This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/c28eAYv0rrRe6_MausaY2by0884.roa
File:                     c28eAYv0rrRe6_MausaY2by0884.roa (raw, json)
Hash identifier:          Oxg9SozDO0QIj1rDPvskXO8gNt2LP5JL6/sMnFmtWaM=
Subject key identifier:   73:6F:1E:01:8B:F4:AE:B4:5E:EB:F3:1A:BA:C6:98:D9:BC:B4:F3:CE
Certificate issuer:       /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Certificate serial:       019B77594AF22BC936D190EB8EAEE9EB970D
Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/c28eAYv0rrRe6_MausaY2by0884.roa
Signing time:             Thu 01 Jan 2026 02:18:19 +0000
ROA not before:           Thu 01 Jan 2026 02:18:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39620
IP address blocks:        81.29.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:4a:f2:2b:c9:36:d1:90:eb:8e:ae:e9:eb:97:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
        Validity
            Not Before: Jan  1 02:18:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=736f1e018bf4aeb45eebf31abac698d9bcb4f3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c0:f2:09:82:0f:9d:3e:b1:82:a6:2c:bd:c9:
                    e6:94:b1:a7:c1:7d:9e:25:12:09:57:e4:16:b4:47:
                    41:0d:62:33:84:01:f8:b1:0a:6f:38:fd:9a:48:96:
                    67:c7:0f:ea:3c:50:ff:21:87:1c:b7:0b:31:3b:f4:
                    5b:c0:0d:a0:b4:df:2e:ff:0d:b8:c5:6e:26:08:b6:
                    fc:9b:d5:e1:ee:c9:fe:6d:a0:2c:bb:4b:d6:2f:11:
                    fb:98:3a:87:01:c8:0b:cf:36:8c:7f:1a:03:93:3a:
                    17:18:0c:b4:20:93:8b:7d:a8:e2:ed:c3:01:94:3b:
                    d4:18:52:4a:3b:eb:c8:1f:ec:63:cf:cb:f6:45:86:
                    77:2a:29:cb:c5:a0:e4:2f:5f:3f:f7:36:28:d9:68:
                    c4:e0:17:ed:9d:11:9a:c3:23:86:b3:47:a9:12:57:
                    c4:bb:82:77:82:94:94:b9:0c:57:77:94:7e:17:61:
                    5a:32:a0:f9:42:e0:77:b2:1d:af:42:10:d5:44:25:
                    6d:fc:e8:64:bf:75:88:77:c3:03:d6:1d:6a:16:50:
                    2b:52:9f:51:e6:bd:91:c9:f8:a7:82:34:2f:d1:51:
                    c5:c6:45:9c:41:a6:d7:a3:a4:00:69:0b:95:65:6d:
                    ed:06:61:3f:d0:4a:68:af:86:fa:2b:1f:f3:43:34:
                    ce:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:6F:1E:01:8B:F4:AE:B4:5E:EB:F3:1A:BA:C6:98:D9:BC:B4:F3:CE
            X509v3 Authority Key Identifier:
                keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/c28eAYv0rrRe6_MausaY2by0884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.29.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:7c:d1:51:7a:86:97:38:a7:25:b3:12:1f:17:de:85:c9:c0:
         a3:4c:01:b6:c6:09:fc:f9:89:8d:50:42:85:81:8e:43:70:a4:
         54:22:27:8a:0e:7f:52:b0:e4:82:fd:aa:db:e1:95:6a:78:46:
         3d:86:3f:eb:68:a4:ce:f7:4e:26:84:88:50:fa:d3:43:c7:f0:
         fb:62:d1:d6:d1:bb:83:28:28:4a:26:be:2b:10:95:9f:8a:24:
         1c:82:3c:bf:8e:33:9d:7f:1e:8f:57:4e:28:a6:e6:f5:75:06:
         25:1b:a5:8d:85:79:23:9a:f0:12:a7:57:d6:e6:5a:7e:46:42:
         a1:a6:57:58:67:4b:e0:7f:71:74:00:ca:11:4f:00:65:3c:1f:
         3c:c4:f4:e1:1c:58:14:6d:61:14:d0:4e:1c:c8:a6:a5:9b:1a:
         1c:1e:80:26:db:0f:15:e2:34:19:22:a7:20:d1:32:eb:0c:8d:
         62:da:cd:ae:e4:2c:a8:30:b1:b2:3f:b6:b8:5f:a5:45:ed:73:
         4e:85:11:db:ea:76:53:1c:41:a8:70:8e:41:4c:c2:2a:66:9a:
         f5:71:26:54:66:15:a6:00:19:3c:8c:11:77:80:ad:05:d3:22:
         99:e4:c1:f2:83:14:2e:56:eb:1f:df:14:c1:dd:8a:1e:87:24:
         32:3a:45:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WUryK8k20ZDrjq7p65cNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZmQ5NjdjNmMxOWEzMWI3ZTM4ZTllNWM5Y2E4ZmEwZGUz
ZDYxNDkwHhcNMjYwMTAxMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzZmMWUwMThiZjRhZWI0NWVlYmYzMWFiYWM2OThkOWJjYjRmM2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cDyCYIPnT6xgqYsvcnmlLGnwX2e
JRIJV+QWtEdBDWIzhAH4sQpvOP2aSJZnxw/qPFD/IYcctwsxO/RbwA2gtN8u/w24
xW4mCLb8m9Xh7sn+baAsu0vWLxH7mDqHAcgLzzaMfxoDkzoXGAy0IJOLfaji7cMB
lDvUGFJKO+vIH+xjz8v2RYZ3KinLxaDkL18/9zYo2WjE4BftnRGawyOGs0epElfE
u4J3gpSUuQxXd5R+F2FaMqD5QuB3sh2vQhDVRCVt/Ohkv3WId8MD1h1qFlArUp9R
5r2RyfingjQv0VHFxkWcQabXo6QAaQuVZW3tBmE/0Epor4b6Kx/zQzTOsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHNvHgGL9K60XuvzGrrGmNm8tPPOMB8GA1UdIwQY
MBaAFIP9lnxsGaMbfjjp5cnKj6DePWFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ18yV2ZHd1pveHQtT09ubHljcVBvTjQ5WVVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hOGRmNTgtZWFiYy00NWQ0LTk0Mzct
YjU3NjE2MTM2YWI2LzEvYzI4ZUFZdjByclJlNl9NYXVzYVkyYnkwODg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hOGRmNTgtZWFiYy00NWQ0LTk0MzctYjU3NjE2MTM2YWI2
LzEvZ18yV2ZHd1pveHQtT09ubHljcVBvTjQ5WVVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUR0wMA0G
CSqGSIb3DQEBCwUAA4IBAQBlfNFReoaXOKclsxIfF96FycCjTAG2xgn8+YmNUEKF
gY5DcKRUIieKDn9SsOSC/arb4ZVqeEY9hj/raKTO904mhIhQ+tNDx/D7YtHW0buD
KChKJr4rEJWfiiQcgjy/jjOdfx6PV04opub1dQYlG6WNhXkjmvASp1fW5lp+RkKh
pldYZ0vgf3F0AMoRTwBlPB88xPThHFgUbWEU0E4cyKalmxocHoAm2w8V4jQZIqcg
0TLrDI1i2s2u5CyoMLGyP7a4X6VF7XNOhRHb6nZTHEGocI5BTMIqZpr1cSZUZhWm
ABk8jBF3gK0F0yKZ5MHygxQuVusf3xTB3YoehyQyOkX8
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:14:48 2026 by rpki-client