This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/3FSpgzAXC8p7jTixkHlGezHGwxw.roa
File:                     3FSpgzAXC8p7jTixkHlGezHGwxw.roa (raw, json)
Hash identifier:          q7VRVi7aquIaQFPQCNGSGp5HYmtRuqJk7SNBV0vpXjc=
Subject key identifier:   DC:54:A9:83:30:17:0B:CA:7B:8D:38:B1:90:79:46:7B:31:C6:C3:1C
Certificate issuer:       /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial:       019B7F8504A3402ABAD485C78F6981065F23
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/3FSpgzAXC8p7jTixkHlGezHGwxw.roa
Signing time:             Fri 02 Jan 2026 16:23:02 +0000
ROA not before:           Fri 02 Jan 2026 16:23:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51061
IP address blocks:        193.110.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:04:a3:40:2a:ba:d4:85:c7:8f:69:81:06:5f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
        Validity
            Not Before: Jan  2 16:23:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dc54a98330170bca7b8d38b19079467b31c6c31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cc:ed:67:4f:34:fd:0a:54:57:0b:8c:ff:61:
                    d8:a4:0e:81:60:9f:6d:3b:21:51:04:14:2f:9c:b2:
                    5c:7d:73:b1:76:2a:06:f5:78:85:33:c7:a7:59:cd:
                    54:74:39:48:8f:7f:16:d1:c9:19:83:f0:ca:1e:08:
                    de:bc:d2:00:69:1d:82:81:2c:5d:29:2e:c0:72:8a:
                    17:0e:8c:30:66:ee:f4:d8:d0:d4:d3:9f:21:48:e3:
                    d5:d9:d1:a0:7a:1a:09:40:e8:9b:27:13:3f:33:5c:
                    35:83:6c:f4:e0:12:c0:4f:0b:23:9b:9c:1f:39:7b:
                    1b:bc:ca:72:15:9a:18:d9:13:32:f1:97:6d:67:d5:
                    e9:21:1b:8f:fd:51:48:1f:e0:72:6f:f1:c9:f0:88:
                    84:f7:1d:ed:8a:26:66:da:12:62:dc:09:e7:a6:31:
                    d6:42:d7:14:69:b4:8a:69:5e:bd:b8:e5:e8:5a:15:
                    ba:96:28:3b:25:4a:97:0b:d4:9f:49:61:46:b9:a8:
                    67:ad:7b:ff:13:df:4e:7c:4e:96:a7:13:f3:7d:1f:
                    68:97:6f:ba:be:61:94:01:c4:12:c4:ec:57:67:36:
                    b4:7a:6e:3c:a8:2b:de:f5:d8:af:73:8e:9a:49:fa:
                    d9:20:97:f7:de:86:3c:0b:59:42:66:dd:d0:c2:bf:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:54:A9:83:30:17:0B:CA:7B:8D:38:B1:90:79:46:7B:31:C6:C3:1C
            X509v3 Authority Key Identifier:
                keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/3FSpgzAXC8p7jTixkHlGezHGwxw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:33:43:a8:7a:db:03:cf:4d:37:1d:f4:63:c1:6d:74:83:c8:
         20:7a:22:4c:c2:51:31:e8:3c:91:50:a7:bb:47:4f:54:6a:72:
         2a:43:4d:7f:9a:54:fa:84:ba:f9:dc:3e:13:19:e8:8e:e8:4d:
         d0:1e:2d:7a:6e:1e:09:c7:a3:57:de:8f:c2:67:90:03:e6:f8:
         1f:8a:e3:ca:90:e7:ec:05:66:a0:6d:9f:dd:48:ef:c6:69:5a:
         50:3a:e4:0c:97:24:34:c9:5b:09:89:02:47:99:18:3f:b3:40:
         88:5c:ef:a3:f6:bd:c6:bd:0b:6b:b8:c6:48:63:85:a6:7b:a0:
         67:b5:5a:61:d8:40:b7:ef:a5:7d:13:c8:be:fd:69:9f:3c:8a:
         7f:bf:25:c2:8a:3c:d4:eb:0c:79:68:9e:f0:07:49:11:c1:7e:
         b4:08:ca:5d:60:6f:91:4d:10:50:5e:b9:a7:d6:d7:fb:82:f4:
         7f:a4:ed:62:0a:40:a2:b0:bf:99:fb:d2:1b:ee:6a:6c:e0:fc:
         5f:1b:c7:fa:0a:0e:aa:24:c2:05:60:a7:cc:01:1d:04:fa:c1:
         a6:c3:2a:da:6a:f7:14:31:f4:08:33:db:b2:10:f3:2c:59:c8:
         0a:56:9f:8a:7b:b2:da:f2:2b:8f:51:11:cb:de:a1:e6:49:78:
         ad:2d:53:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hQSjQCq61IXHj2mBBl8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzhhMGNhNzg5ODQyODNmYWI5ODZjOWI4MGE1YjA0MDk3
N2U1NTYwHhcNMjYwMTAyMTYyMzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzU0YTk4MzMwMTcwYmNhN2I4ZDM4YjE5MDc5NDY3YjMxYzZjMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MztZ080/QpUVwuM/2HYpA6BYJ9t
OyFRBBQvnLJcfXOxdioG9XiFM8enWc1UdDlIj38W0ckZg/DKHgjevNIAaR2CgSxd
KS7AcooXDowwZu702NDU058hSOPV2dGgehoJQOibJxM/M1w1g2z04BLATwsjm5wf
OXsbvMpyFZoY2RMy8ZdtZ9XpIRuP/VFIH+Byb/HJ8IiE9x3tiiZm2hJi3AnnpjHW
QtcUabSKaV69uOXoWhW6lig7JUqXC9SfSWFGuahnrXv/E99OfE6WpxPzfR9ol2+6
vmGUAcQSxOxXZza0em48qCve9divc46aSfrZIJf33oY8C1lCZt3Qwr8vzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNxUqYMwFwvKe404sZB5RnsxxsMcMB8GA1UdIwQY
MBaAFKPIoMp4mEKD+rmGybgKWwQJd+VWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhpZ3luaVlRb1A2dVliSnVBcGJCQWwzNVZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jMzM5ZGQtNDQzZi00YmE5LWE5NTkt
NjZkYjI1ZTE5OTBjLzEvM0ZTcGd6QVhDOHA3alRpeGtIbEdlekhHd3h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jMzM5ZGQtNDQzZi00YmE5LWE5NTktNjZkYjI1ZTE5OTBj
LzEvbzhpZ3luaVlRb1A2dVliSnVBcGJCQWwzNVZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwW6yMA0G
CSqGSIb3DQEBCwUAA4IBAQBYM0OoetsDz003HfRjwW10g8ggeiJMwlEx6DyRUKe7
R09UanIqQ01/mlT6hLr53D4TGeiO6E3QHi16bh4Jx6NX3o/CZ5AD5vgfiuPKkOfs
BWagbZ/dSO/GaVpQOuQMlyQ0yVsJiQJHmRg/s0CIXO+j9r3GvQtruMZIY4Wme6Bn
tVph2EC376V9E8i+/WmfPIp/vyXCijzU6wx5aJ7wB0kRwX60CMpdYG+RTRBQXrmn
1tf7gvR/pO1iCkCisL+Z+9Ib7mps4PxfG8f6Cg6qJMIFYKfMAR0E+sGmwyraavcU
MfQIM9uyEPMsWcgKVp+Ke7La8iuPURHL3qHmSXitLVML
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:03 2026 by rpki-client