This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/tLACRLHJMNO7pkHg2BdbS9oOBUU.roa
File:                     tLACRLHJMNO7pkHg2BdbS9oOBUU.roa (raw, json)
Hash identifier:          9tUxOLxvWwiq+19ZOnFgqeZk3zELbv4Ra0UrW4JTYYI=
Subject key identifier:   B4:B0:02:44:B1:C9:30:D3:BB:A6:41:E0:D8:17:5B:4B:DA:0E:05:45
Certificate issuer:       /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial:       019B7AC90229DFB239EF5CA8FE8236DFA714
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/tLACRLHJMNO7pkHg2BdbS9oOBUU.roa
Signing time:             Thu 01 Jan 2026 18:19:12 +0000
ROA not before:           Thu 01 Jan 2026 18:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206907
IP address blocks:        193.200.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:02:29:df:b2:39:ef:5c:a8:fe:82:36:df:a7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
        Validity
            Not Before: Jan  1 18:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b4b00244b1c930d3bba641e0d8175b4bda0e0545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:40:4c:9f:05:4a:30:c5:6c:12:5a:b1:03:
                    e0:95:fd:77:66:9d:34:3d:40:13:63:c8:81:08:ad:
                    dc:5c:84:69:74:96:b7:91:8d:a2:ff:e5:c8:d7:04:
                    fe:96:b8:fe:d8:c1:c9:cc:f0:37:0a:cb:19:81:f5:
                    28:b8:b7:97:1b:ca:75:d0:4f:13:c8:aa:6f:6f:bb:
                    c4:08:30:24:ad:d6:66:01:e9:f6:25:f1:7d:47:19:
                    45:55:a9:b4:ba:92:28:aa:7c:7b:88:ea:f8:98:8e:
                    0a:84:cf:df:83:e2:e3:2c:85:d7:37:b4:a7:78:5f:
                    8c:67:67:b9:c4:64:5e:e8:18:71:cf:61:19:c3:b9:
                    23:60:ae:31:87:19:f9:c8:96:7e:62:88:3a:8f:20:
                    5f:2a:dc:5e:ec:a5:ad:5e:d4:e9:c9:f6:0c:4c:bc:
                    68:61:2a:98:3f:d1:86:99:ca:a6:67:c0:b6:7c:bb:
                    f1:2a:94:f7:dd:e0:e4:f6:fa:45:73:8b:83:af:92:
                    bc:4d:73:14:fa:c8:a8:70:b8:9d:1f:c5:cf:46:46:
                    05:cf:24:ae:30:2d:c3:75:e5:a5:e4:fe:3b:59:fa:
                    b7:11:3f:7f:c3:56:83:5c:fe:87:7e:ec:c2:71:92:
                    48:66:d8:95:d3:b0:60:5b:91:97:51:4e:78:73:3c:
                    bf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B0:02:44:B1:C9:30:D3:BB:A6:41:E0:D8:17:5B:4B:DA:0E:05:45
            X509v3 Authority Key Identifier:
                keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/tLACRLHJMNO7pkHg2BdbS9oOBUU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.200.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:62:25:84:30:e3:30:93:14:a4:31:ba:0c:dd:84:4a:65:be:
         88:bc:92:a1:63:31:7e:8d:d4:e6:13:37:c8:f9:1a:af:ef:2b:
         39:66:a6:8f:12:9c:2d:0d:10:03:4e:e1:ed:fe:13:de:56:32:
         bf:34:86:52:47:d3:ab:f5:b7:82:7d:c5:6f:1c:90:aa:d0:98:
         60:45:7c:07:cd:b0:38:5c:52:30:6e:21:3c:5d:6f:24:20:61:
         39:d5:9d:2f:0a:cb:f3:49:41:31:2e:07:d3:26:8a:48:85:e7:
         55:fe:1e:51:06:e2:e2:58:30:ae:4f:ab:83:35:3a:d2:64:8b:
         ed:d9:0e:ec:c1:70:eb:0c:bc:b4:ed:ac:95:72:85:c2:61:03:
         02:e5:75:5a:9d:69:d4:f3:a6:e5:2c:1a:ed:c6:49:96:e8:53:
         58:68:be:56:0a:5b:63:b2:8a:a6:a9:58:eb:88:aa:6b:1b:df:
         e3:69:06:71:fd:9f:7a:e2:40:b2:13:a4:f6:0b:ed:63:bc:c7:
         27:c7:d1:71:b5:ed:f1:fc:e7:92:50:df:75:10:02:4f:5d:b1:
         0e:d1:76:3e:20:66:c8:bd:98:5e:91:0a:26:23:37:9c:d7:90:
         e7:2d:1b:d7:e2:66:22:07:a0:e3:4d:e2:44:bf:23:d1:55:bd:
         c6:da:80:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6yQIp37I571yo/oI236cUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxY2U4YTUwZGQ0MzI3MmI0NzRkNTU0NDNkMmZhYzQ2NTY2
NDc3YzIwHhcNMjYwMTAxMTgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGIwMDI0NGIxYzkzMGQzYmJhNjQxZTBkODE3NWI0YmRhMGUwNTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGxATJ8FSjDFbBJasQPglf13Zp00
PUATY8iBCK3cXIRpdJa3kY2i/+XI1wT+lrj+2MHJzPA3CssZgfUouLeXG8p10E8T
yKpvb7vECDAkrdZmAen2JfF9RxlFVam0upIoqnx7iOr4mI4KhM/fg+LjLIXXN7Sn
eF+MZ2e5xGRe6Bhxz2EZw7kjYK4xhxn5yJZ+Yog6jyBfKtxe7KWtXtTpyfYMTLxo
YSqYP9GGmcqmZ8C2fLvxKpT33eDk9vpFc4uDr5K8TXMU+siocLidH8XPRkYFzySu
MC3DdeWl5P47Wfq3ET9/w1aDXP6HfuzCcZJIZtiV07BgW5GXUU54czy/iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLSwAkSxyTDTu6ZB4NgXW0vaDgVFMB8GA1UdIwQY
MBaAFAHOilDdQycrR01VRD0vrEZWZHfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWM2S1VOMURKeXRIVFZWRVBTLXNSbFprZDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hN2MzM2ItNjgyZS00ZTAwLTgyMTEt
YmI5NDUzMDg0MWU1LzEvdExBQ1JMSEpNTk83cGtIZzJCZGJTOW9PQlVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9hN2MzM2ItNjgyZS00ZTAwLTgyMTEtYmI5NDUzMDg0MWU1
LzEvQWM2S1VOMURKeXRIVFZWRVBTLXNSbFprZDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwchUMA0G
CSqGSIb3DQEBCwUAA4IBAQBhYiWEMOMwkxSkMboM3YRKZb6IvJKhYzF+jdTmEzfI
+Rqv7ys5ZqaPEpwtDRADTuHt/hPeVjK/NIZSR9Or9beCfcVvHJCq0JhgRXwHzbA4
XFIwbiE8XW8kIGE51Z0vCsvzSUExLgfTJopIhedV/h5RBuLiWDCuT6uDNTrSZIvt
2Q7swXDrDLy07ayVcoXCYQMC5XVanWnU86blLBrtxkmW6FNYaL5WCltjsoqmqVjr
iKprG9/jaQZx/Z964kCyE6T2C+1jvMcnx9Fxte3x/OeSUN91EAJPXbEO0XY+IGbI
vZhekQomIzec15DnLRvX4mYiB6DjTeJEvyPRVb3G2oBd
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:30 2026 by rpki-client