This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/abbbV0XVk995UrsAzYOq3iQxcEk.roa
File:                     abbbV0XVk995UrsAzYOq3iQxcEk.roa (raw, json)
Hash identifier:          4xNlKWkY5oZiKT7584PwOX/H1wHQW2fuOn1s1+Y8Eus=
Subject key identifier:   69:B6:DB:57:45:D5:93:DF:79:52:BB:00:CD:83:AA:DE:24:31:70:49
Certificate issuer:       /CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
Certificate serial:       019B7F13D725AA39CF9E0797F9226A075F36
Authority key identifier: 18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/abbbV0XVk995UrsAzYOq3iQxcEk.roa
Signing time:             Fri 02 Jan 2026 14:19:25 +0000
ROA not before:           Fri 02 Jan 2026 14:19:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208849
IP address blocks:        45.82.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:13:d7:25:aa:39:cf:9e:07:97:f9:22:6a:07:5f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189947a9a5d88cc62cc898268f2bcafd6a7ffc5b
        Validity
            Not Before: Jan  2 14:19:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69b6db5745d593df7952bb00cd83aade24317049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:32:87:a1:a6:92:75:6a:0d:57:03:e7:3f:
                    0b:46:fe:0f:ae:38:67:5c:75:7c:79:c6:a5:39:29:
                    cc:c5:c5:07:98:44:66:50:10:4c:e1:3c:1c:1d:fb:
                    99:9f:c4:b0:74:89:5b:91:42:4a:e3:ff:34:be:87:
                    da:90:e3:46:d8:90:41:c3:c1:d7:9c:57:6c:a7:93:
                    e3:82:cd:a1:d7:ce:80:cb:80:be:4d:f3:cd:e5:b9:
                    df:c9:6d:8a:c1:34:d6:11:ee:ed:38:e2:28:73:c1:
                    a2:e0:b1:92:9b:73:b4:a8:d6:d4:d5:f4:d7:c5:6b:
                    5f:fc:8b:88:37:f5:3f:b5:73:75:8f:58:8c:7e:1a:
                    c3:9f:ef:62:35:ad:d2:83:bd:bc:35:d4:eb:36:bc:
                    78:32:04:18:d9:4c:89:48:6c:60:4c:ba:8c:85:2f:
                    70:44:bd:59:76:bc:aa:f8:62:71:6c:d0:10:17:6e:
                    6f:dc:45:bf:f8:7d:c8:d7:a4:c4:e1:be:77:fd:3e:
                    d6:f4:8f:b6:bd:39:13:f0:7f:6b:61:85:8f:9d:ec:
                    2d:57:b7:b3:19:3c:8d:8a:df:ac:e3:4b:13:76:67:
                    b6:7b:54:d4:9f:64:95:0f:c8:c8:07:d5:c8:6e:19:
                    5c:4c:50:75:92:87:9b:4f:fc:43:13:2e:6a:a1:f4:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B6:DB:57:45:D5:93:DF:79:52:BB:00:CD:83:AA:DE:24:31:70:49
            X509v3 Authority Key Identifier:
                keyid:18:99:47:A9:A5:D8:8C:C6:2C:C8:98:26:8F:2B:CA:FD:6A:7F:FC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/abbbV0XVk995UrsAzYOq3iQxcEk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/729f92-5f03-4158-90ac-6d428f1c15fd/1/GJlHqaXYjMYsyJgmjyvK_Wp__Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:6d:9a:59:9c:91:5f:72:ba:f3:be:6c:80:d8:3a:69:e7:be:
         cf:5b:f6:d5:96:9c:61:c8:e2:12:76:5b:93:6d:4f:dd:6c:7f:
         47:dd:b5:54:33:6a:9b:4e:a5:39:12:ce:7f:df:84:f9:6d:cc:
         cd:9f:c4:34:af:f4:3d:f2:93:0d:4f:34:18:cc:08:c0:b2:74:
         5d:1c:86:e8:25:5e:e9:47:a6:a8:a2:cc:58:fa:87:1a:2f:c5:
         b4:83:ab:9e:f7:84:12:d6:dc:11:59:0e:ed:7e:d4:09:04:2c:
         8c:67:ec:ce:c5:9a:4e:31:e9:26:80:19:a1:4a:fd:34:00:08:
         d1:4a:a4:e0:d1:ed:23:84:95:6c:a5:c4:51:18:25:cb:a4:81:
         3c:23:e6:f4:62:a1:e6:53:ae:65:8e:a4:1c:f2:ab:57:e8:30:
         33:c5:ce:91:41:5b:ce:73:52:97:e3:c5:8b:2f:eb:3f:ea:d4:
         d3:ba:80:35:e8:03:18:2e:44:a0:00:56:94:b4:dc:42:10:63:
         38:6e:b4:e5:7b:99:22:aa:32:08:b3:14:19:b9:ee:90:f3:2e:
         d9:08:55:dd:64:4f:40:84:85:5f:22:e0:cc:dc:a2:a3:87:a7:
         96:36:cc:ce:82:9a:38:30:d9:72:7d:ca:0a:00:dd:20:5b:6b:
         57:95:36:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/E9clqjnPngeX+SJqB182MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OTk0N2E5YTVkODhjYzYyY2M4OTgyNjhmMmJjYWZkNmE3
ZmZjNWIwHhcNMjYwMTAyMTQxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWI2ZGI1NzQ1ZDU5M2RmNzk1MmJiMDBjZDgzYWFkZTI0MzE3MDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKgyh6GmknVqDVcD5z8LRv4Prjhn
XHV8ecalOSnMxcUHmERmUBBM4TwcHfuZn8SwdIlbkUJK4/80vofakONG2JBBw8HX
nFdsp5Pjgs2h186Ay4C+TfPN5bnfyW2KwTTWEe7tOOIoc8Gi4LGSm3O0qNbU1fTX
xWtf/IuIN/U/tXN1j1iMfhrDn+9iNa3Sg728NdTrNrx4MgQY2UyJSGxgTLqMhS9w
RL1Zdryq+GJxbNAQF25v3EW/+H3I16TE4b53/T7W9I+2vTkT8H9rYYWPnewtV7ez
GTyNit+s40sTdme2e1TUn2SVD8jIB9XIbhlcTFB1koebT/xDEy5qofTrIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGm221dF1ZPfeVK7AM2Dqt4kMXBJMB8GA1UdIwQY
MBaAFBiZR6ml2IzGLMiYJo8ryv1qf/xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83MjlmOTItNWYwMy00MTU4LTkwYWMt
NmQ0MjhmMWMxNWZkLzEvYWJiYlYwWFZrOTk1VXJzQXpZT3EzaVF4Y0VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83MjlmOTItNWYwMy00MTU4LTkwYWMtNmQ0MjhmMWMxNWZk
LzEvR0psSHFhWFlqTVlzeUpnbWp5dktfV3BfX0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVLUMA0G
CSqGSIb3DQEBCwUAA4IBAQApbZpZnJFfcrrzvmyA2Dpp577PW/bVlpxhyOISdluT
bU/dbH9H3bVUM2qbTqU5Es5/34T5bczNn8Q0r/Q98pMNTzQYzAjAsnRdHIboJV7p
R6aoosxY+ocaL8W0g6ue94QS1twRWQ7tftQJBCyMZ+zOxZpOMekmgBmhSv00AAjR
SqTg0e0jhJVspcRRGCXLpIE8I+b0YqHmU65ljqQc8qtX6DAzxc6RQVvOc1KX48WL
L+s/6tTTuoA16AMYLkSgAFaUtNxCEGM4brTle5kiqjIIsxQZue6Q8y7ZCFXdZE9A
hIVfIuDM3KKjh6eWNszOgpo4MNlyfcoKAN0gW2tXlTYu
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:01:36 2026 by rpki-client