This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Avmt7B0UPDejT6QKb4EsmR1pX0w.roa
File:                     Avmt7B0UPDejT6QKb4EsmR1pX0w.roa (raw, json)
Hash identifier:          4ku+grxwZOqu3+RI5WNyX4UnoohNAtJobww7qJ20FJ0=
Subject key identifier:   02:F9:AD:EC:1D:14:3C:37:A3:4F:A4:0A:6F:81:2C:99:1D:69:5F:4C
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       019C2E1E2417DF5F30DB4B437D5C90C341EB
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Avmt7B0UPDejT6QKb4EsmR1pX0w.roa
Signing time:             Thu 05 Feb 2026 14:04:13 +0000
ROA not before:           Thu 05 Feb 2026 14:04:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     33993
IP address blocks:        45.153.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2e:1e:24:17:df:5f:30:db:4b:43:7d:5c:90:c3:41:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Feb  5 14:04:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=02f9adec1d143c37a34fa40a6f812c991d695f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:6e:65:8e:0b:8d:39:6e:60:c4:8a:04:05:
                    b3:66:f1:ec:39:36:e3:22:7f:08:94:87:f0:4d:cb:
                    24:91:ec:a0:d6:3d:62:cb:6d:0c:a1:12:2d:18:ef:
                    76:9f:1d:cc:ee:23:ac:68:85:9f:07:f1:fd:b3:31:
                    98:b2:38:74:4a:6a:a9:52:c2:45:96:ba:13:27:7f:
                    c7:ed:c0:c3:99:a2:97:9a:b7:77:63:89:b8:72:04:
                    e9:2e:64:a6:5e:ff:d6:89:1f:c5:e9:e4:8d:b8:9a:
                    ac:07:11:7a:4b:a9:c1:2a:12:97:b0:3e:a5:42:20:
                    49:57:49:46:92:2a:bd:3b:19:80:d1:10:99:db:b4:
                    6e:56:79:f5:a0:fe:3d:ae:2d:f6:3e:82:16:72:a9:
                    ea:ad:83:2b:79:eb:a1:69:0e:1d:e3:31:8b:5d:a9:
                    ae:0a:78:95:89:91:a5:83:12:f5:d0:7b:d1:b4:7c:
                    0b:d3:6e:4c:37:15:22:1e:73:c1:74:4c:e0:00:e3:
                    91:59:bc:46:2d:2e:dc:f4:e6:16:48:91:0a:a4:d6:
                    3f:26:2b:29:1d:83:a0:4b:9c:98:71:6b:0b:28:93:
                    58:89:f0:e2:7e:79:06:6f:8e:a5:99:b5:5e:0a:67:
                    dc:2c:1c:b8:b6:eb:7d:2a:8c:c8:2a:09:1a:fa:ec:
                    63:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F9:AD:EC:1D:14:3C:37:A3:4F:A4:0A:6F:81:2C:99:1D:69:5F:4C
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Avmt7B0UPDejT6QKb4EsmR1pX0w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:ed:97:4e:8e:72:d4:82:b9:8e:98:ca:db:59:47:f2:ed:f3:
         7c:b0:52:ec:71:67:e0:b6:eb:57:9a:fb:a3:01:a9:2e:89:0f:
         9e:28:66:0d:9d:d9:d5:2e:ea:96:ca:46:51:fa:dd:e8:ed:4f:
         de:d0:cb:18:46:b3:a4:1a:ea:e1:9a:a4:ec:71:78:fb:b8:f7:
         f0:5e:f6:42:e7:01:9d:51:51:86:45:66:d5:70:64:e0:ba:35:
         8b:66:76:ef:8c:ee:50:01:e6:ba:2e:46:3a:37:b1:62:bd:49:
         6e:e0:6a:1a:12:d2:d0:69:d0:b6:4a:53:40:93:f6:ee:f4:23:
         26:52:15:e1:b6:24:54:7a:ab:3f:fc:ef:5b:47:e8:1c:09:8d:
         70:d1:63:9a:0c:fb:1c:7f:09:69:77:5a:70:2e:c2:b0:82:5b:
         72:82:9e:78:95:5c:eb:da:eb:b2:b0:45:29:71:e8:0c:ae:4a:
         8c:ea:1a:80:ca:4b:74:03:e2:68:4b:ae:8d:30:9b:43:4a:08:
         ea:43:3b:7a:0f:94:87:78:69:97:65:77:fa:6a:cc:ee:bb:2b:
         9b:e1:e9:f1:0c:03:2f:f3:4b:00:56:89:ff:d7:ec:89:ed:70:
         2a:9c:ec:eb:5d:b0:77:4c:22:67:bc:c6:54:24:fb:36:b5:f9:
         f9:db:26:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwuHiQX318w20tDfVyQw0HrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjYwMjA1MTQwNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmY5YWRlYzFkMTQzYzM3YTM0ZmE0MGE2ZjgxMmM5OTFkNjk1ZjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHJuZY4LjTluYMSKBAWzZvHsOTbj
In8IlIfwTcskkeyg1j1iy20MoRItGO92nx3M7iOsaIWfB/H9szGYsjh0SmqpUsJF
lroTJ3/H7cDDmaKXmrd3Y4m4cgTpLmSmXv/WiR/F6eSNuJqsBxF6S6nBKhKXsD6l
QiBJV0lGkiq9OxmA0RCZ27RuVnn1oP49ri32PoIWcqnqrYMreeuhaQ4d4zGLXamu
CniViZGlgxL10HvRtHwL025MNxUiHnPBdEzgAOORWbxGLS7c9OYWSJEKpNY/Jisp
HYOgS5yYcWsLKJNYifDifnkGb46lmbVeCmfcLBy4tut9KozIKgka+uxjOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAL5rewdFDw3o0+kCm+BLJkdaV9MMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvQXZtdDdCMFVQRGVqVDZRS2I0RXNtUjFwWDB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZnnMA0G
CSqGSIb3DQEBCwUAA4IBAQBF7ZdOjnLUgrmOmMrbWUfy7fN8sFLscWfgtutXmvuj
AakuiQ+eKGYNndnVLuqWykZR+t3o7U/e0MsYRrOkGurhmqTscXj7uPfwXvZC5wGd
UVGGRWbVcGTgujWLZnbvjO5QAea6LkY6N7FivUlu4GoaEtLQadC2SlNAk/bu9CMm
UhXhtiRUeqs//O9bR+gcCY1w0WOaDPscfwlpd1pwLsKwgltygp54lVzr2uuysEUp
cegMrkqM6hqAykt0A+JoS66NMJtDSgjqQzt6D5SHeGmXZXf6aszuuyub4enxDAMv
80sAVon/1+yJ7XAqnOzrXbB3TCJnvMZUJPs2tfn52yaB
-----END CERTIFICATE-----
Generated at Tue Feb 10 05:33:09 2026 by rpki-client