This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/v_1A2a_kaw5c9cCgR8jlHMuXZ88.roa
File:                     v_1A2a_kaw5c9cCgR8jlHMuXZ88.roa (raw, json)
Hash identifier:          oRN0RpTL9cEOLFpMfM+oW8RC/6m7RJC5l8CQ7D2QtoI=
Subject key identifier:   BF:FD:40:D9:AF:E4:6B:0E:5C:F5:C0:A0:47:C8:E5:1C:CB:97:67:CF
Certificate issuer:       /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial:       019B7758A8E00936F447967B6E94D1C00A78
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/v_1A2a_kaw5c9cCgR8jlHMuXZ88.roa
Signing time:             Thu 01 Jan 2026 02:17:37 +0000
ROA not before:           Thu 01 Jan 2026 02:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60465
IP address blocks:        185.30.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:a8:e0:09:36:f4:47:96:7b:6e:94:d1:c0:0a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
        Validity
            Not Before: Jan  1 02:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bffd40d9afe46b0e5cf5c0a047c8e51ccb9767cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:4e:50:50:64:c4:0c:a4:4a:70:9b:45:50:
                    25:f6:cf:ae:6a:29:47:41:bf:33:0a:93:a1:2d:0f:
                    f8:52:6e:54:e7:4b:b1:d1:3e:24:c8:dc:11:85:88:
                    47:2d:a4:89:f1:47:14:a5:3b:5b:1a:70:fa:de:54:
                    ec:5d:da:c7:4c:42:ff:7f:34:8c:c6:f3:d6:15:21:
                    a9:e3:18:40:2f:b0:47:a4:9f:b9:85:83:4a:36:2f:
                    14:2d:55:38:e9:83:b0:f5:c4:49:31:53:35:16:c6:
                    d9:89:68:5d:5f:4a:aa:04:07:28:aa:cd:28:d5:de:
                    76:38:02:b3:4f:71:e7:62:71:fc:82:e6:9c:5a:d7:
                    b0:49:06:26:d5:91:33:a6:f7:f4:f8:9a:a8:07:ca:
                    bb:ab:76:4e:90:d2:d9:89:ce:f4:a4:8a:a8:2a:26:
                    ea:cb:ac:36:35:bf:a7:56:78:8f:47:76:0b:f5:47:
                    65:2b:9d:bc:14:25:0f:b2:08:3d:d3:2a:a0:7c:da:
                    9b:dc:72:ef:8f:69:55:69:8d:42:22:f8:41:28:e3:
                    cb:57:72:56:52:25:c1:0d:ae:48:41:ba:1c:d1:7d:
                    88:9f:78:f1:19:1e:d9:0a:66:4a:68:72:d8:70:1a:
                    bd:5d:11:78:9a:93:87:e3:ab:79:90:cb:85:ff:42:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FD:40:D9:AF:E4:6B:0E:5C:F5:C0:A0:47:C8:E5:1C:CB:97:67:CF
            X509v3 Authority Key Identifier:
                keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/v_1A2a_kaw5c9cCgR8jlHMuXZ88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:6b:0a:61:c1:b3:e1:34:24:61:54:a7:92:c8:75:d3:0d:c4:
         a5:4d:78:17:14:74:be:ec:a4:0c:07:0d:67:25:f6:4c:59:b3:
         ea:b9:34:a8:a8:7d:5e:58:87:3f:f7:20:dc:d8:e2:3e:b4:1f:
         33:20:3b:99:42:b9:e1:b8:cc:e9:d6:b5:cc:42:57:d7:f1:fe:
         ce:19:ae:e5:57:38:d1:c2:19:47:4b:83:a1:1b:26:83:69:84:
         c5:9b:51:ef:98:fa:7a:73:50:ee:fc:e4:e4:29:43:a9:60:4a:
         7f:25:7b:d8:d4:24:21:3f:ce:ba:2d:51:35:77:0a:85:77:a2:
         02:f3:ba:61:31:11:b8:42:af:11:6b:00:05:67:cb:e7:d9:60:
         ee:4d:45:93:16:11:4d:af:cb:5d:07:f1:c9:c9:3e:dd:fa:2d:
         9b:3a:91:61:17:3c:86:9c:2e:31:aa:c2:2e:70:1f:3d:e6:5d:
         b1:e4:4b:36:76:72:d1:f8:e4:9b:25:e9:6e:dd:79:97:21:97:
         fe:63:77:81:b2:7e:9e:d9:ea:9a:3b:20:c7:af:d9:ec:99:c3:
         82:f2:14:22:3b:75:77:b2:f3:23:e2:3f:b6:a4:b8:67:c9:47:
         ce:ca:50:09:12:03:be:6c:66:41:cb:fc:01:04:f6:3a:bf:e4:
         14:28:46:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WKjgCTb0R5Z7bpTRwAp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YWY5MDE0YjBkZWRkMmMwNDg0MGFlMzg1YjUzMzlmNmM2
NzkwZjUwHhcNMjYwMTAxMDIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmZkNDBkOWFmZTQ2YjBlNWNmNWMwYTA0N2M4ZTUxY2NiOTc2N2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA9OUFBkxAykSnCbRVAl9s+uailH
Qb8zCpOhLQ/4Um5U50ux0T4kyNwRhYhHLaSJ8UcUpTtbGnD63lTsXdrHTEL/fzSM
xvPWFSGp4xhAL7BHpJ+5hYNKNi8ULVU46YOw9cRJMVM1FsbZiWhdX0qqBAcoqs0o
1d52OAKzT3HnYnH8guacWtewSQYm1ZEzpvf0+JqoB8q7q3ZOkNLZic70pIqoKibq
y6w2Nb+nVniPR3YL9UdlK528FCUPsgg90yqgfNqb3HLvj2lVaY1CIvhBKOPLV3JW
UiXBDa5IQboc0X2In3jxGR7ZCmZKaHLYcBq9XRF4mpOH46t5kMuF/0KKywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL/9QNmv5GsOXPXAoEfI5RzLl2fPMB8GA1UdIwQY
MBaAFGevkBSw3t0sBIQK44W1M59sZ5D1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAt
NWU3NThlODFlZmY2LzEvdl8xQTJhX2thdzVjOWNDZ1I4amxITXVYWjg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAtNWU3NThlODFlZmY2
LzEvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuR5oMA0G
CSqGSIb3DQEBCwUAA4IBAQC3awphwbPhNCRhVKeSyHXTDcSlTXgXFHS+7KQMBw1n
JfZMWbPquTSoqH1eWIc/9yDc2OI+tB8zIDuZQrnhuMzp1rXMQlfX8f7OGa7lVzjR
whlHS4OhGyaDaYTFm1HvmPp6c1Du/OTkKUOpYEp/JXvY1CQhP866LVE1dwqFd6IC
87phMRG4Qq8RawAFZ8vn2WDuTUWTFhFNr8tdB/HJyT7d+i2bOpFhFzyGnC4xqsIu
cB895l2x5Es2dnLR+OSbJelu3XmXIZf+Y3eBsn6e2eqaOyDHr9nsmcOC8hQiO3V3
svMj4j+2pLhnyUfOylAJEgO+bGZBy/wBBPY6v+QUKEaA
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:27:21 2026 by rpki-client