This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/1vE1bB4EDBxNcUGfUCxckstUSVo.roa
File:                     1vE1bB4EDBxNcUGfUCxckstUSVo.roa (raw, json)
Hash identifier:          ZcEWN1iWGFKaa88mWnoVaJOYXC/9DLTCOLoGub+bZ74=
Subject key identifier:   D6:F1:35:6C:1E:04:0C:1C:4D:71:41:9F:50:2C:5C:92:CB:54:49:5A
Certificate issuer:       /CN=7678742468cb01f0a526b4e92226fe3b74c67c41
Certificate serial:       019B7CED6D0872746550BCFC035B8F5D6D26
Authority key identifier: 76:78:74:24:68:CB:01:F0:A5:26:B4:E9:22:26:FE:3B:74:C6:7C:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/1vE1bB4EDBxNcUGfUCxckstUSVo.roa
Signing time:             Fri 02 Jan 2026 04:18:13 +0000
ROA not before:           Fri 02 Jan 2026 04:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43406
IP address blocks:        193.200.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:6d:08:72:74:65:50:bc:fc:03:5b:8f:5d:6d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7678742468cb01f0a526b4e92226fe3b74c67c41
        Validity
            Not Before: Jan  2 04:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d6f1356c1e040c1c4d71419f502c5c92cb54495a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:ff:41:dd:c5:a9:5f:85:e1:b1:b7:68:bd:
                    66:7c:ba:9f:ee:ae:15:57:4a:be:fc:10:47:b7:63:
                    e9:a8:b9:66:70:8c:82:23:46:bd:dc:b2:60:c9:05:
                    74:6e:d8:fb:72:4a:5c:59:33:5b:79:3e:9f:7e:d5:
                    88:15:f7:54:d5:28:b8:17:8c:9e:79:b6:21:af:1e:
                    13:13:e1:fb:fc:cc:52:ad:bf:36:6b:a2:9a:11:52:
                    ed:a1:6a:d0:a7:fa:92:9e:1f:61:24:2d:74:c7:3d:
                    b9:2f:75:aa:c2:1a:82:03:e6:52:33:a7:30:22:91:
                    08:86:1b:ac:26:5d:f7:be:fa:24:ab:83:58:6e:33:
                    0e:65:4e:ed:80:bc:a9:eb:f7:7e:8c:2f:04:12:d0:
                    77:02:4c:dd:63:ce:d0:cb:22:93:d7:f4:f7:06:28:
                    b8:b7:90:7c:fd:73:2d:07:69:ae:28:3f:a8:30:27:
                    fc:7f:b7:7e:ee:32:b7:b0:a5:01:30:10:2d:4c:58:
                    b1:19:07:6a:0f:fd:bd:fb:ed:9c:ef:22:c8:05:08:
                    a9:07:1a:8d:86:a4:0b:f9:47:66:79:24:2f:ef:01:
                    c9:4c:08:ff:bb:c4:b3:2b:fe:e6:2d:1f:ef:54:4b:
                    dd:89:ed:6d:17:62:eb:06:e8:77:bd:68:5e:2b:9a:
                    78:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F1:35:6C:1E:04:0C:1C:4D:71:41:9F:50:2C:5C:92:CB:54:49:5A
            X509v3 Authority Key Identifier:
                keyid:76:78:74:24:68:CB:01:F0:A5:26:B4:E9:22:26:FE:3B:74:C6:7C:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/1vE1bB4EDBxNcUGfUCxckstUSVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:73:52:97:ff:4c:84:bd:cf:97:14:10:cf:94:3c:95:c9:43:
         aa:83:9b:47:80:37:3b:3f:a1:16:d6:71:0d:c3:7f:93:c9:59:
         9a:4b:30:1f:77:0a:7b:00:d0:7a:00:6f:61:a3:6e:eb:67:89:
         c5:56:9c:9c:87:63:ea:46:2c:d1:5c:93:3a:eb:e2:ff:84:57:
         e9:80:11:85:4c:af:1d:fc:d9:83:8e:ba:7c:a0:25:72:44:dc:
         d2:d1:bf:d1:7f:ff:ad:e5:a4:9d:89:47:bf:04:99:f9:3e:99:
         33:29:5e:6c:03:29:8f:99:b7:5a:cb:52:42:71:10:01:de:5c:
         e2:28:73:b9:a9:74:87:b9:d9:e5:47:e5:2a:55:4d:0a:ca:4a:
         b8:d1:21:8b:66:32:5d:5c:84:03:55:ca:bf:b7:87:30:fa:74:
         2c:0d:1e:2d:36:57:a9:a3:c6:d8:30:8c:93:6c:2c:79:27:66:
         d5:c4:f1:b5:89:f1:b6:84:1a:d4:e9:70:19:f0:56:ae:22:d7:
         9a:29:da:7a:a5:45:21:07:76:c6:dc:e1:7c:eb:d6:4b:55:68:
         75:1d:13:a7:a1:70:de:30:86:3f:75:56:14:67:27:c8:56:0e:
         70:c2:df:95:85:cb:e7:c4:0b:17:ee:50:74:75:37:a1:1f:b1:
         e1:e9:27:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87W0IcnRlULz8A1uPXW0mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2Nzg3NDI0NjhjYjAxZjBhNTI2YjRlOTIyMjZmZTNiNzRj
NjdjNDEwHhcNMjYwMTAyMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmYxMzU2YzFlMDQwYzFjNGQ3MTQxOWY1MDJjNWM5MmNiNTQ0OTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzj/Qd3FqV+F4bG3aL1mfLqf7q4V
V0q+/BBHt2PpqLlmcIyCI0a93LJgyQV0btj7ckpcWTNbeT6fftWIFfdU1Si4F4ye
ebYhrx4TE+H7/MxSrb82a6KaEVLtoWrQp/qSnh9hJC10xz25L3WqwhqCA+ZSM6cw
IpEIhhusJl33vvokq4NYbjMOZU7tgLyp6/d+jC8EEtB3AkzdY87QyyKT1/T3Bii4
t5B8/XMtB2muKD+oMCf8f7d+7jK3sKUBMBAtTFixGQdqD/29++2c7yLIBQipBxqN
hqQL+UdmeSQv7wHJTAj/u8SzK/7mLR/vVEvdie1tF2LrBuh3vWheK5p4DQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNbxNWweBAwcTXFBn1AsXJLLVElaMB8GA1UdIwQY
MBaAFHZ4dCRoywHwpSa06SIm/jt0xnxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG5oMEpHakxBZkNsSnJUcElpYi1PM1RHZkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mNzFmYWYtM2E1Yi00NWQ4LThmMjUt
ZmE0NGM3YTA3ZDI3LzEvMXZFMWJCNEVEQnhOY1VHZlVDeGNrc3RVU1ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mNzFmYWYtM2E1Yi00NWQ4LThmMjUtZmE0NGM3YTA3ZDI3
LzEvZG5oMEpHakxBZkNsSnJUcElpYi1PM1RHZkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcibMA0G
CSqGSIb3DQEBCwUAA4IBAQCTc1KX/0yEvc+XFBDPlDyVyUOqg5tHgDc7P6EW1nEN
w3+TyVmaSzAfdwp7ANB6AG9ho27rZ4nFVpych2PqRizRXJM66+L/hFfpgBGFTK8d
/NmDjrp8oCVyRNzS0b/Rf/+t5aSdiUe/BJn5PpkzKV5sAymPmbday1JCcRAB3lzi
KHO5qXSHudnlR+UqVU0Kykq40SGLZjJdXIQDVcq/t4cw+nQsDR4tNlepo8bYMIyT
bCx5J2bVxPG1ifG2hBrU6XAZ8FauIteaKdp6pUUhB3bG3OF869ZLVWh1HROnoXDe
MIY/dVYUZyfIVg5wwt+VhcvnxAsX7lB0dTehH7Hh6SdH
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:46 2026 by rpki-client