This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/4B_VfQWMTYDObUKM-BwKNSOeYqM.roa
File:                     4B_VfQWMTYDObUKM-BwKNSOeYqM.roa (raw, json)
Hash identifier:          GtaOXYjrA7K8muzv0dOWQS3DgfVa4oJVWDqmEM1Lb0o=
Subject key identifier:   E0:1F:D5:7D:05:8C:4D:80:CE:6D:42:8C:F8:1C:0A:35:23:9E:62:A3
Certificate issuer:       /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial:       019B7C1344582FA2D6077A8F65672400C048
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/4B_VfQWMTYDObUKM-BwKNSOeYqM.roa
Signing time:             Fri 02 Jan 2026 00:19:56 +0000
ROA not before:           Fri 02 Jan 2026 00:19:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        188.227.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:44:58:2f:a2:d6:07:7a:8f:65:67:24:00:c0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
        Validity
            Not Before: Jan  2 00:19:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e01fd57d058c4d80ce6d428cf81c0a35239e62a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:0c:b7:74:f6:3c:20:86:fc:77:5c:0b:0d:
                    e8:cd:e3:d4:02:8d:92:32:66:e5:7d:a1:c0:ef:c3:
                    c5:9e:26:ea:0b:7a:f1:70:28:03:6e:71:79:e4:8b:
                    2a:3a:30:79:a8:cf:55:c9:65:e9:d2:42:a9:0d:df:
                    73:f5:af:5c:6a:60:ba:a3:1d:99:2d:ea:17:11:b3:
                    65:0d:d2:2e:ee:0c:a3:87:4a:3d:6a:03:51:30:fb:
                    6f:9c:0e:b1:89:9e:ff:7c:f7:53:c2:96:8f:69:4f:
                    88:e2:53:5b:f3:c1:37:b3:69:25:b9:18:42:21:68:
                    be:fc:cb:8e:ef:71:68:2a:06:ce:8f:35:59:24:49:
                    d3:27:1b:00:d8:a5:e8:12:01:83:b4:2c:59:3a:59:
                    74:37:88:86:94:40:df:f0:2a:be:7a:92:03:54:fb:
                    55:f6:f1:9b:90:7d:3c:d5:ad:8f:f1:ca:f8:db:4f:
                    0f:16:05:9b:be:1c:47:53:ce:51:97:09:01:a4:16:
                    df:69:df:aa:a9:b5:27:c9:3c:59:89:5d:16:8a:18:
                    95:27:ca:25:82:d4:b3:76:e3:d6:b1:c0:96:82:22:
                    8a:23:a7:98:52:0e:c0:ec:e9:30:8d:3a:e9:65:39:
                    c1:19:c9:7b:a3:75:40:41:63:23:fd:be:dc:da:c5:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1F:D5:7D:05:8C:4D:80:CE:6D:42:8C:F8:1C:0A:35:23:9E:62:A3
            X509v3 Authority Key Identifier:
                keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/4B_VfQWMTYDObUKM-BwKNSOeYqM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.227.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:4b:00:37:58:0f:61:d8:06:99:ae:79:92:43:f6:23:46:f7:
         92:f5:81:8c:2e:07:55:e4:f1:bd:00:6b:9f:6d:00:16:e7:d5:
         9e:2d:62:60:ea:2e:8a:4a:d8:7a:df:f8:f3:4a:3f:c3:c1:45:
         6c:d9:19:f6:52:e3:ac:f3:7f:94:a5:98:ae:94:7e:f0:6d:9c:
         23:8a:26:68:3e:d6:06:66:d7:2b:03:82:38:e0:53:ac:ba:3f:
         e4:8a:f9:ef:b5:a0:df:32:26:92:f3:52:e1:42:4f:7c:d3:41:
         f3:f1:ef:6b:55:74:2e:ae:f1:73:84:a4:d0:93:f7:66:60:3a:
         16:4f:e4:15:74:87:a4:0c:27:f9:75:76:ce:06:0e:00:f5:00:
         86:df:2a:f3:3e:9b:d8:a7:05:67:30:26:a8:34:c8:f6:17:dc:
         61:3b:4e:4b:cb:37:3e:8c:5d:27:51:5a:5b:1d:86:95:4d:28:
         9a:50:c0:7a:e5:8b:a3:df:78:03:b5:9d:9c:0e:9f:21:4c:66:
         ff:9b:cd:c5:4b:5a:08:73:ce:2b:7c:a8:4d:7c:8b:4b:95:d0:
         15:b4:ab:1d:14:a6:da:87:a8:6d:fe:82:14:cb:89:8c:5b:81:
         04:fc:f8:53:fd:6b:9d:2d:8c:ff:4c:e5:01:16:b2:04:fd:7d:
         e4:ba:fe:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8E0RYL6LWB3qPZWckAMBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZTc0Y2Y2MzcyM2MwMjY5ZDUyODNiMTA2NTgyMWFmMzg0
YTlhMjYwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDFmZDU3ZDA1OGM0ZDgwY2U2ZDQyOGNmODFjMGEzNTIzOWU2MmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7EMt3T2PCCG/HdcCw3ozePUAo2S
MmblfaHA78PFnibqC3rxcCgDbnF55IsqOjB5qM9VyWXp0kKpDd9z9a9camC6ox2Z
LeoXEbNlDdIu7gyjh0o9agNRMPtvnA6xiZ7/fPdTwpaPaU+I4lNb88E3s2kluRhC
IWi+/MuO73FoKgbOjzVZJEnTJxsA2KXoEgGDtCxZOll0N4iGlEDf8Cq+epIDVPtV
9vGbkH081a2P8cr4208PFgWbvhxHU85RlwkBpBbfad+qqbUnyTxZiV0WihiVJ8ol
gtSzduPWscCWgiKKI6eYUg7A7OkwjTrpZTnBGcl7o3VAQWMj/b7c2sVwSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOAf1X0FjE2Azm1CjPgcCjUjnmKjMB8GA1UdIwQY
MBaAFEznTPY3I8AmnVKDsQZYIa84SpomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzkt
OTI0MWZmNmVjM2JmLzEvNEJfVmZRV01UWURPYlVLTS1Cd0tOU09lWXFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81YTBmODEtMzFlMi00ZGIyLTgzMzktOTI0MWZmNmVjM2Jm
LzEvVE9kTTlqY2p3Q2FkVW9PeEJsZ2hyemhLbWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvOPGMA0G
CSqGSIb3DQEBCwUAA4IBAQBySwA3WA9h2AaZrnmSQ/YjRveS9YGMLgdV5PG9AGuf
bQAW59WeLWJg6i6KSth63/jzSj/DwUVs2Rn2UuOs83+UpZiulH7wbZwjiiZoPtYG
ZtcrA4I44FOsuj/kivnvtaDfMiaS81LhQk9800Hz8e9rVXQurvFzhKTQk/dmYDoW
T+QVdIekDCf5dXbOBg4A9QCG3yrzPpvYpwVnMCaoNMj2F9xhO05Lyzc+jF0nUVpb
HYaVTSiaUMB65Yuj33gDtZ2cDp8hTGb/m83FS1oIc84rfKhNfItLldAVtKsdFKba
h6ht/oIUy4mMW4EE/PhT/WudLYz/TOUBFrIE/X3kuv5P
-----END CERTIFICATE-----
Generated at Wed Jan 7 23:48:05 2026 by rpki-client