This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HI-yulWjSdkTTcGglLjiELeFDcM.roa
File:                     HI-yulWjSdkTTcGglLjiELeFDcM.roa (raw, json)
Hash identifier:          IbRZxdC6DTZm7sopaYrGgwOa5BufPd0W6FqVE2Q7hOc=
Subject key identifier:   1C:8F:B2:BA:55:A3:49:D9:13:4D:C1:A0:94:B8:E2:10:B7:85:0D:C3
Certificate issuer:       /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial:       019AFD775E1A64EB60DB34BE0D224958BE9A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HI-yulWjSdkTTcGglLjiELeFDcM.roa
Signing time:             Mon 08 Dec 2025 10:17:29 +0000
ROA not before:           Mon 08 Dec 2025 10:17:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17497
IP address blocks:        212.135.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:fd:77:5e:1a:64:eb:60:db:34:be:0d:22:49:58:be:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e20b034e2c497b1884488def106972704765029
        Validity
            Not Before: Dec  8 10:17:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=1c8fb2ba55a349d9134dc1a094b8e210b7850dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5d:fc:b3:db:d3:23:66:5c:e2:87:ec:8d:22:
                    c2:79:56:ad:94:20:70:43:2e:5d:69:97:e6:1f:15:
                    17:1f:c2:58:ec:2b:40:52:ee:f9:cb:ea:72:80:2e:
                    c3:b1:55:37:a9:2b:92:1f:60:ca:ae:13:06:5d:51:
                    23:8e:3e:eb:9b:df:2a:80:39:29:f1:dd:52:3a:1b:
                    91:00:e7:21:1d:d8:aa:4d:ca:2e:82:af:3c:22:df:
                    0e:ad:cf:9a:7c:77:d1:0e:ac:a6:ac:56:4b:e8:97:
                    74:4a:64:9e:83:e0:50:b2:cd:ba:a4:ee:8a:14:ed:
                    2f:3f:08:ce:95:9b:c9:99:1d:2e:68:2d:03:4d:1b:
                    f8:f2:b3:d2:47:b8:1f:f8:a6:56:4f:9b:73:29:6d:
                    b9:14:40:e6:7d:2d:68:fc:8a:ac:f3:f1:80:38:43:
                    ab:d3:07:1e:68:02:1b:27:e9:7d:1d:e4:ff:e4:7f:
                    8b:01:93:87:8e:72:ce:00:73:09:ff:ea:49:51:4f:
                    05:f1:a1:0c:66:d6:07:7e:b1:25:b8:4b:67:1c:b7:
                    12:82:b3:d7:0f:34:8c:a9:30:c4:48:9e:01:14:74:
                    9f:4a:b5:dc:e6:34:6e:23:6c:dc:78:ab:12:a7:d6:
                    59:0c:4d:e1:22:9e:03:2f:db:fe:0e:31:8f:83:c3:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8F:B2:BA:55:A3:49:D9:13:4D:C1:A0:94:B8:E2:10:B7:85:0D:C3
            X509v3 Authority Key Identifier:
                keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/HI-yulWjSdkTTcGglLjiELeFDcM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.135.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:fe:8c:29:55:05:d8:7d:a7:14:ac:72:82:c6:3f:f1:13:a8:
         c5:94:8e:5a:7c:3a:8f:69:5c:1f:45:aa:5b:30:8f:58:d7:8c:
         0c:ae:5b:69:77:70:a7:2f:66:8e:dc:ba:44:c5:c9:7b:bf:7a:
         6e:68:f2:7c:53:4a:64:c9:66:2d:99:50:16:e2:d5:d7:a8:34:
         af:10:f9:6f:1e:07:1c:f0:ef:65:96:68:4a:57:8e:6a:78:cf:
         02:5f:61:c0:ab:d6:c3:fc:c3:52:52:fe:5e:51:2b:89:2d:fe:
         dd:a1:fd:2e:51:8b:8a:c2:0e:86:4a:d7:8a:bb:c8:90:c3:bd:
         7e:69:d6:45:75:22:45:60:0b:6b:e2:68:1b:98:37:2d:3b:ba:
         48:5c:43:56:1b:23:c7:a1:be:8c:ba:39:e7:64:45:f2:6d:65:
         1d:1c:cb:cb:80:c7:19:2f:6d:c9:db:3c:7f:95:3a:2d:54:69:
         3d:5e:b5:91:cb:fb:3f:17:ff:7a:9e:8e:12:d7:b5:d4:08:1c:
         7d:70:c0:7e:dc:b9:37:ac:94:3b:e7:f8:27:7d:ca:15:5d:f9:
         ef:55:4b:33:70:c2:cf:04:c4:d2:72:51:eb:83:83:a0:3f:c2:
         11:9b:ac:d7:70:7e:7c:06:5a:30:04:eb:38:00:12:75:ab:ab:
         10:69:8f:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZr9d14aZOtg2zS+DSJJWL6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjUxMjA4MTAxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzhmYjJiYTU1YTM0OWQ5MTM0ZGMxYTA5NGI4ZTIxMGI3ODUwZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l38s9vTI2Zc4ofsjSLCeVatlCBw
Qy5daZfmHxUXH8JY7CtAUu75y+pygC7DsVU3qSuSH2DKrhMGXVEjjj7rm98qgDkp
8d1SOhuRAOchHdiqTcougq88It8Orc+afHfRDqymrFZL6Jd0SmSeg+BQss26pO6K
FO0vPwjOlZvJmR0uaC0DTRv48rPSR7gf+KZWT5tzKW25FEDmfS1o/Iqs8/GAOEOr
0wceaAIbJ+l9HeT/5H+LAZOHjnLOAHMJ/+pJUU8F8aEMZtYHfrEluEtnHLcSgrPX
DzSMqTDESJ4BFHSfSrXc5jRuI2zceKsSp9ZZDE3hIp4DL9v+DjGPg8O2jwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFByPsrpVo0nZE03BoJS44hC3hQ3DMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvSEkteXVsV2pTZGtUVGNHZ2xMamlFTGVGRGNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IcYMA0G
CSqGSIb3DQEBCwUAA4IBAQAH/owpVQXYfacUrHKCxj/xE6jFlI5afDqPaVwfRapb
MI9Y14wMrltpd3CnL2aO3LpExcl7v3puaPJ8U0pkyWYtmVAW4tXXqDSvEPlvHgcc
8O9llmhKV45qeM8CX2HAq9bD/MNSUv5eUSuJLf7dof0uUYuKwg6GSteKu8iQw71+
adZFdSJFYAtr4mgbmDctO7pIXENWGyPHob6MujnnZEXybWUdHMvLgMcZL23J2zx/
lTotVGk9XrWRy/s/F/96no4S17XUCBx9cMB+3Lk3rJQ75/gnfcoVXfnvVUszcMLP
BMTSclHrg4OgP8IRm6zXcH58BlowBOs4ABJ1q6sQaY/O
-----END CERTIFICATE-----
Generated at Wed Dec 10 07:52:44 2025 by rpki-client