This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vnd5d8HYc-F8IZfObEYE0UD-KqU.roa
File:                     Vnd5d8HYc-F8IZfObEYE0UD-KqU.roa (raw, json)
Hash identifier:          3N4nuJRZkFbJCMhzjHZNMQEOd8ikfJieu57PWO7gDwA=
Subject key identifier:   56:77:79:77:C1:D8:73:E1:7C:21:97:CE:6C:46:04:D1:40:FE:2A:A5
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B797DFAB70D706440FED2713AC2AAFE2A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vnd5d8HYc-F8IZfObEYE0UD-KqU.roa
Signing time:             Thu 01 Jan 2026 12:17:37 +0000
ROA not before:           Thu 01 Jan 2026 12:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207713
IP address blocks:        212.192.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 16:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:fa:b7:0d:70:64:40:fe:d2:71:3a:c2:aa:fe:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 12:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=56777977c1d873e17c2197ce6c4604d140fe2aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:13:24:c0:7b:04:aa:15:4b:c6:27:d3:e5:
                    bc:0b:57:d2:2c:65:44:74:d6:68:1d:67:1d:cb:67:
                    3e:2b:bb:f9:5a:53:f2:b2:eb:6e:b0:f8:3c:7a:2f:
                    d2:69:e9:fa:bd:0c:89:43:72:dc:26:49:56:74:a5:
                    aa:5e:c6:d8:15:99:24:2a:94:07:b2:e8:51:28:c6:
                    a2:85:39:3e:19:e7:f3:60:08:e1:60:31:7a:49:f4:
                    c0:8e:0f:bd:67:2d:d0:fb:d7:e5:98:be:f9:8a:f9:
                    af:28:8f:c9:31:21:e4:ea:8a:24:f3:85:fc:f8:8e:
                    8d:f5:2d:9c:61:ee:a8:0a:a2:fc:0d:4d:1d:0e:72:
                    87:52:23:8b:e3:78:1d:ab:d4:9d:01:9c:75:94:c5:
                    fe:67:9c:16:87:82:4b:ab:da:9a:5f:a4:f3:26:03:
                    ad:0d:0a:ff:b6:33:86:d4:74:2b:f6:af:be:c4:36:
                    68:fd:c4:e8:f3:0b:36:21:33:40:64:0f:76:89:15:
                    b0:d4:e1:bf:7c:0a:cb:aa:55:b2:1a:8a:5a:93:a9:
                    3c:67:3c:86:1b:9e:d2:75:61:a7:3b:b3:96:d2:4a:
                    d4:48:d5:e4:13:ce:a3:47:ac:22:a2:09:25:bd:40:
                    b9:cd:a5:52:e6:5b:f8:28:b7:13:cf:b8:3e:c8:90:
                    40:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:77:79:77:C1:D8:73:E1:7C:21:97:CE:6C:46:04:D1:40:FE:2A:A5
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vnd5d8HYc-F8IZfObEYE0UD-KqU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.192.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:66:b2:b8:81:07:11:ab:45:a6:0f:a6:6b:fa:5f:b5:ca:39:
         39:89:44:ff:19:94:fb:7f:d2:de:09:cb:68:95:d4:b6:16:71:
         6b:06:9a:a0:5a:04:54:a7:28:0b:3e:5f:68:e7:02:41:ba:96:
         20:0f:d6:ab:99:71:da:02:c9:4c:b9:2e:c2:b4:fd:1c:b7:88:
         6b:09:47:a8:71:09:c1:cf:74:23:7f:60:63:a3:ef:f0:24:b4:
         fb:18:e4:76:aa:42:69:ca:c1:34:51:c9:03:33:ea:54:de:0b:
         ae:3f:3c:e2:13:ea:be:bf:cc:fc:a1:fd:81:9f:fa:54:98:92:
         ff:ef:76:b8:8f:51:2f:0c:98:15:70:0b:f4:63:94:b1:61:7e:
         f0:f9:e8:ad:f0:c9:1b:c2:e4:ae:78:4f:31:21:ed:77:c1:5e:
         5c:0b:16:03:d2:bf:8a:83:4d:f6:b1:33:a6:ae:0b:e8:98:62:
         c7:e3:50:5b:e2:58:81:56:16:13:8a:46:a2:1a:20:5e:d5:99:
         fe:d8:e2:91:f7:52:bf:bc:86:9b:ac:a0:6d:e1:01:80:b7:da:
         5a:48:ed:f0:7e:44:74:82:83:56:c7:87:6b:4c:d3:44:ae:21:
         bf:6d:99:1d:97:01:69:1e:13:58:33:09:ce:44:19:8d:5f:b8:
         3e:72:2d:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5ffq3DXBkQP7ScTrCqv4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMTAxMTIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Njc3Nzk3N2MxZDg3M2UxN2MyMTk3Y2U2YzQ2MDRkMTQwZmUyYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWITJMB7BKoVS8Yn0+W8C1fSLGVE
dNZoHWcdy2c+K7v5WlPysutusPg8ei/Saen6vQyJQ3LcJklWdKWqXsbYFZkkKpQH
suhRKMaihTk+GefzYAjhYDF6SfTAjg+9Zy3Q+9flmL75ivmvKI/JMSHk6ook84X8
+I6N9S2cYe6oCqL8DU0dDnKHUiOL43gdq9SdAZx1lMX+Z5wWh4JLq9qaX6TzJgOt
DQr/tjOG1HQr9q++xDZo/cTo8ws2ITNAZA92iRWw1OG/fArLqlWyGopak6k8ZzyG
G57SdWGnO7OW0krUSNXkE86jR6wiogklvUC5zaVS5lv4KLcTz7g+yJBAvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFZ3eXfB2HPhfCGXzmxGBNFA/iqlMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvVm5kNWQ4SFljLUY4SVpmT2JFWUUwVUQtS3FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1MAOMA0G
CSqGSIb3DQEBCwUAA4IBAQCQZrK4gQcRq0WmD6Zr+l+1yjk5iUT/GZT7f9LeCcto
ldS2FnFrBpqgWgRUpygLPl9o5wJBupYgD9armXHaAslMuS7CtP0ct4hrCUeocQnB
z3Qjf2Bjo+/wJLT7GOR2qkJpysE0UckDM+pU3guuPzziE+q+v8z8of2Bn/pUmJL/
73a4j1EvDJgVcAv0Y5SxYX7w+eit8MkbwuSueE8xIe13wV5cCxYD0r+Kg032sTOm
rgvomGLH41Bb4liBVhYTikaiGiBe1Zn+2OKR91K/vIabrKBt4QGAt9paSO3wfkR0
goNWx4drTNNEriG/bZkdlwFpHhNYMwnORBmNX7g+ci3L
-----END CERTIFICATE-----
Generated at Sat Jan 10 03:15:27 2026 by rpki-client