This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/mwBeCjAV8HblHrXuCixjY4t88Ew.roa
File:                     mwBeCjAV8HblHrXuCixjY4t88Ew.roa (raw, json)
Hash identifier:          xcANaR4uD6XqULJSs7YHNG3et3uHGZNavHJVpHoqpTY=
Subject key identifier:   9B:00:5E:0A:30:15:F0:76:E5:1E:B5:EE:0A:2C:63:63:8B:7C:F0:4C
Certificate issuer:       /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial:       019B7C8019E6B3B83DD51D2E3C48A90CC91B
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/mwBeCjAV8HblHrXuCixjY4t88Ew.roa
Signing time:             Fri 02 Jan 2026 02:18:48 +0000
ROA not before:           Fri 02 Jan 2026 02:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     36925
IP address blocks:        80.15.243.0/24 maxlen: 32
                          2a01:c9c0:c012::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 16:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:19:e6:b3:b8:3d:d5:1d:2e:3c:48:a9:0c:c9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
        Validity
            Not Before: Jan  2 02:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9b005e0a3015f076e51eb5ee0a2c63638b7cf04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ec:ca:14:5b:cc:17:7d:2c:c0:1a:f6:91:5c:
                    f8:6a:cc:97:1e:f4:a9:fa:09:47:22:45:b5:28:ee:
                    1c:29:2b:67:ea:d3:73:fd:b9:af:3a:85:43:69:54:
                    d5:52:aa:c4:57:46:b8:9e:64:69:8d:92:57:6b:2b:
                    3b:2d:a5:bb:c8:42:be:3a:8e:c5:cf:f8:ef:34:19:
                    ac:33:a4:b6:6f:4d:bc:a9:94:21:07:1f:af:93:a8:
                    d1:08:29:8e:99:80:d8:b8:8a:71:a1:01:7c:ce:f6:
                    00:2e:d1:7d:8e:9a:c2:1c:e9:e9:90:42:69:60:a9:
                    06:1b:33:80:df:50:eb:f8:ea:2b:35:7e:60:b6:2f:
                    71:a7:2c:44:0f:cd:99:cd:a5:ef:a8:b8:a0:fc:94:
                    0b:4d:4c:6f:06:57:86:cb:71:e1:b4:da:29:b7:60:
                    2a:15:ea:75:4b:c9:49:3c:89:71:36:92:90:e4:2c:
                    1f:7c:a2:31:62:d8:d5:80:a2:d7:59:ea:7b:5b:df:
                    e4:43:04:9f:b6:ef:69:ce:c0:37:f6:64:5d:3a:41:
                    bc:85:88:e6:f6:1d:71:aa:c7:cd:a9:ef:14:b9:95:
                    a9:45:bf:5a:6d:00:ec:86:47:6b:f3:92:b9:a2:49:
                    a1:f1:3b:6c:36:dd:36:9f:96:da:ea:29:9d:0e:5e:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:00:5E:0A:30:15:F0:76:E5:1E:B5:EE:0A:2C:63:63:8B:7C:F0:4C
            X509v3 Authority Key Identifier:
                keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/mwBeCjAV8HblHrXuCixjY4t88Ew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.15.243.0/24
                IPv6:
                  2a01:c9c0:c012::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:e6:f5:0d:a1:3f:cc:b5:31:80:35:cf:2a:2e:1e:a2:3a:6f:
         f9:4a:dc:37:74:16:11:f4:96:ec:e4:20:a0:24:5e:fa:44:53:
         0a:48:1d:bd:f6:d0:07:25:93:75:af:0e:47:52:b4:10:b2:ef:
         84:bb:b6:46:c5:5d:3a:12:e0:ca:f6:61:c0:ac:2c:f9:82:45:
         eb:f3:45:ff:b2:c9:b0:25:bd:63:71:0b:9a:40:dc:c9:73:15:
         63:5b:6b:b6:50:53:f3:30:e1:b5:30:d9:8d:e8:6d:16:54:ed:
         02:e7:2b:49:ae:92:49:fb:1f:d5:26:cf:fd:35:f4:17:a9:46:
         4b:fc:51:9e:d0:4b:34:d8:9f:04:72:9a:ef:49:d5:eb:8d:b4:
         d8:88:76:ed:f3:3a:65:86:e4:c9:e7:69:37:af:49:a8:f2:6c:
         fa:76:19:13:c2:c4:ca:2c:b6:5c:c8:f2:7a:eb:48:97:76:04:
         a2:2a:31:3f:81:d5:9e:47:f0:aa:b7:c8:de:27:71:92:8f:28:
         37:dc:15:94:7e:08:52:57:ad:6c:6a:95:46:e7:70:af:28:d5:
         71:ac:4f:df:57:64:a4:3c:d2:14:d7:9a:a4:b4:e0:8d:22:d1:
         ac:af:01:c6:34:3e:50:13:f2:f8:01:1e:4d:60:a1:1e:05:80:
         12:21:cb:e2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt8gBnms7g91R0uPEipDMkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjAwNWUwYTMwMTVmMDc2ZTUxZWI1ZWUwYTJjNjM2MzhiN2NmMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+zKFFvMF30swBr2kVz4asyXHvSp
+glHIkW1KO4cKStn6tNz/bmvOoVDaVTVUqrEV0a4nmRpjZJXays7LaW7yEK+Oo7F
z/jvNBmsM6S2b028qZQhBx+vk6jRCCmOmYDYuIpxoQF8zvYALtF9jprCHOnpkEJp
YKkGGzOA31Dr+OorNX5gti9xpyxED82ZzaXvqLig/JQLTUxvBleGy3HhtNopt2Aq
Fep1S8lJPIlxNpKQ5CwffKIxYtjVgKLXWep7W9/kQwSftu9pzsA39mRdOkG8hYjm
9h1xqsfNqe8UuZWpRb9abQDshkdr85K5okmh8TtsNt02n5ba6imdDl7UhwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJsAXgowFfB25R617gosY2OLfPBMMB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvbXdCZUNqQVY4SGJsSHJYdUNpeGpZNHQ4OEV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAUA/zMA8E
AgACMAkDBwAqAcnAwBIwDQYJKoZIhvcNAQELBQADggEBADDm9Q2hP8y1MYA1zyou
HqI6b/lK3Dd0FhH0luzkIKAkXvpEUwpIHb320Aclk3WvDkdStBCy74S7tkbFXToS
4Mr2YcCsLPmCRevzRf+yybAlvWNxC5pA3MlzFWNba7ZQU/Mw4bUw2Y3obRZU7QLn
K0mukkn7H9Umz/019BepRkv8UZ7QSzTYnwRymu9J1euNtNiIdu3zOmWG5MnnaTev
SajybPp2GRPCxMostlzI8nrrSJd2BKIqMT+B1Z5H8Kq3yN4ncZKPKDfcFZR+CFJX
rWxqlUbncK8o1XGsT99XZKQ80hTXmqS04I0i0ayvAcY0PlAT8vgBHk1goR4FgBIh
y+I=
-----END CERTIFICATE-----
Generated at Thu Jan 22 23:34:21 2026 by rpki-client