This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/kvM6A0dHjKkllZQlI3CjetRcLH0.roa
File:                     kvM6A0dHjKkllZQlI3CjetRcLH0.roa (raw, json)
Hash identifier:          5V7o5lSXn+7yqZx8dMRj6FHd+QV+Yb+1dqEPxXIYP34=
Subject key identifier:   92:F3:3A:03:47:47:8C:A9:25:95:94:25:23:70:A3:7A:D4:5C:2C:7D
Certificate issuer:       /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial:       019B78A329C22049648225C79A68E802F1F8
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/kvM6A0dHjKkllZQlI3CjetRcLH0.roa
Signing time:             Thu 01 Jan 2026 08:18:37 +0000
ROA not before:           Thu 01 Jan 2026 08:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6315
IP address blocks:        185.127.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:29:c2:20:49:64:82:25:c7:9a:68:e8:02:f1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
        Validity
            Not Before: Jan  1 08:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=92f33a0347478ca9259594252370a37ad45c2c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:b3:ff:3c:bd:7c:41:05:cd:05:30:0a:ca:
                    db:a8:6b:e5:c6:0a:b8:1b:4d:4f:21:cc:c2:36:5d:
                    db:a6:2c:8a:ba:70:ae:6a:1e:cc:d7:4a:33:6a:13:
                    dc:11:72:2c:51:f8:27:c7:9c:5f:f4:eb:ef:cb:29:
                    db:43:8b:0c:52:54:69:a8:35:ea:00:47:b1:ec:0f:
                    f4:5c:16:c5:e7:32:d8:ec:12:0c:de:e7:e7:c0:5d:
                    cf:df:80:37:ed:44:e4:6f:15:1e:34:fd:d6:05:7d:
                    5f:cb:d2:8b:3d:a8:e9:67:85:19:1a:82:b6:67:e3:
                    0a:67:a2:ad:6b:7c:d1:ab:d8:67:1b:98:e4:36:1f:
                    99:84:28:a7:e9:41:80:78:21:ea:1d:10:71:5a:b4:
                    b7:f5:ed:4e:34:dc:dd:a0:db:dd:b8:59:61:9a:c0:
                    32:bb:ce:18:65:8d:b5:fb:20:37:dc:1c:3a:56:fa:
                    7c:44:ff:43:68:16:8a:48:70:aa:a0:33:ab:8a:5f:
                    f6:8d:98:5b:9e:f9:4a:48:c1:9b:cf:23:f3:ee:62:
                    3f:2c:c9:20:ff:46:d5:00:62:c9:8d:66:fe:2e:cc:
                    29:b1:7d:26:7b:d2:04:b6:fc:90:7e:61:9f:0a:44:
                    90:c2:57:ea:53:5c:a4:5e:6b:7f:97:7b:51:3d:e3:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F3:3A:03:47:47:8C:A9:25:95:94:25:23:70:A3:7A:D4:5C:2C:7D
            X509v3 Authority Key Identifier:
                keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/kvM6A0dHjKkllZQlI3CjetRcLH0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.127.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:48:33:ad:07:d4:5d:c4:31:42:37:fc:51:f9:e3:13:4b:0c:
         a3:5d:e2:6f:8e:17:a2:59:2d:05:b2:e5:ba:25:d9:ef:93:73:
         2d:67:5c:d4:4c:95:1d:e1:d0:cc:0c:08:f5:c6:54:f8:7a:1f:
         7a:00:b1:b1:b5:71:b1:12:27:ec:14:2c:56:54:82:57:31:d7:
         9f:ce:b9:30:84:86:23:83:a8:83:83:74:4e:60:ef:91:85:f2:
         80:57:af:f4:64:5f:53:aa:dd:04:f8:38:d2:c6:05:c6:2d:97:
         47:7e:ca:23:b8:9d:ff:5e:10:3a:6e:df:13:c9:f5:5c:fb:25:
         24:5b:c8:46:eb:85:d3:d4:ee:61:7d:bf:8d:7b:00:d9:4f:50:
         87:59:a0:c7:0c:73:8d:1e:f6:1c:28:8d:bd:f8:23:3c:c9:09:
         b5:c9:94:89:91:76:75:80:da:a3:20:24:ea:e6:e8:bd:a5:11:
         58:85:5d:2e:ef:3f:86:45:9e:df:5e:7e:b6:b8:6e:9c:72:48:
         ba:d4:c9:de:d4:7d:44:2a:a6:ad:61:d0:eb:9c:ec:39:cc:65:
         92:d8:3b:07:c9:84:b5:71:ca:18:cb:82:9c:29:71:bb:60:79:
         58:2b:82:ef:bb:5d:0e:9a:90:af:bc:ab:52:3a:d7:15:4d:54:
         98:35:e9:f3
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZt4oynCIElkgiXHmmjoAvH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4
N2NhMjQwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmYzM2EwMzQ3NDc4Y2E5MjU5NTk0MjUyMzcwYTM3YWQ0NWMyYzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9Kz/zy9fEEFzQUwCsrbqGvlxgq4
G01PIczCNl3bpiyKunCuah7M10ozahPcEXIsUfgnx5xf9OvvyynbQ4sMUlRpqDXq
AEex7A/0XBbF5zLY7BIM3ufnwF3P34A37UTkbxUeNP3WBX1fy9KLPajpZ4UZGoK2
Z+MKZ6Kta3zRq9hnG5jkNh+ZhCin6UGAeCHqHRBxWrS39e1ONNzdoNvduFlhmsAy
u84YZY21+yA33Bw6Vvp8RP9DaBaKSHCqoDOril/2jZhbnvlKSMGbzyPz7mI/LMkg
/0bVAGLJjWb+LswpsX0me9IEtvyQfmGfCkSQwlfqU1ykXmt/l3tRPeOZCQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJLzOgNHR4ypJZWUJSNwo3rUXCx9MB8GA1UdIwQY
MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl
LWY3NTJkODE2MDVmYi8xL2t2TTZBMGRIaktrbGxaUWxJM0NqZXRSY0xIMC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm
Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5f1ww
DQYJKoZIhvcNAQELBQADggEBACVIM60H1F3EMUI3/FH54xNLDKNd4m+OF6JZLQWy
5bol2e+Tcy1nXNRMlR3h0MwMCPXGVPh6H3oAsbG1cbESJ+wULFZUglcx15/OuTCE
hiODqIODdE5g75GF8oBXr/RkX1Oq3QT4ONLGBcYtl0d+yiO4nf9eEDpu3xPJ9Vz7
JSRbyEbrhdPU7mF9v417ANlPUIdZoMcMc40e9hwojb34IzzJCbXJlImRdnWA2qMg
JOrm6L2lEViFXS7vP4ZFnt9efra4bpxySLrUyd7UfUQqpq1h0Ouc7DnMZZLYOwfJ
hLVxyhjLgpwpcbtgeVgrgu+7XQ6akK+8q1I61xVNVJg16fM=
-----END CERTIFICATE-----
Generated at Sat Jan 10 01:50:15 2026 by rpki-client