This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/vsB6EtIWBfXBSbWf1xHu_yS7HEM.roa
File:                     vsB6EtIWBfXBSbWf1xHu_yS7HEM.roa (raw, json)
Hash identifier:          m2D7wmr7MD2TyhQqE1y7M06AEP4itUhMqaGbuUx+bSE=
Subject key identifier:   BE:C0:7A:12:D2:16:05:F5:C1:49:B5:9F:D7:11:EE:FF:24:BB:1C:43
Certificate issuer:       /CN=b262bf21de51385859416c4c608001e2025a5d25
Certificate serial:       019B7C80540A54C2833A0DF5DDE76766D095
Authority key identifier: B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/vsB6EtIWBfXBSbWf1xHu_yS7HEM.roa
Signing time:             Fri 02 Jan 2026 02:19:03 +0000
ROA not before:           Fri 02 Jan 2026 02:19:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60036
IP address blocks:        91.232.181.0/24 maxlen: 24
                          185.19.148.0/23 maxlen: 23
                          185.19.148.0/24 maxlen: 24
                          185.19.149.0/24 maxlen: 24
                          185.61.115.0/24 maxlen: 24
                          195.177.252.0/23 maxlen: 23
                          195.177.252.0/24 maxlen: 24
                          195.177.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:54:0a:54:c2:83:3a:0d:f5:dd:e7:67:66:d0:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b262bf21de51385859416c4c608001e2025a5d25
        Validity
            Not Before: Jan  2 02:19:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bec07a12d21605f5c149b59fd711eeff24bb1c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c1:e5:fa:8e:04:36:55:3f:08:3b:ce:19:50:
                    b8:9a:71:04:59:71:73:cd:99:19:ef:13:a2:9f:60:
                    83:b4:f7:4d:32:c9:8c:48:46:32:5b:d5:55:ea:a1:
                    3b:a0:39:93:df:71:bd:bd:16:3a:9e:0f:68:c1:0a:
                    7a:e7:3e:67:df:24:2f:8c:bb:53:e9:a7:99:8b:a5:
                    36:6b:72:eb:70:4c:5e:88:b5:53:92:23:49:61:93:
                    1b:b4:45:0c:99:d3:82:b5:c4:b2:d1:83:21:59:74:
                    e8:73:2f:7d:5b:26:50:3b:40:09:e7:8c:5f:50:a7:
                    3d:6a:68:68:ae:8e:70:6d:d7:0d:3e:2e:bf:34:50:
                    c3:d2:a9:8f:94:0a:ed:50:8d:7c:28:72:bf:c6:95:
                    38:ad:41:31:1e:dc:a4:c0:5f:67:e8:c5:cf:9d:37:
                    44:ff:b6:25:28:a2:4d:37:e6:0b:6a:9f:ad:c1:7a:
                    0a:37:f3:92:5f:f6:ea:cf:ff:6f:71:e6:29:15:82:
                    b9:fb:66:1f:7d:22:ee:84:a1:e6:cf:bf:67:e7:ef:
                    43:27:b7:35:db:8e:fd:81:38:3a:09:28:f4:e7:2f:
                    b3:9a:91:2c:1d:f5:e9:9b:20:dd:49:2d:9c:bc:d1:
                    89:06:4f:c4:4e:d7:44:eb:0a:e3:9f:d0:13:2e:44:
                    cc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C0:7A:12:D2:16:05:F5:C1:49:B5:9F:D7:11:EE:FF:24:BB:1C:43
            X509v3 Authority Key Identifier:
                keyid:B2:62:BF:21:DE:51:38:58:59:41:6C:4C:60:80:01:E2:02:5A:5D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smK_Id5ROFhZQWxMYIAB4gJaXSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/vsB6EtIWBfXBSbWf1xHu_yS7HEM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/863093-5ed6-43b2-bbda-14c6c5055f88/1/smK_Id5ROFhZQWxMYIAB4gJaXSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.232.181.0/24
                  185.19.148.0/23
                  185.61.115.0/24
                  195.177.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:6d:2b:6e:6c:0e:de:8e:a9:0d:13:09:6b:d1:dc:56:d7:79:
         9d:6a:b6:ca:2e:68:45:0e:f2:15:1a:29:f6:f5:18:a3:6a:0f:
         b6:e3:40:e9:58:2d:5d:f8:c7:72:5e:af:e5:72:03:b6:c8:d3:
         a8:e6:a8:89:18:cf:03:be:c5:ef:9d:93:6a:68:51:6c:01:47:
         c1:00:3b:eb:a7:e8:38:3d:0b:04:3b:78:41:82:8c:fb:06:9c:
         87:d5:a5:7a:8a:2f:8c:3b:3b:56:a1:1c:11:81:36:10:f3:ae:
         f8:60:0d:65:a9:10:83:42:20:6b:55:47:b7:b2:c4:a2:1b:5a:
         af:3e:90:7d:67:44:d8:5d:5f:d2:9e:52:ca:ee:c5:70:7d:ac:
         58:1c:28:62:c9:e6:3c:3a:2f:2d:be:9b:d0:49:e1:4f:57:6a:
         a2:3d:5a:78:6c:66:14:bf:29:e5:fc:5f:c7:02:c1:6a:ac:68:
         61:ec:35:14:75:f1:59:bc:66:8a:9b:a4:76:9b:36:db:fd:1b:
         70:2e:eb:43:d8:e2:7f:be:2e:04:b7:1f:25:78:20:3d:79:d2:
         13:a4:94:3c:25:8a:c7:d9:05:e5:96:e0:b1:4c:1e:0d:55:07:
         88:77:14:42:a5:18:10:0a:4c:4a:22:90:27:c2:16:55:34:aa:
         fe:64:60:c2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZt8gFQKVMKDOg313ednZtCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNjJiZjIxZGU1MTM4NTg1OTQxNmM0YzYwODAwMWUyMDI1
YTVkMjUwHhcNMjYwMTAyMDIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWMwN2ExMmQyMTYwNWY1YzE0OWI1OWZkNzExZWVmZjI0YmIxYzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cHl+o4ENlU/CDvOGVC4mnEEWXFz
zZkZ7xOin2CDtPdNMsmMSEYyW9VV6qE7oDmT33G9vRY6ng9owQp65z5n3yQvjLtT
6aeZi6U2a3LrcExeiLVTkiNJYZMbtEUMmdOCtcSy0YMhWXTocy99WyZQO0AJ54xf
UKc9amhoro5wbdcNPi6/NFDD0qmPlArtUI18KHK/xpU4rUExHtykwF9n6MXPnTdE
/7YlKKJNN+YLap+twXoKN/OSX/bqz/9vceYpFYK5+2YffSLuhKHmz79n5+9DJ7c1
2479gTg6CSj05y+zmpEsHfXpmyDdSS2cvNGJBk/ETtdE6wrjn9ATLkTMXwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFL7AehLSFgX1wUm1n9cR7v8kuxxDMB8GA1UdIwQY
MBaAFLJivyHeUThYWUFsTGCAAeICWl0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc21LX0lkNVJPRmhaUVd4TVlJQUI0Z0phWFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84NjMwOTMtNWVkNi00M2IyLWJiZGEt
MTRjNmM1MDU1Zjg4LzEvdnNCNkV0SVdCZlhCU2JXZjF4SHVfeVM3SEVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84NjMwOTMtNWVkNi00M2IyLWJiZGEtMTRjNmM1MDU1Zjg4
LzEvc21LX0lkNVJPRmhaUVd4TVlJQUI0Z0phWFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW+i1AwQB
uROUAwQAuT1zAwQBw7H8MA0GCSqGSIb3DQEBCwUAA4IBAQBPbStubA7ejqkNEwlr
0dxW13mdarbKLmhFDvIVGin29Rijag+240DpWC1d+MdyXq/lcgO2yNOo5qiJGM8D
vsXvnZNqaFFsAUfBADvrp+g4PQsEO3hBgoz7BpyH1aV6ii+MOztWoRwRgTYQ8674
YA1lqRCDQiBrVUe3ssSiG1qvPpB9Z0TYXV/SnlLK7sVwfaxYHChiyeY8Oi8tvpvQ
SeFPV2qiPVp4bGYUvynl/F/HAsFqrGhh7DUUdfFZvGaKm6R2mzbb/RtwLutD2OJ/
vi4Etx8leCA9edITpJQ8JYrH2QXlluCxTB4NVQeIdxRCpRgQCkxKIpAnwhZVNKr+
ZGDC
-----END CERTIFICATE-----
Generated at Sun Jan 25 03:09:04 2026 by rpki-client