This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa
File:                     TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa (raw, json)
Hash identifier:          tFzELYSe05eXp55I4gzQwEHo9uvcyGGItcMS2z7uaLI=
Subject key identifier:   4C:2F:DE:4F:EF:EE:42:63:5C:EE:81:F6:E6:3F:68:B9:25:BF:A5:B4
Certificate issuer:       /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial:       019B7AC902C390C8FA9B47670057FC93A351
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa
Signing time:             Thu 01 Jan 2026 18:19:12 +0000
ROA not before:           Thu 01 Jan 2026 18:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     26636
IP address blocks:        92.118.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 06:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:02:c3:90:c8:fa:9b:47:67:00:57:fc:93:a3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
        Validity
            Not Before: Jan  1 18:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4c2fde4fefee42635cee81f6e63f68b925bfa5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:da:01:f0:06:50:db:41:cf:40:0b:4e:ce:40:
                    9c:a9:fc:2d:fd:6b:e7:e7:ae:fe:3b:20:a9:36:47:
                    ce:55:45:7d:8b:3a:d8:51:fa:34:de:9c:ce:9b:b2:
                    5e:47:5d:77:99:3e:0b:ab:e6:0b:44:74:b6:e6:f2:
                    ff:4d:1d:df:51:f1:71:e0:22:ac:4f:fb:48:5e:3a:
                    ba:80:2a:29:50:91:77:37:35:93:f2:78:7a:8c:71:
                    64:64:25:cb:ab:15:35:e8:ee:dc:2e:4e:23:10:dc:
                    79:44:58:a1:82:6e:17:77:f9:2a:49:60:b3:78:9c:
                    19:81:ee:eb:06:2c:a3:1f:9c:93:9d:0a:be:5f:6f:
                    30:6f:8e:3a:53:1a:65:4c:30:c6:9a:bb:9b:58:26:
                    f5:39:a0:c5:f5:db:bb:82:f8:25:97:56:cd:99:78:
                    66:f3:11:49:26:0d:c5:5d:b9:55:c6:62:6d:e0:e3:
                    de:3a:f3:fc:8d:9d:0a:d2:21:38:1a:61:dc:83:51:
                    00:c7:02:34:c9:f1:4d:35:ca:2b:29:75:6b:b5:42:
                    cb:77:0a:dd:f6:fe:ab:ef:57:1f:8e:8f:9e:aa:fd:
                    dd:7a:8f:59:22:fe:f2:6e:bb:d5:19:df:0c:65:c2:
                    c2:43:1a:fa:79:ff:47:dc:37:d2:0d:dd:5b:93:10:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2F:DE:4F:EF:EE:42:63:5C:EE:81:F6:E6:3F:68:B9:25:BF:A5:B4
            X509v3 Authority Key Identifier:
                keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/TC_eT-_uQmNc7oH25j9ouSW_pbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:35:a6:88:fd:7d:b2:ce:0e:10:d4:b1:95:b0:cd:e9:56:3e:
         6c:12:c5:14:dc:45:a5:dc:8b:95:1e:0a:11:52:7e:8c:ef:21:
         d4:0e:82:96:e0:5c:88:68:d3:6e:0a:5f:db:79:06:c4:29:d9:
         fd:1e:24:58:4f:a8:10:b2:0d:1b:9c:9f:c5:ec:a4:3c:e1:b5:
         9c:6a:d4:f9:fb:da:45:30:71:08:64:da:40:83:c1:62:87:33:
         92:e0:1f:44:ef:b7:36:ca:06:33:86:f4:51:e5:e7:f0:a9:bb:
         f6:00:87:de:18:ac:f4:01:cb:e1:7f:ad:da:3a:8a:73:13:13:
         5e:f5:e5:ce:24:55:9c:67:d2:8e:91:ce:54:6c:2d:f7:d3:00:
         7a:aa:7e:6a:db:1f:0e:d3:07:97:7f:f0:e6:15:95:ed:9e:99:
         47:7a:98:25:fe:2a:db:ba:9c:79:b3:8c:c5:2c:b5:91:b9:21:
         53:c9:a2:bb:68:34:9c:b2:d3:22:c8:8a:56:59:04:bd:53:0b:
         cc:7c:79:a5:51:c5:19:0b:d6:9a:82:e3:6a:cc:9d:df:c3:94:
         d0:4e:8a:8a:0a:0e:44:35:c5:20:d5:73:50:a8:5a:73:28:70:
         05:bd:12:c3:14:20:c9:f3:82:d7:48:1d:88:57:63:0d:06:77:
         c0:68:ac:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6yQLDkMj6m0dnAFf8k6NRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2
NGIyMGYwHhcNMjYwMTAxMTgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzJmZGU0ZmVmZWU0MjYzNWNlZTgxZjZlNjNmNjhiOTI1YmZhNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9oB8AZQ20HPQAtOzkCcqfwt/Wvn
567+OyCpNkfOVUV9izrYUfo03pzOm7JeR113mT4Lq+YLRHS25vL/TR3fUfFx4CKs
T/tIXjq6gCopUJF3NzWT8nh6jHFkZCXLqxU16O7cLk4jENx5RFihgm4Xd/kqSWCz
eJwZge7rBiyjH5yTnQq+X28wb446UxplTDDGmrubWCb1OaDF9du7gvgll1bNmXhm
8xFJJg3FXblVxmJt4OPeOvP8jZ0K0iE4GmHcg1EAxwI0yfFNNcorKXVrtULLdwrd
9v6r71cfjo+eqv3deo9ZIv7ybrvVGd8MZcLCQxr6ef9H3DfSDd1bkxDinQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEwv3k/v7kJjXO6B9uY/aLklv6W0MB8GA1UdIwQY
MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct
NDkwNTI0M2JjODI4LzEvVENfZVQtX3VRbU5jN29IMjVqOW91U1dfcGJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4
LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXHZyMA0G
CSqGSIb3DQEBCwUAA4IBAQADNaaI/X2yzg4Q1LGVsM3pVj5sEsUU3EWl3IuVHgoR
Un6M7yHUDoKW4FyIaNNuCl/beQbEKdn9HiRYT6gQsg0bnJ/F7KQ84bWcatT5+9pF
MHEIZNpAg8FihzOS4B9E77c2ygYzhvRR5efwqbv2AIfeGKz0Acvhf63aOopzExNe
9eXOJFWcZ9KOkc5UbC330wB6qn5q2x8O0weXf/DmFZXtnplHepgl/irbupx5s4zF
LLWRuSFTyaK7aDScstMiyIpWWQS9UwvMfHmlUcUZC9aaguNqzJ3fw5TQToqKCg5E
NcUg1XNQqFpzKHAFvRLDFCDJ84LXSB2IV2MNBnfAaKw/
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:10:55 2026 by rpki-client