This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/PRvsh1x00RMJzZpEHoxFVcH7VMg.roa
File:                     PRvsh1x00RMJzZpEHoxFVcH7VMg.roa (raw, json)
Hash identifier:          XjvusNdaliRnfxyK4C+qku8n/qgL8kMZURp6BCwW4eM=
Subject key identifier:   3D:1B:EC:87:5C:74:D1:13:09:CD:9A:44:1E:8C:45:55:C1:FB:54:C8
Certificate issuer:       /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial:       019C2CFB00B822EE37349695409E2CDCF06F
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/PRvsh1x00RMJzZpEHoxFVcH7VMg.roa
Signing time:             Thu 05 Feb 2026 08:46:12 +0000
ROA not before:           Thu 05 Feb 2026 08:46:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12876
IP address blocks:        62.4.0.0/19 maxlen: 19
                          62.210.0.0/16 maxlen: 24
                          91.235.79.0/24 maxlen: 24
                          195.154.0.0/16 maxlen: 24
                          212.47.224.0/19 maxlen: 19
                          212.83.128.0/19 maxlen: 19
                          212.83.160.0/19 maxlen: 19
                          212.129.0.0/18 maxlen: 18
                          2001:bc8::/32 maxlen: 38
                          2001:bc8:1200::/39 maxlen: 48
                          2001:bc8:1201::/48 maxlen: 48
                          2001:bc8:1400::/38 maxlen: 38
                          2001:bc8:1800::/38 maxlen: 38
                          2001:bc8:1c00::/38 maxlen: 38
                          2001:bc8:2000::/35 maxlen: 48
                          2001:bc8:5400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2c:fb:00:b8:22:ee:37:34:96:95:40:9e:2c:dc:f0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
        Validity
            Not Before: Feb  5 08:46:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3d1bec875c74d11309cd9a441e8c4555c1fb54c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2a:a4:75:07:6b:72:5e:1f:e4:ef:04:f6:42:
                    f7:af:b1:e4:2f:2d:85:5e:d2:20:d1:11:93:b1:a4:
                    c9:76:42:cc:1e:d7:19:4b:44:c9:23:73:ec:d8:33:
                    dd:09:88:43:db:85:07:74:a3:df:bd:c6:18:99:90:
                    96:e2:30:89:97:5b:15:02:13:cc:41:b5:cc:2b:d1:
                    03:e5:c8:7e:a5:49:7f:ed:a2:64:17:c4:6f:15:bf:
                    61:da:49:d0:71:61:b0:dc:7c:04:46:87:cc:73:d2:
                    81:c9:fa:85:cf:33:21:5d:ff:46:ac:09:00:ce:f8:
                    56:e2:58:68:53:1e:73:2c:a5:3e:32:00:42:9d:ec:
                    af:12:3c:ca:3b:ad:41:c6:6c:53:2b:a2:f3:1e:7a:
                    45:4e:58:bf:6a:1f:4d:32:d9:0e:8b:4a:9b:d4:f2:
                    de:7c:56:97:25:d6:78:51:30:fe:94:65:0c:3a:67:
                    9e:8f:d8:89:95:f8:ff:e9:9e:3a:4f:ca:e9:9e:b2:
                    37:3e:b9:79:31:d5:f2:08:7f:07:5d:c3:4d:30:be:
                    5b:36:b9:f5:b9:b7:7e:7d:20:7e:97:7d:58:11:bd:
                    37:ce:3c:c8:7b:cf:ec:4d:22:c0:7d:01:14:db:7a:
                    cb:2e:5b:34:46:0a:06:32:1c:c1:43:ea:29:9b:2e:
                    52:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1B:EC:87:5C:74:D1:13:09:CD:9A:44:1E:8C:45:55:C1:FB:54:C8
            X509v3 Authority Key Identifier:
                keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/PRvsh1x00RMJzZpEHoxFVcH7VMg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.4.0.0/19
                  62.210.0.0/16
                  91.235.79.0/24
                  195.154.0.0/16
                  212.47.224.0/19
                  212.83.128.0/18
                  212.129.0.0/18
                IPv6:
                  2001:bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:f1:d0:8d:dc:cc:4f:f7:a9:d3:de:98:19:9c:56:3b:39:e9:
         93:e9:cb:28:67:53:7d:b4:78:dd:f9:c7:95:1e:f6:3f:7f:a9:
         d1:07:a1:04:bf:4a:79:ff:81:88:8e:8c:85:ae:56:25:99:33:
         01:39:80:d5:cb:42:ef:78:1d:54:c9:8a:21:55:b4:57:62:86:
         2a:12:f6:f2:1a:49:40:7a:8e:8c:84:0a:e4:d5:46:fb:ee:92:
         09:9a:e5:f0:1d:9f:92:6a:e8:cd:d9:48:5c:e6:13:f1:61:f4:
         04:cb:f6:0d:d2:2a:ce:d9:ba:77:6c:91:b3:1d:01:f2:3f:eb:
         6f:be:b4:b8:53:f6:00:d8:cd:c4:16:ba:7d:83:0c:a8:93:ef:
         f4:59:c3:eb:6f:f9:5e:fc:c9:98:0d:88:68:66:2e:89:a0:13:
         c7:59:30:30:73:df:70:58:ad:21:1b:b7:9e:fd:be:88:b0:85:
         75:01:af:84:c3:4c:73:76:9d:50:76:f9:84:77:e5:43:bc:95:
         4a:72:53:a0:87:41:58:a1:e5:dc:a6:d6:ee:45:17:8b:01:07:
         60:3b:71:a0:ff:2d:ed:12:7c:66:88:22:4f:34:af:8b:9a:99:
         d8:b6:5d:7a:d2:05:09:34:76:1a:be:b5:1b:2d:45:7a:53:dd:
         bd:b2:86:11
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAZws+wC4Iu43NJaVQJ4s3PBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTE2YjQ5M2QyYTEyODk3Y2FmNDc1N2JiMThhMDJlZWMy
Y2RlMTcwHhcNMjYwMjA1MDg0NjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDFiZWM4NzVjNzRkMTEzMDljZDlhNDQxZThjNDU1NWMxZmI1NGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SqkdQdrcl4f5O8E9kL3r7HkLy2F
XtIg0RGTsaTJdkLMHtcZS0TJI3Ps2DPdCYhD24UHdKPfvcYYmZCW4jCJl1sVAhPM
QbXMK9ED5ch+pUl/7aJkF8RvFb9h2knQcWGw3HwERofMc9KByfqFzzMhXf9GrAkA
zvhW4lhoUx5zLKU+MgBCneyvEjzKO61BxmxTK6LzHnpFTli/ah9NMtkOi0qb1PLe
fFaXJdZ4UTD+lGUMOmeej9iJlfj/6Z46T8rpnrI3Prl5MdXyCH8HXcNNML5bNrn1
ubd+fSB+l31YEb03zjzIe8/sTSLAfQEU23rLLls0RgoGMhzBQ+opmy5SrwIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFD0b7IdcdNETCc2aRB6MRVXB+1TIMB8GA1UdIwQY
MBaAFPrha0k9KhKJfK9HV7sYoC7sLN4XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11RnJTVDBxRW9sOHIwZFh1eGlnTHV3czNoYy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMjkzZDM2LTlkYTItNDQwNS04ZGUz
LTRhZmQ4MjU0YWU0My8xL1BSdnNoMXgwMFJNSnpacEVIb3hGVmNIN1ZNZy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTMvMjkzZDM2LTlkYTItNDQwNS04ZGUzLTRhZmQ4MjU0YWU0
My8xLzEtdUZyU1QwcUVvbDhyMGRYdXhpZ0x1d3MzaGMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwUAYIKwYBBQUHAQcBAf8EQTA/MC4EAgABMCgDBAU+BAAD
AwA+0gMEAFvrTwMDAMOaAwQF1C/gAwQG1FOAAwQG1IEAMA0EAgACMAcDBQAgAQvI
MA0GCSqGSIb3DQEBCwUAA4IBAQCs8dCN3MxP96nT3pgZnFY7OemT6csoZ1N9tHjd
+ceVHvY/f6nRB6EEv0p5/4GIjoyFrlYlmTMBOYDVy0LveB1UyYohVbRXYoYqEvby
GklAeo6MhArk1Ub77pIJmuXwHZ+SaujN2Uhc5hPxYfQEy/YN0irO2bp3bJGzHQHy
P+tvvrS4U/YA2M3EFrp9gwyok+/0WcPrb/le/MmYDYhoZi6JoBPHWTAwc99wWK0h
G7ee/b6IsIV1Aa+Ew0xzdp1QdvmEd+VDvJVKclOgh0FYoeXcptbuRReLAQdgO3Gg
/y3tEnxmiCJPNK+LmpnYtl160gUJNHYavrUbLUV6U929soYR
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:37:08 2026 by rpki-client