This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/tgMrNJuuMphKYXLcgjQJ14STw-c.roa
File:                     tgMrNJuuMphKYXLcgjQJ14STw-c.roa (raw, json)
Hash identifier:          YyU7V8UUAqFfV2oR+tnAIDie8Sut4zevO+g9JQStnuw=
Subject key identifier:   B6:03:2B:34:9B:AE:32:98:4A:61:72:DC:82:34:09:D7:84:93:C3:E7
Certificate issuer:       /CN=eb10b09ba0c10cf076e5107931d3d691a4396528
Certificate serial:       019B79EBEBAFCAE455635F25E4149CD0F73B
Authority key identifier: EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/tgMrNJuuMphKYXLcgjQJ14STw-c.roa
Signing time:             Thu 01 Jan 2026 14:17:43 +0000
ROA not before:           Thu 01 Jan 2026 14:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214755
IP address blocks:        212.104.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:eb:eb:af:ca:e4:55:63:5f:25:e4:14:9c:d0:f7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb10b09ba0c10cf076e5107931d3d691a4396528
        Validity
            Not Before: Jan  1 14:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b6032b349bae32984a6172dc823409d78493c3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:f8:c4:a5:e2:52:9e:79:01:16:d8:a9:55:
                    a5:8d:e6:00:96:71:ef:66:07:3f:43:78:ba:a4:89:
                    e7:65:51:e1:29:88:32:68:7b:f1:93:a3:6f:c9:58:
                    18:95:9b:70:3a:79:d9:3f:7d:17:79:12:db:5b:24:
                    48:20:a9:4d:94:d2:71:c8:85:60:2f:7e:ca:2b:ef:
                    fb:cd:17:34:97:e8:3d:59:2a:07:82:1a:24:b8:99:
                    7f:99:81:0d:39:83:7d:79:8d:a8:fb:15:f4:22:58:
                    45:48:59:3b:c1:d1:32:47:43:d9:39:30:e2:9e:75:
                    7b:ae:b8:4b:16:52:a5:67:08:12:54:44:1f:11:23:
                    d7:62:f1:cb:93:75:07:22:55:0a:f8:42:a3:96:14:
                    9c:91:16:12:07:a8:f9:4b:e4:7a:c5:28:50:38:4b:
                    31:52:4b:2f:bf:69:3d:18:37:ad:32:20:33:75:06:
                    3b:f8:e5:dc:22:4b:46:32:da:ab:04:f2:31:4d:65:
                    0a:23:86:e4:fe:69:f2:2c:2b:44:83:9f:a0:96:77:
                    d9:c6:e2:1b:d3:f6:f1:06:3d:a7:12:1a:de:78:87:
                    99:36:52:21:39:43:d7:1f:c3:1d:99:3d:0a:ec:ef:
                    32:7b:ef:43:cf:46:f0:28:f5:73:20:66:43:ee:a8:
                    20:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:03:2B:34:9B:AE:32:98:4A:61:72:DC:82:34:09:D7:84:93:C3:E7
            X509v3 Authority Key Identifier:
                keyid:EB:10:B0:9B:A0:C1:0C:F0:76:E5:10:79:31:D3:D6:91:A4:39:65:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/tgMrNJuuMphKYXLcgjQJ14STw-c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a00d12-8603-4bfa-9b62-0a037d78cf03/1/6xCwm6DBDPB25RB5MdPWkaQ5ZSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.104.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:da:ea:b0:2a:4f:f9:b1:8a:f5:fb:46:e7:e6:09:c2:54:22:
         82:ab:eb:11:8a:c4:ea:6e:ca:01:64:db:b1:94:11:80:4f:8a:
         ac:62:09:d1:12:8e:84:22:72:ec:4f:a1:6d:e9:f5:36:03:4a:
         75:e6:70:11:e7:76:90:5a:86:13:90:97:70:cd:be:02:e7:e3:
         c4:eb:88:2e:18:3e:37:d0:2a:37:70:17:0e:29:9c:6c:3f:c4:
         ca:53:ed:99:1f:2f:41:4b:cc:d6:73:b0:e4:1a:1d:9a:cb:d6:
         67:ca:ac:56:74:ee:37:bf:8d:1d:9d:8f:36:e1:ac:2a:4c:41:
         79:9c:ce:50:e3:80:7f:fb:b8:dc:82:82:97:32:ce:29:66:3a:
         c2:c7:28:db:ec:21:f0:2b:54:c6:0f:66:c3:a0:7d:65:c1:d9:
         84:44:b0:15:34:cc:46:c6:47:97:5c:7c:7f:6d:67:1d:1c:d7:
         2f:6b:f8:31:df:23:8b:d4:a2:2c:df:35:64:e5:e1:2d:53:93:
         2e:c7:56:4e:d4:3e:b9:6b:3e:43:c2:2f:da:0c:0d:d2:1f:a9:
         07:b1:7c:80:23:e0:b0:c2:db:f9:0f:a3:f3:3a:0d:81:76:c2:
         8b:81:78:53:47:36:15:3e:c1:0a:66:f1:65:ba:e3:6b:d2:26:
         d7:70:35:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt56+uvyuRVY18l5BSc0Pc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMTBiMDliYTBjMTBjZjA3NmU1MTA3OTMxZDNkNjkxYTQz
OTY1MjgwHhcNMjYwMTAxMTQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjAzMmIzNDliYWUzMjk4NGE2MTcyZGM4MjM0MDlkNzg0OTNjM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRv4xKXiUp55ARbYqVWljeYAlnHv
Zgc/Q3i6pInnZVHhKYgyaHvxk6NvyVgYlZtwOnnZP30XeRLbWyRIIKlNlNJxyIVg
L37KK+/7zRc0l+g9WSoHghokuJl/mYENOYN9eY2o+xX0IlhFSFk7wdEyR0PZOTDi
nnV7rrhLFlKlZwgSVEQfESPXYvHLk3UHIlUK+EKjlhSckRYSB6j5S+R6xShQOEsx
Uksvv2k9GDetMiAzdQY7+OXcIktGMtqrBPIxTWUKI4bk/mnyLCtEg5+glnfZxuIb
0/bxBj2nEhreeIeZNlIhOUPXH8MdmT0K7O8ye+9Dz0bwKPVzIGZD7qggnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLYDKzSbrjKYSmFy3II0CdeEk8PnMB8GA1UdIwQY
MBaAFOsQsJugwQzwduUQeTHT1pGkOWUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnhDd202REJEUEIyNVJCNU1kUFdrYVE1WlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hMDBkMTItODYwMy00YmZhLTliNjIt
MGEwMzdkNzhjZjAzLzEvdGdNck5KdXVNcGhLWVhMY2dqUUoxNFNUdy1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hMDBkMTItODYwMy00YmZhLTliNjItMGEwMzdkNzhjZjAz
LzEvNnhDd202REJEUEIyNVJCNU1kUFdrYVE1WlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GiXMA0G
CSqGSIb3DQEBCwUAA4IBAQBH2uqwKk/5sYr1+0bn5gnCVCKCq+sRisTqbsoBZNux
lBGAT4qsYgnREo6EInLsT6Ft6fU2A0p15nAR53aQWoYTkJdwzb4C5+PE64guGD43
0Co3cBcOKZxsP8TKU+2ZHy9BS8zWc7DkGh2ay9ZnyqxWdO43v40dnY824awqTEF5
nM5Q44B/+7jcgoKXMs4pZjrCxyjb7CHwK1TGD2bDoH1lwdmERLAVNMxGxkeXXHx/
bWcdHNcva/gx3yOL1KIs3zVk5eEtU5Mux1ZO1D65az5Dwi/aDA3SH6kHsXyAI+Cw
wtv5D6PzOg2BdsKLgXhTRzYVPsEKZvFluuNr0ibXcDXf
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:55:57 2026 by rpki-client