ce:ed:6a:41:4c:ca:4e:85:78:f0:df:
                    b2:0b:60:0f:ed:9c:0f:bf:3f:48:c5:3c:31:cf:24:
                    c1:8e:39:e9:9e:44:7c:39:db:5a:c3:85:a0:a6:90:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:94:41:54:00:A2:6F:09:B7:FF:61:B1:79:D4:E8:E7:0C:97:99:6A
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/CpRBVACibwm3_2GxedTo5wyXmWo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.253.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:26:4d:7d:27:d4:c1:86:e3:16:fe:40:5e:9f:95:e7:4c:
         eb:43:ed:21:15:2e:36:7f:71:2a:49:83:e6:7f:6c:ad:6f:2b:
         c5:4d:8e:99:8a:c9:6b:a0:94:08:c1:d8:dd:a9:4c:a1:6c:1e:
         e1:f2:82:60:f8:19:c1:38:67:c1:31:46:07:f2:65:56:29:49:
         f8:90:cc:40:04:79:3e:83:14:ec:d0:41:f8:37:92:11:16:de:
         91:97:ba:1e:ac:7b:3d:cd:76:c9:ac:8b:a4:71:bb:54:a6:c1:
         77:2d:28:b1:81:bd:65:0f:df:58:c9:d4:5f:64:f7:83:34:9e:
         f9:84:ec:37:62:34:25:e1:98:61:99:af:28:5f:8b:7b:fa:90:
         af:f7:3e:9a:a0:87:be:04:fb:6d:d1:b6:50:46:9f:86:0c:08:
         b3:ae:dc:7d:33:a4:63:ff:92:c6:df:7a:66:39:93:a4:4a:95:
         5c:4d:86:2d:8d:c1:82:06:88:f9:03:0b:6f:70:3a:d3:34:52:
         28:13:00:72:94:ec:9d:8a:6d:8d:c6:70:eb:fc:2a:8b:78:46:
         a6:e7:6b:f3:76:4c:fa:76:d9:33:96:51:20:f0:54:0f:f3:c4:
         7c:91:04:79:37:7a:c9:a4:7e:d4:69:9c:8a:4d:46:4d:07:22:
         43:ff:d4:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5fslAyZh45cH+pbY8jeBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTk0NDE1NDAwYTI2ZjA5YjdmZjYxYjE3OWQ0ZThlNzBjOTc5OTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp2n74DQFp7JD4UYCKjiBAmOU8O5
5ysLS0tokXv+WvMDYAakoBeFnUE1NLzt0IbiiRHi81mn5lmAocWWvgxxJIQaG3WB
ccdkeZPhjORwdvB7jrY1ez4dO4pb1fQxlBfMwzch/FaJrtaxIPXt6V1ZQ+6lWBSa
WcAWCk1hxFmUC4fN7SOHDIkVD43t/tORblg0pLEn4d01RV3pYNGVen0nxJAzSMuo
Ht4RC4mDCBDWb3RQjSd44DgkIuWp0L/+7Of+HN3Rnv/TFFOIggOkKL81ROHchtue
zu1qQUzKToV48N+yC2AP7ZwPvz9IxTwxzyTBjjnpnkR8Odtaw4WgppC9GQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAqUQVQAom8Jt/9hsXnU6OcMl5lqMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvQ3BSQlZBQ2lid20zXzJHeGVkVG81d3lYbVdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv3NMA0G
CSqGSIb3DQEBCwUAA4IBAQAuRiZNfSfUwYbjFv5AXp+V50zrQ+0hFS42f3EqSYPm
f2ytbyvFTY6ZislroJQIwdjdqUyhbB7h8oJg+BnBOGfBMUYH8mVWKUn4kMxABHk+
gxTs0EH4N5IRFt6Rl7oerHs9zXbJrIukcbtUpsF3LSixgb1lD99YydRfZPeDNJ75
hOw3YjQl4Zhhma8oX4t7+pCv9z6aoIe+BPtt0bZQRp+GDAizrtx9M6Rj/5LG33pm
OZOkSpVcTYYtjcGCBoj5AwtvcDrTNFIoEwBylOydim2NxnDr/CqLeEam52vzdkz6
dtkzllEg8FQP88R8kQR5N3rJpH7UaZyKTUZNByJD/9QK
-----END CERTIFICATE-----
Generated at Mon Jan 19 13:53:25 2026 by rpki-client