This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/t-CPneeaVHYgCJeN9aRr26OHu8s.roa
File:                     t-CPneeaVHYgCJeN9aRr26OHu8s.roa (raw, json)
Hash identifier:          i5R3976Bs/xCdmNx5+5wTM2K2LQaNxrVpxX02Fkd/C0=
Subject key identifier:   B7:E0:8F:9D:E7:9A:54:76:20:08:97:8D:F5:A4:6B:DB:A3:87:BB:CB
Certificate issuer:       /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
Certificate serial:       019B76EAC035AB8737B23306F486A1779AF0
Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/t-CPneeaVHYgCJeN9aRr26OHu8s.roa
Signing time:             Thu 01 Jan 2026 00:17:34 +0000
ROA not before:           Thu 01 Jan 2026 00:17:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15924
IP address blocks:        195.234.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:c0:35:ab:87:37:b2:33:06:f4:86:a1:77:9a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6
        Validity
            Not Before: Jan  1 00:17:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7e08f9de79a54762008978df5a46bdba387bbcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a1:b7:d3:bf:af:aa:c9:55:2f:3c:1f:0e:20:
                    97:08:d5:fd:25:de:1d:ae:18:07:73:9b:db:50:4c:
                    d0:4b:2e:f7:62:34:18:42:34:a9:99:6e:c4:55:92:
                    5e:f0:73:3e:2e:d3:35:72:4c:62:eb:53:19:77:77:
                    8b:7f:e5:c4:3f:e3:51:33:29:9d:85:ef:d0:59:e2:
                    3a:1e:07:d0:27:72:73:54:6f:bb:e8:21:40:b3:4b:
                    7b:da:e3:54:74:61:88:a8:93:02:6a:7d:71:a5:88:
                    95:bc:3a:ad:1d:2e:45:e9:77:ea:8e:0c:a1:3f:85:
                    7c:0e:32:45:3a:38:6d:83:3c:7c:d6:82:76:88:2a:
                    b9:55:12:36:91:a2:80:13:1b:c3:06:c6:ce:80:7d:
                    c0:e0:5f:a6:37:86:b9:91:eb:bd:d3:d0:2d:15:09:
                    bb:e3:43:32:e1:08:09:37:3a:1e:b6:3e:57:74:e8:
                    ab:21:35:9a:d8:97:42:d0:85:68:53:e6:87:8e:4f:
                    7b:0c:46:01:f0:7b:74:13:87:db:f6:5d:29:36:ef:
                    02:93:78:6f:e6:33:f7:ae:bd:fd:99:e0:11:24:6d:
                    31:25:8d:ff:cc:b5:79:ad:3d:b4:2a:9a:40:d0:06:
                    0f:00:0a:60:12:67:2f:d5:24:37:3e:49:d1:a6:3e:
                    b3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E0:8F:9D:E7:9A:54:76:20:08:97:8D:F5:A4:6B:DB:A3:87:BB:CB
            X509v3 Authority Key Identifier:
                keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/t-CPneeaVHYgCJeN9aRr26OHu8s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.234.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:5f:17:75:ef:04:0c:b5:42:38:f4:96:a4:9a:44:1f:b8:42:
         f8:f5:aa:25:53:37:08:79:b8:79:59:13:60:6f:98:a1:94:9a:
         a2:d8:3b:41:d0:ee:e0:db:02:2a:84:68:48:4b:0a:ba:57:24:
         ce:0f:7e:95:3c:d3:79:62:41:27:dd:ff:95:33:cf:ae:a0:f7:
         79:2f:e1:69:dd:e4:a5:73:0f:b0:4b:d8:8a:79:80:59:e4:b0:
         41:23:cb:ca:97:03:4a:26:62:b1:90:b4:d3:93:37:cb:a7:60:
         72:f7:b6:19:b4:a1:e9:5c:1d:f7:83:91:45:0c:20:bd:d5:d7:
         8f:00:48:92:e0:e5:6c:93:76:bd:9f:bf:a8:91:21:56:fd:90:
         52:76:77:c1:1d:5c:47:ba:e8:7d:9b:3a:87:11:3c:ba:d3:6d:
         b1:4b:fd:af:58:56:35:f5:7c:63:ee:53:d8:93:b2:2e:a0:1b:
         1f:49:88:91:1b:74:ff:e6:2a:25:de:7e:09:fa:56:8e:47:75:
         7f:5c:e0:1a:ef:bf:8b:cc:01:b6:0f:17:c7:38:83:78:68:31:
         69:1c:d0:92:bc:1b:b1:d5:81:fb:d6:9e:34:56:8c:01:19:df:
         fe:2f:86:f6:3c:f5:58:fd:03:08:19:e2:b4:96:9e:b4:3e:17:
         e0:e1:1a:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt26sA1q4c3sjMG9Iahd5rwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTdhNGU2YWNmYjcyZDUxZDI5ZWU2MWE2MjgzNmY2NjA2
MDk3YTYwHhcNMjYwMTAxMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2UwOGY5ZGU3OWE1NDc2MjAwODk3OGRmNWE0NmJkYmEzODdiYmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KG307+vqslVLzwfDiCXCNX9Jd4d
rhgHc5vbUEzQSy73YjQYQjSpmW7EVZJe8HM+LtM1ckxi61MZd3eLf+XEP+NRMymd
he/QWeI6HgfQJ3JzVG+76CFAs0t72uNUdGGIqJMCan1xpYiVvDqtHS5F6Xfqjgyh
P4V8DjJFOjhtgzx81oJ2iCq5VRI2kaKAExvDBsbOgH3A4F+mN4a5keu909AtFQm7
40My4QgJNzoetj5XdOirITWa2JdC0IVoU+aHjk97DEYB8Ht0E4fb9l0pNu8Ck3hv
5jP3rr39meARJG0xJY3/zLV5rT20KppA0AYPAApgEmcv1SQ3PknRpj6z9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLfgj53nmlR2IAiXjfWka9ujh7vLMB8GA1UdIwQY
MBaAFGSXpOas+3LVHSnuYaYoNvZgYJemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkplazVxejdjdFVkS2U1aHBpZzI5bUJnbDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MjVlYTItZmZmOC00MDk1LTlkOTYt
MDFjZDQ3YjZjYTBkLzEvdC1DUG5lZWFWSFlnQ0plTjlhUnIyNk9IdThzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85MjVlYTItZmZmOC00MDk1LTlkOTYtMDFjZDQ3YjZjYTBk
LzEvWkplazVxejdjdFVkS2U1aHBpZzI5bUJnbDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+pRMA0G
CSqGSIb3DQEBCwUAA4IBAQDHXxd17wQMtUI49JakmkQfuEL49aolUzcIebh5WRNg
b5ihlJqi2DtB0O7g2wIqhGhISwq6VyTOD36VPNN5YkEn3f+VM8+uoPd5L+Fp3eSl
cw+wS9iKeYBZ5LBBI8vKlwNKJmKxkLTTkzfLp2By97YZtKHpXB33g5FFDCC91deP
AEiS4OVsk3a9n7+okSFW/ZBSdnfBHVxHuuh9mzqHETy6022xS/2vWFY19Xxj7lPY
k7IuoBsfSYiRG3T/5iol3n4J+laOR3V/XOAa77+LzAG2DxfHOIN4aDFpHNCSvBux
1YH71p40VowBGd/+L4b2PPVY/QMIGeK0lp60Phfg4RoD
-----END CERTIFICATE-----
Generated at Mon Feb 2 15:42:02 2026 by rpki-client