This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/pBkk9LVfl1YeDqerByjctvBzveM.roa
File:                     pBkk9LVfl1YeDqerByjctvBzveM.roa (raw, json)
Hash identifier:          82EkgbLocyrxDWGRLc2Y2vY6Tv5jWzO4gLVCaKvDFFE=
Subject key identifier:   A4:19:24:F4:B5:5F:97:56:1E:0E:A7:AB:07:28:DC:B6:F0:73:BD:E3
Certificate issuer:       /CN=7913fcfc0627ff219fe5d654980ad48f447ab415
Certificate serial:       019B7C1150CD738DF9257D7584DE56BC2462
Authority key identifier: 79:13:FC:FC:06:27:FF:21:9F:E5:D6:54:98:0A:D4:8F:44:7A:B4:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/pBkk9LVfl1YeDqerByjctvBzveM.roa
Signing time:             Fri 02 Jan 2026 00:17:48 +0000
ROA not before:           Fri 02 Jan 2026 00:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        195.95.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 00:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:50:cd:73:8d:f9:25:7d:75:84:de:56:bc:24:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7913fcfc0627ff219fe5d654980ad48f447ab415
        Validity
            Not Before: Jan  2 00:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a41924f4b55f97561e0ea7ab0728dcb6f073bde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5b:50:06:b9:52:4e:09:8a:18:56:3d:c1:d7:
                    c3:6b:50:e2:80:44:4e:6a:60:5e:95:84:bb:77:72:
                    13:14:d0:c0:73:84:f7:7c:4f:25:bd:09:00:70:ff:
                    12:0c:1f:e3:c1:f1:f3:87:ed:0a:48:42:56:6c:5c:
                    df:a5:c5:2e:a2:05:23:2f:5d:87:b8:21:48:75:83:
                    a3:cf:3e:40:eb:9d:79:89:00:52:a5:7f:97:27:6a:
                    3f:9e:1e:85:63:ad:2e:9d:e2:64:bb:c6:2c:98:43:
                    bd:bc:47:bb:ad:f7:9c:e8:2c:89:fa:24:9b:ac:a9:
                    d3:bd:1b:97:0c:b3:10:1c:68:b9:0a:7b:2a:67:cd:
                    24:fe:01:cd:a7:43:d0:08:c6:ac:ec:17:47:c2:f6:
                    b3:e2:84:62:05:75:10:fb:13:67:9b:47:ed:10:1d:
                    53:b3:cc:dc:ff:d7:d7:cd:a2:bb:bf:fa:d8:71:db:
                    9f:f5:27:dd:ea:76:66:8a:7d:ff:91:56:c1:d0:53:
                    c6:8d:4d:42:11:28:02:9e:94:30:d0:2a:80:97:fc:
                    80:69:44:0d:e4:25:06:d5:c8:c3:8c:8e:dc:fc:fc:
                    69:5f:63:87:1b:9f:d4:f7:2b:ea:f5:de:b7:8b:51:
                    0f:d0:ae:7c:d8:39:ef:e5:b2:fa:57:0c:88:e3:16:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:19:24:F4:B5:5F:97:56:1E:0E:A7:AB:07:28:DC:B6:F0:73:BD:E3
            X509v3 Authority Key Identifier:
                keyid:79:13:FC:FC:06:27:FF:21:9F:E5:D6:54:98:0A:D4:8F:44:7A:B4:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP8_AYn_yGf5dZUmArUj0R6tBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/pBkk9LVfl1YeDqerByjctvBzveM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/321678-ab13-4354-b07a-359e5624eb3c/1/eRP8_AYn_yGf5dZUmArUj0R6tBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.95.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:71:04:ae:57:bd:03:b4:2e:22:bc:e6:a5:a2:eb:e1:4d:3c:
         3d:d9:a0:6e:29:2f:67:71:bf:9f:66:77:9a:79:1b:4c:bb:dc:
         f3:18:9b:0d:47:3e:cf:1c:a6:fc:07:7e:71:da:c8:e4:0c:1d:
         2e:37:7a:c4:86:f9:7a:2c:fb:fc:ea:47:0c:87:de:34:03:e0:
         8a:f1:38:30:90:bf:28:dc:3c:a8:8a:e9:e7:97:62:35:10:76:
         15:3e:9a:67:e5:4b:54:dd:70:ba:09:58:02:09:f3:70:73:85:
         e4:05:a5:76:db:e1:ff:f7:cf:f9:9a:b0:97:f7:30:a8:0d:03:
         95:28:c6:ef:74:61:43:56:26:92:8f:7e:1f:34:32:f5:cd:1d:
         9d:8f:de:f5:5b:fb:ff:87:60:f5:fe:4d:c9:a8:cb:21:fe:50:
         ea:40:8b:fd:5c:07:a2:a0:a1:32:ea:6f:b8:64:45:dc:03:e2:
         7e:4c:0a:44:60:15:f0:f3:82:78:b6:86:a6:f2:9e:87:c5:8c:
         56:07:b8:82:aa:41:1f:07:a7:c4:48:04:40:c2:fd:5e:c7:0d:
         b4:fe:8a:9f:c6:91:3e:01:e1:73:3d:0d:71:ab:b4:68:11:b6:
         d9:27:00:fa:38:1e:f2:5d:98:c0:3f:8b:bf:3b:bb:69:22:72:
         37:82:4d:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8EVDNc435JX11hN5WvCRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTNmY2ZjMDYyN2ZmMjE5ZmU1ZDY1NDk4MGFkNDhmNDQ3
YWI0MTUwHhcNMjYwMTAyMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDE5MjRmNGI1NWY5NzU2MWUwZWE3YWIwNzI4ZGNiNmYwNzNiZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFtQBrlSTgmKGFY9wdfDa1DigERO
amBelYS7d3ITFNDAc4T3fE8lvQkAcP8SDB/jwfHzh+0KSEJWbFzfpcUuogUjL12H
uCFIdYOjzz5A6515iQBSpX+XJ2o/nh6FY60uneJku8YsmEO9vEe7rfec6CyJ+iSb
rKnTvRuXDLMQHGi5CnsqZ80k/gHNp0PQCMas7BdHwvaz4oRiBXUQ+xNnm0ftEB1T
s8zc/9fXzaK7v/rYcduf9Sfd6nZmin3/kVbB0FPGjU1CESgCnpQw0CqAl/yAaUQN
5CUG1cjDjI7c/PxpX2OHG5/U9yvq9d63i1EP0K582Dnv5bL6VwyI4xbD0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKQZJPS1X5dWHg6nqwco3Lbwc73jMB8GA1UdIwQY
MBaAFHkT/PwGJ/8hn+XWVJgK1I9EerQVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJQOF9BWW5feUdmNWRaVW1BclVqMFI2dEJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zMjE2NzgtYWIxMy00MzU0LWIwN2Et
MzU5ZTU2MjRlYjNjLzEvcEJrazlMVmZsMVllRHFlckJ5amN0dkJ6dmVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zMjE2NzgtYWIxMy00MzU0LWIwN2EtMzU5ZTU2MjRlYjNj
LzEvZVJQOF9BWW5feUdmNWRaVW1BclVqMFI2dEJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1/1MA0G
CSqGSIb3DQEBCwUAA4IBAQANcQSuV70DtC4ivOalouvhTTw92aBuKS9ncb+fZnea
eRtMu9zzGJsNRz7PHKb8B35x2sjkDB0uN3rEhvl6LPv86kcMh940A+CK8TgwkL8o
3Dyoiunnl2I1EHYVPppn5UtU3XC6CVgCCfNwc4XkBaV22+H/98/5mrCX9zCoDQOV
KMbvdGFDViaSj34fNDL1zR2dj971W/v/h2D1/k3JqMsh/lDqQIv9XAeioKEy6m+4
ZEXcA+J+TApEYBXw84J4toam8p6HxYxWB7iCqkEfB6fESARAwv1exw20/oqfxpE+
AeFzPQ1xq7RoEbbZJwD6OB7yXZjAP4u/O7tpInI3gk1w
-----END CERTIFICATE-----
Generated at Fri Jan 2 09:26:57 2026 by rpki-client