This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jVsZ0ASEkelKMcwQ-amT5hqa9K0.roa
File:                     jVsZ0ASEkelKMcwQ-amT5hqa9K0.roa (raw, json)
Hash identifier:          K0akq9Iq9DZmiNN1Axy2fJVUiCY4NzycyW1Nu6gD96Q=
Subject key identifier:   8D:5B:19:D0:04:84:91:E9:4A:31:CC:10:F9:A9:93:E6:1A:9A:F4:AD
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       019B7CEDF68D20EB8DEE2186D76A89E13AB0
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jVsZ0ASEkelKMcwQ-amT5hqa9K0.roa
Signing time:             Fri 02 Jan 2026 04:18:48 +0000
ROA not before:           Fri 02 Jan 2026 04:18:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212483
IP address blocks:        2a0d:2587::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:f6:8d:20:eb:8d:ee:21:86:d7:6a:89:e1:3a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  2 04:18:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8d5b19d0048491e94a31cc10f9a993e61a9af4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a2:0b:53:72:6d:58:51:a9:05:26:48:6e:e1:
                    a3:fe:8f:db:c9:5c:37:2b:60:8c:29:1b:31:15:70:
                    a6:d1:06:fd:75:63:b0:b1:85:ae:e9:ec:d7:3c:be:
                    8e:21:72:03:40:14:ed:23:78:08:51:a0:2d:54:b6:
                    92:78:12:6a:57:44:0b:46:48:82:68:47:1d:e6:4e:
                    24:7f:4e:77:1b:cb:4c:d8:8f:22:75:ca:ac:b0:34:
                    09:0b:de:a1:a4:02:27:a4:64:e1:16:42:a3:d2:bb:
                    6e:69:28:cd:63:b7:c5:db:78:d3:0c:89:ba:55:38:
                    b2:12:d3:f4:33:8e:a3:24:4b:41:ec:af:f4:96:1c:
                    63:41:dc:f9:2d:7a:5b:07:50:45:af:35:e1:9c:8b:
                    5f:79:34:f4:5a:07:a1:7b:da:c7:4c:c7:40:84:8d:
                    d2:d4:24:af:ed:7f:e8:0e:8b:4f:20:70:78:78:62:
                    18:ad:18:08:39:88:a3:06:c2:7f:d5:39:57:22:91:
                    22:58:f7:65:bd:a0:14:37:52:4b:43:74:1b:4a:1b:
                    ad:bb:00:50:0f:45:13:f1:fa:50:54:90:1c:e1:9e:
                    79:40:b0:4b:80:18:1a:8c:39:e2:85:0b:4c:ae:e2:
                    b5:76:6f:d3:49:cf:19:26:d4:71:e1:18:74:d0:fc:
                    8c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5B:19:D0:04:84:91:E9:4A:31:CC:10:F9:A9:93:E6:1A:9A:F4:AD
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/jVsZ0ASEkelKMcwQ-amT5hqa9K0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2587::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:3b:83:1a:11:79:7d:92:a9:b6:c7:bb:74:70:b8:6d:96:71:
         ae:d1:d9:0e:6e:9b:c3:59:af:1c:f4:8f:6b:50:84:86:28:70:
         9d:0b:69:37:74:cb:fe:57:af:14:13:d2:3a:c9:bf:33:e7:16:
         b4:f3:6a:bf:4a:14:24:96:b2:5c:f7:b0:3b:f9:58:ba:99:7d:
         99:83:e8:72:f2:59:92:1e:c8:21:ef:7b:ec:ba:b6:7b:d5:96:
         3f:73:7f:7e:63:8f:67:b0:27:af:9f:85:61:fb:22:7c:a6:e8:
         ee:84:1b:3b:e9:45:15:71:94:73:77:37:eb:4f:d9:71:e6:92:
         21:99:03:9e:ba:0b:27:a7:3d:f8:6b:24:c0:dd:34:cc:c5:db:
         6f:78:71:86:38:af:2c:db:d4:88:c4:c4:83:ce:83:c0:e2:8e:
         9e:1e:cf:39:93:25:79:9d:30:23:11:a4:7f:c2:5d:2d:37:ef:
         5e:49:6a:5d:12:8f:e7:b4:41:a3:be:2f:be:bb:24:5a:ac:04:
         1f:23:a2:19:8d:18:23:d8:54:e6:70:f4:12:2e:b2:73:4e:2d:
         8b:6b:42:65:ce:ab:2b:ee:1d:46:78:64:6c:d4:70:d9:15:ca:
         41:37:78:14:46:6e:ff:20:2c:b1:ed:e9:cd:ce:e9:0a:44:4b:
         9c:1f:1a:af
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt87faNIOuN7iGG12qJ4TqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDViMTlkMDA0ODQ5MWU5NGEzMWNjMTBmOWE5OTNlNjFhOWFmNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56ILU3JtWFGpBSZIbuGj/o/byVw3
K2CMKRsxFXCm0Qb9dWOwsYWu6ezXPL6OIXIDQBTtI3gIUaAtVLaSeBJqV0QLRkiC
aEcd5k4kf053G8tM2I8idcqssDQJC96hpAInpGThFkKj0rtuaSjNY7fF23jTDIm6
VTiyEtP0M46jJEtB7K/0lhxjQdz5LXpbB1BFrzXhnItfeTT0Wgehe9rHTMdAhI3S
1CSv7X/oDotPIHB4eGIYrRgIOYijBsJ/1TlXIpEiWPdlvaAUN1JLQ3QbShutuwBQ
D0UT8fpQVJAc4Z55QLBLgBgajDnihQtMruK1dm/TSc8ZJtRx4Rh00PyMxwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFI1bGdAEhJHpSjHMEPmpk+YamvStMB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvalZzWjBBU0VrZWxLTWN3US1hbVQ1aHFhOUswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKg0lhwAw
DQYJKoZIhvcNAQELBQADggEBADk7gxoReX2SqbbHu3RwuG2Wca7R2Q5um8NZrxz0
j2tQhIYocJ0LaTd0y/5XrxQT0jrJvzPnFrTzar9KFCSWslz3sDv5WLqZfZmD6HLy
WZIeyCHve+y6tnvVlj9zf35jj2ewJ6+fhWH7Inym6O6EGzvpRRVxlHN3N+tP2XHm
kiGZA566CyenPfhrJMDdNMzF2294cYY4ryzb1IjExIPOg8Dijp4ezzmTJXmdMCMR
pH/CXS03715Jal0Sj+e0QaO+L767JFqsBB8johmNGCPYVOZw9BIusnNOLYtrQmXO
qyvuHUZ4ZGzUcNkVykE3eBRGbv8gLLHt6c3O6QpES5wfGq8=
-----END CERTIFICATE-----
Generated at Thu Jan 22 03:22:51 2026 by rpki-client