This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/bv3dWtZZY2LxTtEYmYudDoB39G0.roa
File:                     bv3dWtZZY2LxTtEYmYudDoB39G0.roa (raw, json)
Hash identifier:          tzxAb1/SE90OUDmzgetWaOiWEjy0yrEkp9StYURk0/Y=
Subject key identifier:   6E:FD:DD:5A:D6:59:63:62:F1:4E:D1:18:99:8B:9D:0E:80:77:F4:6D
Certificate issuer:       /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial:       019B7CECD873F595C8B56A741E4A9A2703DA
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/bv3dWtZZY2LxTtEYmYudDoB39G0.roa
Signing time:             Fri 02 Jan 2026 04:17:35 +0000
ROA not before:           Fri 02 Jan 2026 04:17:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212477
IP address blocks:        37.16.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 07:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ec:d8:73:f5:95:c8:b5:6a:74:1e:4a:9a:27:03:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
        Validity
            Not Before: Jan  2 04:17:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6efddd5ad6596362f14ed118998b9d0e8077f46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:38:b1:30:74:2e:ae:b7:02:bc:8a:67:1e:
                    d8:34:92:fc:16:95:64:bc:39:1d:f7:69:3c:e1:0a:
                    16:5b:3a:b7:2a:56:34:68:f2:18:2b:83:18:0f:ab:
                    00:cc:57:5a:79:9a:3e:3f:26:fc:3f:36:08:69:36:
                    cc:36:75:24:b4:b0:f3:23:66:35:00:d9:68:a4:73:
                    c5:fd:34:67:56:50:de:2a:4d:05:c3:2e:4e:a5:5e:
                    3e:42:e4:a9:b9:03:c6:37:d0:0c:1c:cb:ca:4a:22:
                    dd:2f:f5:09:61:68:bb:0e:7e:53:53:dd:b8:a9:cb:
                    f5:e8:ab:24:42:82:35:43:aa:22:fe:2e:d0:f0:19:
                    fa:0a:32:3c:1f:95:c6:04:a4:d5:ab:a7:f6:b3:78:
                    ff:66:e0:80:a8:6b:d2:67:3b:48:c1:57:11:72:f6:
                    b2:f7:f5:04:c2:b0:31:90:13:82:ed:89:cb:6b:d5:
                    4f:45:b8:2a:20:1c:48:7b:e9:a0:cc:05:de:b3:23:
                    06:65:9b:9c:7d:a1:37:37:6b:79:ec:1d:06:53:f8:
                    8b:ef:12:07:0f:f3:51:45:cf:f4:92:73:6f:3f:49:
                    eb:29:fa:c4:b5:59:6e:04:b9:a5:d2:86:a1:c9:15:
                    73:a9:5c:19:6a:77:f2:6e:74:e1:cf:24:cc:15:5a:
                    00:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FD:DD:5A:D6:59:63:62:F1:4E:D1:18:99:8B:9D:0E:80:77:F4:6D
            X509v3 Authority Key Identifier:
                keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/bv3dWtZZY2LxTtEYmYudDoB39G0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.16.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:69:fd:4e:7a:f6:26:81:af:36:21:d5:a0:c0:21:de:f3:94:
         4d:f7:f0:7b:fd:d3:96:82:d0:dd:c7:18:e5:f5:f1:7e:c5:75:
         cc:71:17:c2:3f:a1:6d:9d:d7:70:22:a6:17:ca:3c:b8:ed:29:
         ac:92:22:1e:d8:2b:b7:5f:90:47:48:91:fd:ba:d0:40:cc:f8:
         0c:0d:67:92:29:22:e2:b9:30:4f:61:cf:16:4d:0c:8c:b0:c9:
         1b:65:c7:d4:f7:b5:c3:d4:ce:92:3e:ce:91:b5:46:53:91:2d:
         fe:86:82:7e:62:85:a5:d9:b9:83:71:70:2f:f0:63:3a:d0:14:
         ce:f7:0a:78:89:02:88:66:a3:d0:a6:ab:a3:23:30:40:58:94:
         0a:3e:1a:3e:41:ab:af:a5:80:72:1d:fc:77:fd:ab:48:7d:7d:
         73:29:b6:6a:6d:44:3a:1a:90:c9:61:e2:b4:84:e6:85:e4:67:
         ba:fe:08:2c:3f:6e:0e:8f:82:76:b5:58:d3:ad:82:28:02:72:
         29:f8:ca:ed:aa:36:34:c2:df:cb:3f:af:73:09:92:eb:fd:7f:
         fb:4a:63:a4:da:01:94:a1:b0:f9:25:08:f2:cf:e5:d6:26:43:
         c4:33:c8:a9:c7:9c:e3:38:03:1e:56:94:8f:02:4e:2e:b5:7d:
         93:6a:0f:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87Nhz9ZXItWp0HkqaJwPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1
OGM4MjAwHhcNMjYwMTAyMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWZkZGQ1YWQ2NTk2MzYyZjE0ZWQxMTg5OThiOWQwZTgwNzdmNDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsw4sTB0Lq63AryKZx7YNJL8FpVk
vDkd92k84QoWWzq3KlY0aPIYK4MYD6sAzFdaeZo+Pyb8PzYIaTbMNnUktLDzI2Y1
ANlopHPF/TRnVlDeKk0Fwy5OpV4+QuSpuQPGN9AMHMvKSiLdL/UJYWi7Dn5TU924
qcv16KskQoI1Q6oi/i7Q8Bn6CjI8H5XGBKTVq6f2s3j/ZuCAqGvSZztIwVcRcvay
9/UEwrAxkBOC7YnLa9VPRbgqIBxIe+mgzAXesyMGZZucfaE3N2t57B0GU/iL7xIH
D/NRRc/0knNvP0nrKfrEtVluBLml0oahyRVzqVwZanfybnThzyTMFVoAJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG793VrWWWNi8U7RGJmLnQ6Ad/RtMB8GA1UdIwQY
MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt
NThjZjg5ODg4ZTJhLzEvYnYzZFd0WlpZMkx4VHRFWW1ZdWREb0IzOUcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh
LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJRBKMA0G
CSqGSIb3DQEBCwUAA4IBAQBgaf1OevYmga82IdWgwCHe85RN9/B7/dOWgtDdxxjl
9fF+xXXMcRfCP6FtnddwIqYXyjy47SmskiIe2Cu3X5BHSJH9utBAzPgMDWeSKSLi
uTBPYc8WTQyMsMkbZcfU97XD1M6SPs6RtUZTkS3+hoJ+YoWl2bmDcXAv8GM60BTO
9wp4iQKIZqPQpqujIzBAWJQKPho+QauvpYByHfx3/atIfX1zKbZqbUQ6GpDJYeK0
hOaF5Ge6/ggsP24Oj4J2tVjTrYIoAnIp+MrtqjY0wt/LP69zCZLr/X/7SmOk2gGU
obD5JQjyz+XWJkPEM8ipx5zjOAMeVpSPAk4utX2Tag8F
-----END CERTIFICATE-----
Generated at Sun Jan 11 15:07:45 2026 by rpki-client