This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa
File:                     dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa (raw, json)
Hash identifier:          4Z63pDrERLa8AbCyht1J3U8XYsimBFftB4yxdfy6SeU=
Subject key identifier:   74:71:DB:3D:22:42:7E:C4:03:34:1F:FB:AF:C4:A2:0C:12:0C:04:57
Certificate issuer:       /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial:       019B7834F70652FABF860B9D1AD2B029BE1A
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa
Signing time:             Thu 01 Jan 2026 06:18:15 +0000
ROA not before:           Thu 01 Jan 2026 06:18:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62383
IP address blocks:        188.210.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:f7:06:52:fa:bf:86:0b:9d:1a:d2:b0:29:be:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
        Validity
            Not Before: Jan  1 06:18:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7471db3d22427ec403341ffbafc4a20c120c0457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:6d:da:33:01:55:d7:67:6d:6f:ce:09:48:
                    62:30:9b:bd:29:7b:90:89:2b:91:1f:7b:5a:70:d6:
                    35:d3:12:76:2b:86:dd:f3:26:33:4b:71:a3:35:65:
                    bc:46:2d:b3:9e:c8:4f:4b:25:4f:b7:f3:b9:21:f0:
                    b7:fd:8f:23:65:79:3c:24:a7:5e:be:52:9d:81:2e:
                    e0:a9:fb:2b:a3:ab:40:fe:37:f2:91:d5:1b:46:ec:
                    5a:80:a6:10:a3:ac:37:6a:8c:75:00:5e:1f:6e:ca:
                    3b:d9:bb:40:62:ca:ac:a5:b8:99:92:90:02:a9:a3:
                    08:95:82:29:68:97:1c:52:87:57:4c:2f:a3:3b:5f:
                    09:7a:f5:ee:80:42:9b:a6:9e:e4:75:b7:37:36:72:
                    c1:bf:59:6b:cd:df:a6:60:3c:5d:f7:4b:54:2c:85:
                    1d:3f:3b:3f:0b:d0:8c:03:0f:ab:53:1c:10:c9:d4:
                    26:56:71:5a:c6:9a:af:26:d5:bf:85:37:59:f5:4c:
                    90:62:45:cc:a7:47:d9:e9:ec:da:4b:5c:d8:eb:46:
                    51:6e:c7:10:a2:aa:79:b0:98:1a:8e:6b:4f:83:66:
                    b4:6a:1f:9f:64:6f:9e:90:db:ce:b8:86:da:be:64:
                    44:ae:30:3d:a0:d5:fa:48:d4:de:d2:f9:32:53:ba:
                    68:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:71:DB:3D:22:42:7E:C4:03:34:1F:FB:AF:C4:A2:0C:12:0C:04:57
            X509v3 Authority Key Identifier:
                keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/dHHbPSJCfsQDNB_7r8SiDBIMBFc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.210.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:55:c7:b7:ba:5f:44:b9:4b:e7:e2:41:e3:0b:4e:e1:8e:8a:
         5e:f0:cd:b3:33:b6:7a:74:bd:bd:7a:6e:dd:9f:d5:4e:40:6a:
         d1:dd:a3:90:ce:0d:8c:af:9b:ef:14:cd:97:50:81:36:2c:1c:
         0c:77:48:c7:2d:fe:7b:db:55:99:9e:2b:4f:cb:81:6c:d8:99:
         1e:4b:92:bc:8f:4b:cb:1d:0d:16:3b:aa:d8:49:6e:91:b5:25:
         9d:ec:01:ee:c2:16:fc:dc:56:7d:5d:5b:f3:75:8f:2b:ca:91:
         c1:ff:ce:9a:78:3e:17:f7:1e:82:ed:7e:02:9c:48:db:59:b0:
         1d:a6:f9:41:1f:b7:11:81:65:a6:e6:ed:40:c5:9e:a6:2b:b4:
         d0:47:31:83:0d:d5:c1:a2:f8:3d:9f:d1:d1:a3:24:58:8f:2f:
         83:b2:d3:a8:31:fe:54:bb:86:45:e1:af:74:d5:7c:5b:63:5b:
         ce:0c:2c:df:82:70:d8:bc:c5:aa:06:f1:a4:de:ed:43:69:33:
         9f:16:00:77:f7:87:08:e9:4f:b7:c8:9a:fd:88:46:38:06:da:
         6a:7a:7e:89:43:f5:a5:5d:71:1b:b1:e7:a1:e4:8c:9f:e5:d2:
         30:d3:cc:1b:2c:16:2a:3d:84:83:47:3a:c4:fc:6d:59:e9:1a:
         bd:ed:fa:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NPcGUvq/hgudGtKwKb4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx
NWQwNzMwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDcxZGIzZDIyNDI3ZWM0MDMzNDFmZmJhZmM0YTIwYzEyMGMwNDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4Bt2jMBVddnbW/OCUhiMJu9KXuQ
iSuRH3tacNY10xJ2K4bd8yYzS3GjNWW8Ri2znshPSyVPt/O5IfC3/Y8jZXk8JKde
vlKdgS7gqfsro6tA/jfykdUbRuxagKYQo6w3aox1AF4fbso72btAYsqspbiZkpAC
qaMIlYIpaJccUodXTC+jO18JevXugEKbpp7kdbc3NnLBv1lrzd+mYDxd90tULIUd
Pzs/C9CMAw+rUxwQydQmVnFaxpqvJtW/hTdZ9UyQYkXMp0fZ6ezaS1zY60ZRbscQ
oqp5sJgajmtPg2a0ah+fZG+ekNvOuIbavmRErjA9oNX6SNTe0vkyU7po9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHRx2z0iQn7EAzQf+6/EogwSDARXMB8GA1UdIwQY
MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt
ZWQxZjMwY2MxYzU3LzEvZEhIYlBTSkNmc1FETkJfN3I4U2lEQklNQkZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3
LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNJcMA0G
CSqGSIb3DQEBCwUAA4IBAQBzVce3ul9EuUvn4kHjC07hjope8M2zM7Z6dL29em7d
n9VOQGrR3aOQzg2Mr5vvFM2XUIE2LBwMd0jHLf5721WZnitPy4Fs2JkeS5K8j0vL
HQ0WO6rYSW6RtSWd7AHuwhb83FZ9XVvzdY8rypHB/86aeD4X9x6C7X4CnEjbWbAd
pvlBH7cRgWWm5u1AxZ6mK7TQRzGDDdXBovg9n9HRoyRYjy+DstOoMf5Uu4ZF4a90
1XxbY1vODCzfgnDYvMWqBvGk3u1DaTOfFgB394cI6U+3yJr9iEY4Btpqen6JQ/Wl
XXEbseeh5Iyf5dIw08wbLBYqPYSDRzrE/G1Z6Rq97fr2
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:54 2026 by rpki-client