This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/j63EUh8bGw4gZtzU0DG1LH-FIc8.roa
File:                     j63EUh8bGw4gZtzU0DG1LH-FIc8.roa (raw, json)
Hash identifier:          kCvXryD6WaHV5/dIFEy0J57c6GyyMioVokTE4Sd2Wd0=
Subject key identifier:   8F:AD:C4:52:1F:1B:1B:0E:20:66:DC:D4:D0:31:B5:2C:7F:85:21:CF
Certificate issuer:       /CN=72673058859cfd7012941d8963adccf6300a19ef
Certificate serial:       019B7B36CCDBC7354F4D04F66D9A83A6C0D3
Authority key identifier: 72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/j63EUh8bGw4gZtzU0DG1LH-FIc8.roa
Signing time:             Thu 01 Jan 2026 20:19:07 +0000
ROA not before:           Thu 01 Jan 2026 20:19:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20805
IP address blocks:        213.167.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:cc:db:c7:35:4f:4d:04:f6:6d:9a:83:a6:c0:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72673058859cfd7012941d8963adccf6300a19ef
        Validity
            Not Before: Jan  1 20:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8fadc4521f1b1b0e2066dcd4d031b52c7f8521cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:d3:46:78:77:90:3a:b9:65:b2:0c:f1:a0:
                    5a:b1:9f:d5:6a:ff:4e:0b:e1:91:65:b1:f2:7c:e9:
                    d9:a5:83:77:6c:8a:41:84:96:0a:c8:3a:6c:f7:72:
                    ae:93:c8:63:75:a0:dc:41:30:7e:9d:5b:77:ee:3a:
                    47:84:a8:70:bd:7e:16:ee:1d:86:3f:cd:82:74:c1:
                    66:50:1d:aa:70:6a:67:f9:6a:f4:9d:af:0c:7f:9e:
                    4c:50:75:99:17:81:ff:7b:66:87:d7:5f:65:a9:19:
                    5a:c4:5d:38:dc:63:a7:7e:a9:94:6d:21:9f:02:9f:
                    5f:4e:ab:e7:f8:2f:54:2c:0f:d4:01:2c:e6:bf:fb:
                    a7:e0:21:97:90:d1:8c:6d:3b:0d:62:64:53:45:5e:
                    59:55:05:f9:16:fc:a0:4c:fb:6d:49:72:e5:06:da:
                    6e:94:5e:45:ab:e4:b8:ed:60:99:b2:9c:84:de:08:
                    88:fd:2b:20:57:06:8e:59:42:82:eb:1a:e8:6c:79:
                    b5:83:3b:d7:04:b1:10:7b:95:22:0d:80:2c:45:46:
                    0d:e7:cf:26:e7:c1:ef:1c:56:40:82:c1:62:6f:0f:
                    16:f6:a0:9c:8b:7c:a6:af:8d:8f:f5:ee:e8:ab:10:
                    f5:f4:8b:07:36:1e:80:ce:5d:38:b2:ed:ef:3d:be:
                    b2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AD:C4:52:1F:1B:1B:0E:20:66:DC:D4:D0:31:B5:2C:7F:85:21:CF
            X509v3 Authority Key Identifier:
                keyid:72:67:30:58:85:9C:FD:70:12:94:1D:89:63:AD:CC:F6:30:0A:19:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmcwWIWc_XASlB2JY63M9jAKGe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/j63EUh8bGw4gZtzU0DG1LH-FIc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c98434-decc-404f-8049-4aa2eeb5267c/1/cmcwWIWc_XASlB2JY63M9jAKGe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.167.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:72:48:2c:db:d0:6f:17:a3:81:67:38:08:ca:5e:d9:68:53:
         94:2d:d3:46:33:bb:0d:56:3e:5a:ec:21:ed:a6:43:5a:20:e2:
         78:52:9e:dd:40:40:5a:e1:f7:fa:08:51:4f:c7:d0:80:1f:bd:
         d3:46:b5:ed:9a:31:ae:36:3d:d4:77:58:ca:37:6f:7c:b1:44:
         f5:9e:3f:2e:36:2c:2c:76:d7:0d:f9:0f:34:bd:66:90:8d:1a:
         1b:f3:59:b8:26:ca:95:29:07:18:04:4d:9c:ad:ac:78:4e:59:
         a6:ce:95:fa:b9:ef:98:c7:83:6a:48:a8:8a:0d:90:74:9b:91:
         05:f6:83:81:a7:da:91:ef:46:c6:2a:c8:d5:f7:04:c1:b2:8b:
         16:a2:c1:68:38:47:64:f8:67:af:4b:2c:9e:00:7e:be:39:74:
         b5:06:89:da:7d:ed:d9:19:45:d2:a2:70:40:c5:37:65:9b:17:
         34:52:f5:1e:c0:38:16:56:65:4e:55:86:9a:5a:50:41:6d:2a:
         04:ff:4c:27:e2:30:1c:4a:b4:5a:12:58:43:08:bc:26:f3:a7:
         69:b4:3d:89:11:45:ca:fc:a4:44:9a:07:2a:b5:9c:01:a8:41:
         19:2d:0b:85:a9:ba:41:5b:4a:c2:b1:31:3e:d6:53:4a:e1:4b:
         6f:81:0d:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt7NszbxzVPTQT2bZqDpsDTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNjczMDU4ODU5Y2ZkNzAxMjk0MWQ4OTYzYWRjY2Y2MzAw
YTE5ZWYwHhcNMjYwMTAxMjAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmFkYzQ1MjFmMWIxYjBlMjA2NmRjZDRkMDMxYjUyYzdmODUyMWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfjTRnh3kDq5ZbIM8aBasZ/Vav9O
C+GRZbHyfOnZpYN3bIpBhJYKyDps93Kuk8hjdaDcQTB+nVt37jpHhKhwvX4W7h2G
P82CdMFmUB2qcGpn+Wr0na8Mf55MUHWZF4H/e2aH119lqRlaxF043GOnfqmUbSGf
Ap9fTqvn+C9ULA/UASzmv/un4CGXkNGMbTsNYmRTRV5ZVQX5FvygTPttSXLlBtpu
lF5Fq+S47WCZspyE3giI/SsgVwaOWUKC6xrobHm1gzvXBLEQe5UiDYAsRUYN588m
58HvHFZAgsFibw8W9qCci3ymr42P9e7oqxD19IsHNh6Azl04su3vPb6yOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI+txFIfGxsOIGbc1NAxtSx/hSHPMB8GA1UdIwQY
MBaAFHJnMFiFnP1wEpQdiWOtzPYwChnvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY21jd1dJV2NfWEFTbEIySlk2M005akFLR2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jOTg0MzQtZGVjYy00MDRmLTgwNDkt
NGFhMmVlYjUyNjdjLzEvajYzRVVoOGJHdzRnWnR6VTBERzFMSC1GSWM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jOTg0MzQtZGVjYy00MDRmLTgwNDktNGFhMmVlYjUyNjdj
LzEvY21jd1dJV2NfWEFTbEIySlk2M005akFLR2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1aegMA0G
CSqGSIb3DQEBCwUAA4IBAQBEckgs29BvF6OBZzgIyl7ZaFOULdNGM7sNVj5a7CHt
pkNaIOJ4Up7dQEBa4ff6CFFPx9CAH73TRrXtmjGuNj3Ud1jKN298sUT1nj8uNiws
dtcN+Q80vWaQjRob81m4JsqVKQcYBE2crax4TlmmzpX6ue+Yx4NqSKiKDZB0m5EF
9oOBp9qR70bGKsjV9wTBsosWosFoOEdk+GevSyyeAH6+OXS1Bonafe3ZGUXSonBA
xTdlmxc0UvUewDgWVmVOVYaaWlBBbSoE/0wn4jAcSrRaElhDCLwm86dptD2JEUXK
/KREmgcqtZwBqEEZLQuFqbpBW0rCsTE+1lNK4UtvgQ3i
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:55:55 2026 by rpki-client