This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/4V3yiUlfeXaIqZDlRmdJcIdoHMo.roa
File:                     4V3yiUlfeXaIqZDlRmdJcIdoHMo.roa (raw, json)
Hash identifier:          F74mnACNWLk6jkDSnPWeJjY0n0VuURivlO3KGnXCfVE=
Subject key identifier:   E1:5D:F2:89:49:5F:79:76:88:A9:90:E5:46:67:49:70:87:68:1C:CA
Certificate issuer:       /CN=5725add2bff3e668ae18554beebf31a23a69dda5
Certificate serial:       019B79EBC351CF250598671F4C889B1BD8A1
Authority key identifier: 57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/4V3yiUlfeXaIqZDlRmdJcIdoHMo.roa
Signing time:             Thu 01 Jan 2026 14:17:32 +0000
ROA not before:           Thu 01 Jan 2026 14:17:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12823
IP address blocks:        193.53.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:eb:c3:51:cf:25:05:98:67:1f:4c:88:9b:1b:d8:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5725add2bff3e668ae18554beebf31a23a69dda5
        Validity
            Not Before: Jan  1 14:17:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e15df289495f797688a990e54667497087681cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:4b:eb:cd:39:4d:e5:be:7f:73:52:12:cb:
                    fc:5e:23:89:17:33:20:68:2e:39:dc:5a:94:e1:cf:
                    03:c8:bb:3b:19:da:f7:ea:c2:cc:0b:42:5b:eb:f0:
                    da:95:33:a6:9f:cc:c7:f7:47:c6:38:04:82:be:07:
                    37:d3:3b:8f:fe:ec:b7:94:b7:0a:a9:56:bd:69:2c:
                    83:39:5c:2c:81:f2:99:1a:40:a2:96:85:30:87:08:
                    c2:ee:82:69:59:d4:8b:d5:2f:35:70:52:89:69:34:
                    e7:50:fc:73:df:26:55:ed:06:dc:76:0d:79:27:35:
                    f2:b6:30:8e:0c:e9:9f:02:f8:5f:58:78:0a:ee:3e:
                    fa:33:d8:b9:c9:d7:1a:65:75:bf:87:50:7f:4b:c3:
                    70:d8:84:b4:1c:3c:b5:d2:0b:bc:d6:5f:50:42:a9:
                    da:b2:29:00:02:48:6f:ee:84:98:f8:b6:3b:d2:c3:
                    e7:fc:51:53:81:4e:90:96:f4:bd:f9:c3:ac:f2:e1:
                    fd:f5:36:c1:d7:f5:33:d7:33:53:40:dc:9f:5c:0c:
                    d0:1f:df:93:ec:06:a5:72:a3:19:62:53:35:99:a3:
                    01:f1:10:1a:4d:69:c3:85:55:a9:0f:2a:5c:0c:c1:
                    a8:3a:99:75:a8:57:92:7e:08:42:69:dc:60:20:ce:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5D:F2:89:49:5F:79:76:88:A9:90:E5:46:67:49:70:87:68:1C:CA
            X509v3 Authority Key Identifier:
                keyid:57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/4V3yiUlfeXaIqZDlRmdJcIdoHMo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.53.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:76:7b:98:e6:99:f8:c8:78:00:82:4a:c7:ac:01:76:16:10:
         c3:64:6f:74:87:b8:00:c7:02:56:34:70:e4:ab:70:b2:d4:c1:
         49:50:08:74:6e:b2:91:fb:dc:44:f4:01:be:6b:87:23:16:89:
         fb:b2:b8:41:5c:66:77:2c:64:92:3f:e5:5f:de:41:12:64:4e:
         e4:f6:03:a8:88:1d:81:c3:89:74:29:73:d1:05:66:78:3b:12:
         8b:23:77:a5:14:cd:ef:19:3e:2e:08:cb:90:b3:f2:8d:a3:e4:
         8b:a2:77:09:eb:d8:32:63:b9:ad:e2:a7:20:18:35:1a:b2:28:
         07:0f:3a:9e:53:36:3e:67:a2:c6:4b:19:cb:7c:4a:a4:9d:62:
         e6:3c:32:a9:d6:13:e2:8c:e8:67:36:f6:05:35:b1:b9:29:1a:
         fa:58:00:f1:8b:a2:3a:82:ba:41:1d:92:87:33:b1:6d:6a:cd:
         3e:c5:54:b3:ae:71:37:b3:57:19:31:1e:ff:b3:d7:73:15:4e:
         f9:28:b6:a9:36:50:d6:2a:57:57:45:d3:c0:99:d0:f3:fd:bf:
         5e:78:8e:75:e0:04:8b:e3:4e:d6:86:8f:87:17:5b:8f:95:a5:
         4e:9e:e3:90:1e:dd:f2:5c:44:14:60:8c:d7:35:10:74:ff:89:
         61:74:a8:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt568NRzyUFmGcfTIibG9ihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MjVhZGQyYmZmM2U2NjhhZTE4NTU0YmVlYmYzMWEyM2E2
OWRkYTUwHhcNMjYwMTAxMTQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTVkZjI4OTQ5NWY3OTc2ODhhOTkwZTU0NjY3NDk3MDg3NjgxY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqVL6805TeW+f3NSEsv8XiOJFzMg
aC453FqU4c8DyLs7Gdr36sLMC0Jb6/DalTOmn8zH90fGOASCvgc30zuP/uy3lLcK
qVa9aSyDOVwsgfKZGkCiloUwhwjC7oJpWdSL1S81cFKJaTTnUPxz3yZV7Qbcdg15
JzXytjCODOmfAvhfWHgK7j76M9i5ydcaZXW/h1B/S8Nw2IS0HDy10gu81l9QQqna
sikAAkhv7oSY+LY70sPn/FFTgU6QlvS9+cOs8uH99TbB1/Uz1zNTQNyfXAzQH9+T
7AalcqMZYlM1maMB8RAaTWnDhVWpDypcDMGoOpl1qFeSfghCadxgIM4vDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOFd8olJX3l2iKmQ5UZnSXCHaBzKMB8GA1UdIwQY
MBaAFFclrdK/8+ZorhhVS+6/MaI6ad2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnlXdDByX3o1bWl1R0ZWTDdyOHhvanBwM2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kYTk0ODktNmI4Zi00N2IwLWE2OWQt
YjY5ZTQ0MzQ5Mzk1LzEvNFYzeWlVbGZlWGFJcVpEbFJtZEpjSWRvSE1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kYTk0ODktNmI4Zi00N2IwLWE2OWQtYjY5ZTQ0MzQ5Mzk1
LzEvVnlXdDByX3o1bWl1R0ZWTDdyOHhvanBwM2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTVqMA0G
CSqGSIb3DQEBCwUAA4IBAQAYdnuY5pn4yHgAgkrHrAF2FhDDZG90h7gAxwJWNHDk
q3Cy1MFJUAh0brKR+9xE9AG+a4cjFon7srhBXGZ3LGSSP+Vf3kESZE7k9gOoiB2B
w4l0KXPRBWZ4OxKLI3elFM3vGT4uCMuQs/KNo+SLoncJ69gyY7mt4qcgGDUasigH
DzqeUzY+Z6LGSxnLfEqknWLmPDKp1hPijOhnNvYFNbG5KRr6WADxi6I6grpBHZKH
M7Ftas0+xVSzrnE3s1cZMR7/s9dzFU75KLapNlDWKldXRdPAmdDz/b9eeI514ASL
407Who+HF1uPlaVOnuOQHt3yXEQUYIzXNRB0/4lhdKhy
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:34 2026 by rpki-client