This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/PVBeyZKlBQT3Dc48StGzvLmkgLs.roa
File:                     PVBeyZKlBQT3Dc48StGzvLmkgLs.roa (raw, json)
Hash identifier:          RIyf6kHbIC+ixB0VU+3PzontAfCdCIipNxhHFNviEwg=
Subject key identifier:   3D:50:5E:C9:92:A5:05:04:F7:0D:CE:3C:4A:D1:B3:BC:B9:A4:80:BB
Certificate issuer:       /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial:       019B7CECC744D0DAB6380C8663249B1C952A
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/PVBeyZKlBQT3Dc48StGzvLmkgLs.roa
Signing time:             Fri 02 Jan 2026 04:17:30 +0000
ROA not before:           Fri 02 Jan 2026 04:17:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50596
IP address blocks:        185.235.64.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ec:c7:44:d0:da:b6:38:0c:86:63:24:9b:1c:95:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
        Validity
            Not Before: Jan  2 04:17:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3d505ec992a50504f70dce3c4ad1b3bcb9a480bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:3c:e1:63:5f:80:d9:b9:20:55:10:aa:4d:
                    76:d8:8e:d1:aa:83:e6:15:a8:f2:07:91:27:5e:f4:
                    82:21:46:39:a1:30:c7:30:d6:c8:3a:22:7f:e6:30:
                    c6:80:52:54:5d:99:c3:af:1b:46:a2:3c:cf:96:76:
                    55:60:9a:c2:ce:38:44:1b:75:67:65:16:76:7e:e3:
                    c8:d0:cb:7a:f2:b0:3a:ed:42:7c:38:f0:4a:c0:fe:
                    aa:4f:c2:c1:cb:8b:65:c8:74:58:f9:cd:b9:5a:f7:
                    9d:e3:1e:a7:f2:4f:0d:59:a7:b2:ec:e6:70:fd:70:
                    dc:a6:d7:52:23:1b:71:ab:c0:82:22:39:fb:16:08:
                    2d:57:af:0a:25:97:84:ac:01:e6:12:12:70:c7:e3:
                    e9:21:34:a2:da:05:96:5d:0b:19:a2:23:ef:8c:ff:
                    16:fc:71:83:0f:7c:f1:ad:dc:d4:90:b0:c6:69:da:
                    c4:26:97:13:ec:20:c1:6c:80:85:41:52:a9:a6:7f:
                    0d:66:b0:59:c7:1a:22:16:a0:9c:f7:d4:41:73:23:
                    31:cd:f2:dc:2b:31:ba:d2:49:f3:18:5d:d2:21:a1:
                    7b:eb:29:68:93:3b:13:21:76:fa:94:f1:d1:65:08:
                    2b:97:ae:8b:e5:d2:c6:29:6c:46:4b:ad:5e:fc:66:
                    41:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:50:5E:C9:92:A5:05:04:F7:0D:CE:3C:4A:D1:B3:BC:B9:A4:80:BB
            X509v3 Authority Key Identifier:
                keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/PVBeyZKlBQT3Dc48StGzvLmkgLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.235.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:2e:fc:3b:54:64:40:07:4d:fb:4f:62:f3:02:1b:c0:2b:1c:
         2a:f7:15:8d:2e:c3:c4:72:0d:5e:bb:c7:44:ff:32:c5:8b:75:
         0c:84:09:03:7f:04:a7:79:ed:c2:30:e8:6b:65:02:65:14:6c:
         c3:6e:2d:e7:aa:ba:75:c4:3c:b6:15:18:dd:72:c2:b6:3a:48:
         f4:ac:13:78:df:dc:f8:0d:f1:9f:d1:3c:30:fc:38:30:16:b9:
         88:ba:f5:cd:de:e2:5f:39:65:87:d5:2c:20:9f:e3:52:38:02:
         0f:ab:57:0e:8d:10:e5:2a:33:90:8b:86:04:4d:0e:53:9b:9b:
         a8:c2:68:b5:16:7f:ae:73:5c:81:ac:61:d3:e6:3e:ad:51:bd:
         87:34:98:d7:b3:3d:93:e6:53:dc:60:a8:16:15:74:80:e9:d3:
         61:12:51:76:ce:14:66:7b:95:87:1b:c5:ac:a5:51:0e:9d:ff:
         3d:79:2f:f9:7f:4d:54:8a:98:1f:3f:80:05:5d:84:8f:a9:ec:
         21:2f:1b:d9:fc:c6:ec:c4:11:bb:53:90:14:b1:f4:a1:31:4c:
         61:a2:95:bb:6d:7e:1d:e9:31:da:a6:95:66:54:6f:49:ed:43:
         60:90:af:2a:8c:c4:e7:1d:4e:dd:3f:f5:65:11:fb:59:bd:19:
         06:cc:af:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87MdE0Nq2OAyGYySbHJUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjYzMWE4OTk0MGM3NzlmYmQ5ZGEyMzFhMWQyZTk4NDBj
OWM3YzYwHhcNMjYwMTAyMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDUwNWVjOTkyYTUwNTA0ZjcwZGNlM2M0YWQxYjNiY2I5YTQ4MGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQM84WNfgNm5IFUQqk122I7RqoPm
FajyB5EnXvSCIUY5oTDHMNbIOiJ/5jDGgFJUXZnDrxtGojzPlnZVYJrCzjhEG3Vn
ZRZ2fuPI0Mt68rA67UJ8OPBKwP6qT8LBy4tlyHRY+c25Wved4x6n8k8NWaey7OZw
/XDcptdSIxtxq8CCIjn7FggtV68KJZeErAHmEhJwx+PpITSi2gWWXQsZoiPvjP8W
/HGDD3zxrdzUkLDGadrEJpcT7CDBbICFQVKppn8NZrBZxxoiFqCc99RBcyMxzfLc
KzG60knzGF3SIaF76ylokzsTIXb6lPHRZQgrl66L5dLGKWxGS61e/GZB/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD1QXsmSpQUE9w3OPErRs7y5pIC7MB8GA1UdIwQY
MBaAFL8mMaiZQMd5+9naIxodLphAycfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kNjA1NDgtODYwOC00MDFjLWEyYjUt
Y2Q3YjI4OGQ2ZWEwLzEvUFZCZXlaS2xCUVQzRGM0OFN0R3p2TG1rZ0xzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9kNjA1NDgtODYwOC00MDFjLWEyYjUtY2Q3YjI4OGQ2ZWEw
LzEvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuetAMA0G
CSqGSIb3DQEBCwUAA4IBAQA8Lvw7VGRAB037T2LzAhvAKxwq9xWNLsPEcg1eu8dE
/zLFi3UMhAkDfwSnee3CMOhrZQJlFGzDbi3nqrp1xDy2FRjdcsK2Okj0rBN439z4
DfGf0Tww/DgwFrmIuvXN3uJfOWWH1Swgn+NSOAIPq1cOjRDlKjOQi4YETQ5Tm5uo
wmi1Fn+uc1yBrGHT5j6tUb2HNJjXsz2T5lPcYKgWFXSA6dNhElF2zhRme5WHG8Ws
pVEOnf89eS/5f01UipgfP4AFXYSPqewhLxvZ/MbsxBG7U5AUsfShMUxhopW7bX4d
6THappVmVG9J7UNgkK8qjMTnHU7dP/VlEftZvRkGzK9A
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:17 2026 by rpki-client