This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/plvMMrmZnAh_cyeI-ARrIth21Cc.roa
File:                     plvMMrmZnAh_cyeI-ARrIth21Cc.roa (raw, json)
Hash identifier:          fkJT+3dTmiuNLjsJK683zGKByk+fcJe0nRAhf6uv61o=
Subject key identifier:   A6:5B:CC:32:B9:99:9C:08:7F:73:27:88:F8:04:6B:22:D8:76:D4:27
Certificate issuer:       /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial:       019B7F14FABB604F574960884BE2BB7DF746
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/plvMMrmZnAh_cyeI-ARrIth21Cc.roa
Signing time:             Fri 02 Jan 2026 14:20:39 +0000
ROA not before:           Fri 02 Jan 2026 14:20:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209965
IP address blocks:        212.81.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:fa:bb:60:4f:57:49:60:88:4b:e2:bb:7d:f7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
        Validity
            Not Before: Jan  2 14:20:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a65bcc32b9999c087f732788f8046b22d876d427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:28:2b:0d:2f:1f:06:34:99:c2:92:05:73:
                    ad:b9:62:0d:d0:1a:c8:02:57:88:af:c2:33:65:52:
                    65:aa:56:9e:1f:3e:fa:bd:5c:67:60:38:5a:66:63:
                    b4:e7:c4:45:e2:63:25:2e:b3:35:5f:2a:3d:4e:39:
                    b0:ae:80:47:59:da:b5:6c:96:17:c3:fa:73:34:51:
                    9d:3c:a9:64:41:06:cf:e7:36:63:ac:a1:ff:c3:16:
                    83:7e:e2:52:c8:af:b0:5a:0e:04:a2:09:f5:cb:c9:
                    c4:47:33:9b:c2:2b:5f:a4:b6:5b:b5:1b:e7:9a:9d:
                    61:c6:61:71:1c:03:ed:e6:ad:01:61:0c:04:71:43:
                    09:32:b6:8f:ee:e9:b2:b3:92:58:f9:6a:82:4b:1f:
                    50:62:ab:29:46:a9:bc:70:70:b6:ab:70:d6:4d:a2:
                    77:97:e9:a9:8c:a6:cd:37:1b:de:c1:59:5f:ef:41:
                    99:1e:55:98:9b:09:30:1f:02:a9:a9:4d:26:0d:99:
                    3f:f4:b5:52:b4:13:d8:39:27:65:cc:f0:eb:ef:76:
                    8c:a8:07:10:68:cb:4c:1b:a0:a8:a5:78:fd:6b:21:
                    70:33:a5:a6:6f:ac:7d:ee:dc:79:fd:f3:7b:79:61:
                    f6:3a:b1:ac:3f:85:d9:64:85:02:0b:2a:5a:d7:d2:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5B:CC:32:B9:99:9C:08:7F:73:27:88:F8:04:6B:22:D8:76:D4:27
            X509v3 Authority Key Identifier:
                keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/plvMMrmZnAh_cyeI-ARrIth21Cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.81.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:8f:be:a7:0b:af:52:e3:49:1a:0f:60:b1:4c:4a:d7:82:ca:
         8b:28:94:db:83:98:15:a2:09:9e:4f:93:0a:02:fc:d3:b3:2f:
         79:d4:bd:b2:04:99:ac:71:7c:db:b0:dd:aa:fc:fd:ea:25:35:
         30:02:66:8b:a9:c3:b5:a0:00:54:f3:2b:1c:c3:44:e8:02:5c:
         8c:98:0c:85:96:66:68:e4:dd:4d:4c:6e:fb:43:2c:62:2b:ce:
         76:d2:4b:32:e8:c7:73:a7:0a:bd:06:4b:c7:a4:2c:e3:fe:8f:
         e2:dc:c5:f5:5b:1e:11:99:0b:cc:99:63:ce:c5:ba:e3:d3:af:
         9d:35:ae:75:e0:b6:c3:4f:db:05:09:58:1f:02:10:dd:3b:09:
         9c:b0:c9:6c:10:f3:bf:f7:1a:dd:24:e2:5a:bd:85:6b:68:51:
         7d:52:0a:eb:30:1d:0f:c4:68:e1:ae:7c:7a:f4:ba:2f:b4:4a:
         32:51:21:81:d4:b5:2a:e5:b8:5f:c7:d8:cb:65:b1:0b:45:75:
         b0:96:f9:a5:cb:fc:cf:86:71:76:f8:bc:e2:3e:85:51:c6:75:
         ca:73:0d:af:c2:e6:81:12:90:55:c6:f3:7f:b3:20:59:fb:5a:
         62:a3:df:32:40:56:88:9d:e7:6d:08:4d:44:85:ab:17:bc:8b:
         ac:f1:89:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:28:40 2026 by rpki-client