This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/smnidOYe69oO55xZTobcKWGygYI.roa
File:                     smnidOYe69oO55xZTobcKWGygYI.roa (raw, json)
Hash identifier:          q2tFDWQKOHaPKe1BkVdfE8mFZF9krJjfYfAHh+hfLLM=
Subject key identifier:   B2:69:E2:74:E6:1E:EB:DA:0E:E7:9C:59:4E:86:DC:29:61:B2:81:82
Certificate issuer:       /CN=332293d0399160788b31e438760dc3bd1ed882eb
Certificate serial:       019B7F157C1B9382A33DAA1B73FB681D3A83
Authority key identifier: 33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/smnidOYe69oO55xZTobcKWGygYI.roa
Signing time:             Fri 02 Jan 2026 14:21:12 +0000
ROA not before:           Fri 02 Jan 2026 14:21:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     196681
IP address blocks:        95.215.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:7c:1b:93:82:a3:3d:aa:1b:73:fb:68:1d:3a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332293d0399160788b31e438760dc3bd1ed882eb
        Validity
            Not Before: Jan  2 14:21:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b269e274e61eebda0ee79c594e86dc2961b28182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e7:b5:90:3f:41:ef:9c:f6:16:c6:40:63:12:
                    05:e7:69:65:bc:a8:4e:67:dc:28:c8:aa:3b:e3:be:
                    f3:3c:fb:03:07:5c:cc:ba:6e:c8:ab:aa:48:98:78:
                    b0:5d:35:19:dc:af:2c:4b:fc:fe:22:58:3b:cf:15:
                    9a:10:9a:f8:57:4b:6e:c6:7d:d1:86:49:7d:00:b9:
                    4a:3d:4f:4f:82:ca:e0:ff:66:cc:95:61:76:cd:0e:
                    7f:c3:9f:9b:b0:19:95:32:82:72:bd:05:e9:90:c1:
                    c9:45:c7:6c:45:42:26:95:28:79:b9:ea:b7:a0:3e:
                    01:f8:5d:fc:1e:4b:68:aa:21:41:82:57:b6:45:0a:
                    b6:b3:de:b9:fe:fb:74:74:36:c1:41:52:f1:63:b8:
                    ea:04:02:f3:df:d5:62:8d:84:d0:3c:12:3e:0a:2a:
                    68:d0:17:9b:05:3f:6d:c7:c3:22:2d:5f:38:7d:40:
                    88:94:1b:bc:76:78:48:ea:0c:5b:12:46:a4:a5:fc:
                    77:61:65:01:25:af:ef:01:c8:3f:15:e2:32:65:3a:
                    7f:e0:f7:5e:e5:69:04:b7:8e:fe:78:d9:2d:1c:b4:
                    c9:2b:d2:ab:f4:36:41:79:d5:12:24:01:00:37:10:
                    d3:b0:71:15:24:54:64:74:80:1e:c8:40:1c:0d:9b:
                    6d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:69:E2:74:E6:1E:EB:DA:0E:E7:9C:59:4E:86:DC:29:61:B2:81:82
            X509v3 Authority Key Identifier:
                keyid:33:22:93:D0:39:91:60:78:8B:31:E4:38:76:0D:C3:BD:1E:D8:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/smnidOYe69oO55xZTobcKWGygYI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c8b1e5-7b95-4ca7-b2ba-222fe348268a/1/MyKT0DmRYHiLMeQ4dg3DvR7Ygus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.215.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:d8:c3:00:df:7e:87:50:7d:83:4e:68:f5:f9:ea:3e:b4:0d:
         07:94:68:f9:ea:9a:0f:b4:a4:e1:34:69:91:26:58:8e:94:2d:
         25:81:0d:7a:6c:5d:44:1e:df:33:23:ba:c4:15:4c:2e:d0:4f:
         51:54:a0:87:1f:12:42:52:74:d9:74:e5:92:6e:67:63:d8:07:
         ea:a6:8e:a4:c9:dc:31:3b:fe:56:8c:b9:62:45:a2:ff:84:dc:
         a6:b1:04:26:a9:7f:fe:f9:61:89:a7:13:db:aa:b4:43:f0:a7:
         81:b7:bf:28:d6:fb:c2:c5:3f:b3:24:3d:38:6d:7d:39:4c:a3:
         40:eb:35:56:9c:06:5e:7a:d8:50:be:ee:69:1a:e3:b7:98:42:
         e3:d3:ff:84:59:78:d8:e5:c8:96:c2:11:f4:11:cc:30:04:75:
         4b:64:d3:db:f2:10:67:cb:bc:a5:bc:28:78:85:00:89:f9:a0:
         1d:74:56:33:27:1c:06:2a:e8:17:d0:06:2d:13:c8:83:b4:85:
         a7:5f:93:f5:04:e8:76:eb:fb:bf:84:85:8f:b9:d1:66:09:55:
         e3:23:ac:64:de:91:ec:50:69:4f:14:63:af:c4:fd:b3:69:ee:
         25:00:1b:e8:64:46:1a:16:96:47:a6:5c:10:a2:90:22:84:08:
         c3:33:44:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FXwbk4KjPaobc/toHTqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMjI5M2QwMzk5MTYwNzg4YjMxZTQzODc2MGRjM2JkMWVk
ODgyZWIwHhcNMjYwMTAyMTQyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjY5ZTI3NGU2MWVlYmRhMGVlNzljNTk0ZTg2ZGMyOTYxYjI4MTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Oe1kD9B75z2FsZAYxIF52llvKhO
Z9woyKo7477zPPsDB1zMum7Iq6pImHiwXTUZ3K8sS/z+Ilg7zxWaEJr4V0tuxn3R
hkl9ALlKPU9Pgsrg/2bMlWF2zQ5/w5+bsBmVMoJyvQXpkMHJRcdsRUImlSh5ueq3
oD4B+F38HktoqiFBgle2RQq2s965/vt0dDbBQVLxY7jqBALz39VijYTQPBI+Cipo
0BebBT9tx8MiLV84fUCIlBu8dnhI6gxbEkakpfx3YWUBJa/vAcg/FeIyZTp/4Pde
5WkEt47+eNktHLTJK9Kr9DZBedUSJAEANxDTsHEVJFRkdIAeyEAcDZttUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLJp4nTmHuvaDuecWU6G3ClhsoGCMB8GA1UdIwQY
MBaAFDMik9A5kWB4izHkOHYNw70e2ILrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jOGIxZTUtN2I5NS00Y2E3LWIyYmEt
MjIyZmUzNDgyNjhhLzEvc21uaWRPWWU2OW9PNTV4WlRvYmNLV0d5Z1lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jOGIxZTUtN2I5NS00Y2E3LWIyYmEtMjIyZmUzNDgyNjhh
LzEvTXlLVDBEbVJZSGlMTWVRNGRnM0R2UjdZZ3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDX9fAMA0G
CSqGSIb3DQEBCwUAA4IBAQBW2MMA336HUH2DTmj1+eo+tA0HlGj56poPtKThNGmR
JliOlC0lgQ16bF1EHt8zI7rEFUwu0E9RVKCHHxJCUnTZdOWSbmdj2Afqpo6kydwx
O/5WjLliRaL/hNymsQQmqX/++WGJpxPbqrRD8KeBt78o1vvCxT+zJD04bX05TKNA
6zVWnAZeethQvu5pGuO3mELj0/+EWXjY5ciWwhH0EcwwBHVLZNPb8hBny7ylvCh4
hQCJ+aAddFYzJxwGKugX0AYtE8iDtIWnX5P1BOh26/u/hIWPudFmCVXjI6xk3pHs
UGlPFGOvxP2zae4lABvoZEYaFpZHplwQopAihAjDM0SH
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:02 2026 by rpki-client