This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/B8DoC5brIbdcKCleVmQPvjtWXBY.roa
File:                     B8DoC5brIbdcKCleVmQPvjtWXBY.roa (raw, json)
Hash identifier:          fwuSLYiomHoCM+ValZyW+pJ6ZXG5StCk1C5NhErYdTA=
Subject key identifier:   07:C0:E8:0B:96:EB:21:B7:5C:28:29:5E:56:64:0F:BE:3B:56:5C:16
Certificate issuer:       /CN=5347821921558f66a037fe9ca0dcc1046cf484e0
Certificate serial:       019B775928AC00A636648DFEB5389CCE5108
Authority key identifier: 53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/B8DoC5brIbdcKCleVmQPvjtWXBY.roa
Signing time:             Thu 01 Jan 2026 02:18:10 +0000
ROA not before:           Thu 01 Jan 2026 02:18:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34162
IP address blocks:        194.0.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:28:ac:00:a6:36:64:8d:fe:b5:38:9c:ce:51:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5347821921558f66a037fe9ca0dcc1046cf484e0
        Validity
            Not Before: Jan  1 02:18:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=07c0e80b96eb21b75c28295e56640fbe3b565c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:48:f8:cb:7f:b4:2f:70:6d:b3:d6:49:fd:73:
                    6c:20:3a:06:13:bc:38:cc:d2:84:75:e6:15:e3:62:
                    de:ea:9f:ac:f2:6f:1a:e8:25:a2:12:0b:01:db:0b:
                    f7:3b:8c:67:76:7a:f6:d9:e5:2f:96:26:64:39:25:
                    b4:66:99:bf:af:0c:b6:c7:e1:e2:ef:3a:c1:af:7d:
                    76:c5:64:12:3f:cf:7a:02:27:c2:69:7c:be:79:c1:
                    3c:06:f9:90:88:f8:b5:d8:81:44:3f:86:ef:6f:2c:
                    0e:b9:35:d2:da:96:cc:13:20:4c:46:c8:00:3e:ce:
                    d6:3a:d7:c5:66:b1:f6:e2:12:57:b4:6b:b6:44:10:
                    66:d5:50:78:f2:e9:58:e8:75:ec:19:b5:06:7d:bf:
                    30:49:7d:71:e4:e6:84:bf:87:5c:ca:f3:f8:3b:eb:
                    0d:ab:1c:8c:70:63:a4:b1:10:0d:5f:fb:74:fd:b0:
                    ff:45:e1:58:09:ea:e3:f3:35:6c:e2:06:7c:67:ad:
                    77:1c:c0:35:d9:d7:78:e6:c2:9e:fa:30:7c:f5:24:
                    fd:99:92:1c:d6:5c:e2:17:50:be:57:2b:fa:dc:14:
                    36:f0:1e:cd:e1:1a:65:87:7c:48:d6:b5:db:26:10:
                    a2:1e:11:73:54:ed:66:7f:a6:ca:e2:32:64:d3:50:
                    05:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C0:E8:0B:96:EB:21:B7:5C:28:29:5E:56:64:0F:BE:3B:56:5C:16
            X509v3 Authority Key Identifier:
                keyid:53:47:82:19:21:55:8F:66:A0:37:FE:9C:A0:DC:C1:04:6C:F4:84:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0eCGSFVj2agN_6coNzBBGz0hOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/B8DoC5brIbdcKCleVmQPvjtWXBY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/94ecc4-f4fd-4fce-8054-ed1774adbf2f/1/U0eCGSFVj2agN_6coNzBBGz0hOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.0.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:fa:33:49:68:f1:74:1b:17:8e:c0:c2:f8:b5:82:98:76:ca:
         81:37:a9:a0:b3:1c:53:78:a0:df:c8:c0:b7:75:ba:5d:9e:20:
         ef:74:45:b7:77:66:72:35:5e:e9:c0:48:2a:7a:55:82:e7:60:
         03:a6:c5:95:b7:c7:7e:1e:32:35:91:e0:b7:99:c4:ba:03:ce:
         67:48:be:75:9d:37:00:15:41:ee:f3:a7:4e:32:23:0c:23:be:
         8b:cc:3b:66:5f:a0:26:00:d3:5c:62:42:99:5b:8f:bf:25:10:
         18:9d:f0:47:ce:4f:c5:8f:13:96:6f:84:3f:69:dd:53:24:2d:
         d3:21:e7:c8:78:c4:6c:93:86:0f:03:d2:51:c7:08:5d:71:7d:
         01:3c:9f:6e:7a:be:2b:83:13:49:41:8b:a9:40:fc:64:1e:46:
         c6:91:9a:46:c7:c5:ee:6c:c4:f0:f3:33:73:f9:33:a3:e4:fd:
         d8:d4:1f:ac:0b:4e:d5:70:44:23:79:97:a8:2c:db:d5:59:c4:
         52:6b:d7:b9:1d:bb:71:f0:d0:23:6d:25:23:18:cb:dd:21:57:
         87:24:1d:70:cb:46:16:3f:dd:0e:b5:fe:98:d4:f5:a8:d4:bb:
         8a:5d:43:ee:93:fe:3e:8c:59:1a:a1:f8:da:06:71:ad:99:48:
         70:2f:91:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WSisAKY2ZI3+tTiczlEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNDc4MjE5MjE1NThmNjZhMDM3ZmU5Y2EwZGNjMTA0NmNm
NDg0ZTAwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2MwZTgwYjk2ZWIyMWI3NWMyODI5NWU1NjY0MGZiZTNiNTY1YzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEj4y3+0L3Bts9ZJ/XNsIDoGE7w4
zNKEdeYV42Le6p+s8m8a6CWiEgsB2wv3O4xndnr22eUvliZkOSW0Zpm/rwy2x+Hi
7zrBr312xWQSP896AifCaXy+ecE8BvmQiPi12IFEP4bvbywOuTXS2pbMEyBMRsgA
Ps7WOtfFZrH24hJXtGu2RBBm1VB48ulY6HXsGbUGfb8wSX1x5OaEv4dcyvP4O+sN
qxyMcGOksRANX/t0/bD/ReFYCerj8zVs4gZ8Z613HMA12dd45sKe+jB89ST9mZIc
1lziF1C+Vyv63BQ28B7N4Rplh3xI1rXbJhCiHhFzVO1mf6bK4jJk01AFVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAfA6AuW6yG3XCgpXlZkD747VlwWMB8GA1UdIwQY
MBaAFFNHghkhVY9moDf+nKDcwQRs9ITgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTBlQ0dTRlZqMmFnTl82Y29OekJCR3owaE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85NGVjYzQtZjRmZC00ZmNlLTgwNTQt
ZWQxNzc0YWRiZjJmLzEvQjhEb0M1YnJJYmRjS0NsZVZtUVB2anRXWEJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85NGVjYzQtZjRmZC00ZmNlLTgwNTQtZWQxNzc0YWRiZjJm
LzEvVTBlQ0dTRlZqMmFnTl82Y29OekJCR3owaE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgCCMA0G
CSqGSIb3DQEBCwUAA4IBAQAX+jNJaPF0GxeOwML4tYKYdsqBN6mgsxxTeKDfyMC3
dbpdniDvdEW3d2ZyNV7pwEgqelWC52ADpsWVt8d+HjI1keC3mcS6A85nSL51nTcA
FUHu86dOMiMMI76LzDtmX6AmANNcYkKZW4+/JRAYnfBHzk/FjxOWb4Q/ad1TJC3T
IefIeMRsk4YPA9JRxwhdcX0BPJ9uer4rgxNJQYupQPxkHkbGkZpGx8XubMTw8zNz
+TOj5P3Y1B+sC07VcEQjeZeoLNvVWcRSa9e5Hbtx8NAjbSUjGMvdIVeHJB1wy0YW
P90Otf6Y1PWo1LuKXUPuk/4+jFkaofjaBnGtmUhwL5Gd
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:46:55 2026 by rpki-client