This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/1-L6Xar872u4_5jc1ukVWvIonRqU.roa
File:                     1-L6Xar872u4_5jc1ukVWvIonRqU.roa (raw, json)
Hash identifier:          v1Q3LXinOWm6sqSKFH1Z+RwnwoZCuDnEGlZUL13Yh78=
Subject key identifier:   F8:BE:97:6A:BF:3B:DA:EE:3F:E6:37:35:BA:45:56:BC:8A:27:46:A5
Certificate issuer:       /CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
Certificate serial:       019B77593702D3275409AE2EB0BBB8695245
Authority key identifier: 0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/1-L6Xar872u4_5jc1ukVWvIonRqU.roa
Signing time:             Thu 01 Jan 2026 02:18:13 +0000
ROA not before:           Thu 01 Jan 2026 02:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206425
IP address blocks:        83.174.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:37:02:d3:27:54:09:ae:2e:b0:bb:b8:69:52:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
        Validity
            Not Before: Jan  1 02:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f8be976abf3bdaee3fe63735ba4556bc8a2746a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8a:b4:0c:db:f5:45:13:66:c8:9c:9a:e2:c1:
                    09:e8:cc:5f:99:bd:61:dc:5a:7a:b4:bf:3f:f7:48:
                    36:1d:6e:40:0f:ec:0b:33:31:6e:4d:78:b4:48:ce:
                    63:3c:2d:5f:1d:18:a5:07:f8:21:4c:7c:5a:2a:a6:
                    ff:64:0b:0b:fb:1c:39:b7:77:f7:a6:ee:40:16:66:
                    41:d3:41:9f:4c:09:3a:3e:a6:44:43:62:7b:f8:57:
                    8a:03:37:73:ed:a8:22:ef:25:37:ca:3e:ff:70:00:
                    be:1a:f6:79:11:af:25:dc:a8:3b:d0:c9:50:db:ff:
                    8c:40:80:2e:cb:29:fb:bb:1e:c9:2c:4f:9e:29:56:
                    41:ab:27:b0:ad:fc:ca:cb:22:61:ab:56:f0:6d:28:
                    63:14:25:90:b9:52:93:77:bc:b6:77:0a:13:d7:3d:
                    78:69:32:be:5b:8a:19:d5:77:9b:b5:46:07:76:f9:
                    8a:90:b1:fa:45:7d:63:9e:45:10:b4:e1:f4:83:9d:
                    7c:54:34:fb:8b:f1:65:47:f0:c3:a5:80:47:88:54:
                    44:87:01:8d:73:8a:30:97:32:37:34:91:f6:52:14:
                    10:e7:64:69:d1:05:cc:6d:a0:d4:4a:ad:d1:da:68:
                    ef:dc:49:a7:9f:c4:6c:b0:77:52:c4:a8:11:e9:60:
                    86:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BE:97:6A:BF:3B:DA:EE:3F:E6:37:35:BA:45:56:BC:8A:27:46:A5
            X509v3 Authority Key Identifier:
                keyid:0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/1-L6Xar872u4_5jc1ukVWvIonRqU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.174.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:b2:f5:bb:a7:3e:45:46:01:21:e6:43:55:86:6d:a6:4f:3d:
         f8:03:27:8c:19:8f:05:25:7d:e3:3b:5f:5d:76:5f:46:dd:ec:
         e8:7c:f9:c3:1a:2c:41:25:8c:0a:06:87:a2:36:2e:d8:95:22:
         82:d1:05:7b:6b:f5:a8:61:47:55:59:de:4e:16:4d:4b:0a:2a:
         20:86:82:84:79:2c:26:fb:23:0f:13:e1:d4:48:06:83:55:ad:
         80:9a:d1:d9:e1:e0:40:ab:54:94:e4:ef:39:c6:93:f5:ba:2c:
         f5:b4:2b:af:2c:a0:fb:20:0c:b3:b1:76:5c:f4:20:8a:30:bf:
         29:c3:16:da:6f:b9:5c:af:e1:aa:fd:87:5e:4e:92:c0:5e:b4:
         0b:6d:a2:c6:71:c8:cb:c1:9c:84:06:1e:b9:ea:79:54:01:3f:
         5a:81:cc:98:7a:be:df:10:87:47:8b:cb:15:9d:a8:82:e6:c4:
         c2:1b:20:34:c0:9d:ca:0b:3a:e0:69:15:b0:97:c2:c3:da:dc:
         96:57:a7:b5:6a:03:ae:94:9c:70:73:2e:8f:1d:50:1c:30:30:
         01:e2:96:59:ee:5c:f5:2d:ed:23:d3:93:17:0a:07:df:be:82:
         c3:e6:24:1e:fd:d1:b7:e0:2e:d9:7e:82:01:1b:7f:a7:43:49:
         32:ad:e9:63
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZt3WTcC0ydUCa4usLu4aVJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjcwM2FiOGQ1OTc1NGFiMjdhOGE1MTY4NTQ1OTFiZmIw
ZjJkYjcwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGJlOTc2YWJmM2JkYWVlM2ZlNjM3MzViYTQ1NTZiYzhhMjc0NmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIq0DNv1RRNmyJya4sEJ6Mxfmb1h
3Fp6tL8/90g2HW5AD+wLMzFuTXi0SM5jPC1fHRilB/ghTHxaKqb/ZAsL+xw5t3f3
pu5AFmZB00GfTAk6PqZEQ2J7+FeKAzdz7agi7yU3yj7/cAC+GvZ5Ea8l3Kg70MlQ
2/+MQIAuyyn7ux7JLE+eKVZBqyewrfzKyyJhq1bwbShjFCWQuVKTd7y2dwoT1z14
aTK+W4oZ1XebtUYHdvmKkLH6RX1jnkUQtOH0g518VDT7i/FlR/DDpYBHiFREhwGN
c4owlzI3NJH2UhQQ52Rp0QXMbaDUSq3R2mjv3Emnn8RssHdSxKgR6WCGXQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPi+l2q/O9ruP+Y3NbpFVryKJ0alMB8GA1UdIwQY
MBaAFA8nA6uNWXVKsnqKUWhUWRv7Dy23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHljRHE0MVpkVXF5ZW9wUmFGUlpHX3NQTGJjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83ODM3NGYtOGMwMi00YTc0LWJlOTYt
OWY0N2Y5YzViOTIzLzEvMS1MNlhhcjg3MnU0XzVqYzF1a1ZXdklvblJxVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODIvNzgzNzRmLThjMDItNGE3NC1iZTk2LTlmNDdmOWM1Yjky
My8xL0R5Y0RxNDFaZFVxeWVvcFJhRlJaR19zUExiYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFOuljAN
BgkqhkiG9w0BAQsFAAOCAQEABLL1u6c+RUYBIeZDVYZtpk89+AMnjBmPBSV94ztf
XXZfRt3s6Hz5wxosQSWMCgaHojYu2JUigtEFe2v1qGFHVVneThZNSwoqIIaChHks
JvsjDxPh1EgGg1WtgJrR2eHgQKtUlOTvOcaT9bos9bQrryyg+yAMs7F2XPQgijC/
KcMW2m+5XK/hqv2HXk6SwF60C22ixnHIy8GchAYeuep5VAE/WoHMmHq+3xCHR4vL
FZ2ogubEwhsgNMCdygs64GkVsJfCw9rcllentWoDrpSccHMujx1QHDAwAeKWWe5c
9S3tI9OTFwoH376Cw+YkHv3Rt+Au2X6CARt/p0NJMq3pYw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:07 2026 by rpki-client