This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/sQvPybtma9tvSwqB-AosSvIjwzY.roa
File:                     sQvPybtma9tvSwqB-AosSvIjwzY.roa (raw, json)
Hash identifier:          tGlmhMYvSMpHbovXQ1w4dxEff+1tXSKUNI8zYaqHCcI=
Subject key identifier:   B1:0B:CF:C9:BB:66:6B:DB:6F:4B:0A:81:F8:0A:2C:4A:F2:23:C3:36
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       019B7A5AA30C7A7E8A33F09DF7CA952FE302
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/sQvPybtma9tvSwqB-AosSvIjwzY.roa
Signing time:             Thu 01 Jan 2026 16:18:38 +0000
ROA not before:           Thu 01 Jan 2026 16:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211373
IP address blocks:        83.147.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:a3:0c:7a:7e:8a:33:f0:9d:f7:ca:95:2f:e3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan  1 16:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b10bcfc9bb666bdb6f4b0a81f80a2c4af223c336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:fa:f3:6b:5b:4f:e0:82:00:a4:b8:ca:ba:
                    ed:48:17:e0:01:b9:bd:17:87:6b:89:81:e5:1c:49:
                    47:d1:3f:0b:19:e0:12:6c:6c:6f:91:ff:eb:6e:45:
                    58:13:4b:2d:fb:1b:c9:4a:f5:60:b8:89:52:12:26:
                    df:b0:18:aa:08:15:90:ad:0a:70:7c:ac:6a:27:2a:
                    a7:00:9d:71:66:03:39:4e:97:af:6b:9f:d6:61:0c:
                    c7:65:35:c6:32:bf:fc:ed:c9:e8:70:ec:d4:0a:e8:
                    74:22:40:18:d5:cf:f4:46:97:34:a0:6a:b6:de:60:
                    59:ad:f1:8b:47:d4:2b:7b:ff:6d:7e:a7:fd:38:ab:
                    f8:2f:90:77:ab:d7:3a:ab:80:7a:fa:67:d8:45:64:
                    91:1b:b8:b6:cd:f3:36:42:4f:60:98:4b:7a:8b:ed:
                    68:01:21:d9:4a:c1:9b:57:c7:55:db:3d:eb:ec:a0:
                    d2:d0:2c:21:bf:1d:1f:f3:2c:ac:68:3b:4b:3e:75:
                    e0:18:bd:41:a2:9b:a9:73:c5:ee:44:1a:dc:68:17:
                    e8:d9:25:7c:5c:13:d3:3c:25:a4:90:71:92:5f:64:
                    21:37:e9:93:d8:c7:58:d5:ad:c1:3a:83:da:6e:92:
                    a5:4a:c1:3a:d5:a9:96:de:50:9e:d9:26:26:72:7c:
                    b8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0B:CF:C9:BB:66:6B:DB:6F:4B:0A:81:F8:0A:2C:4A:F2:23:C3:36
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/sQvPybtma9tvSwqB-AosSvIjwzY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:84:1a:a1:b7:95:cb:41:bd:c6:63:54:73:df:dc:ef:2b:30:
         ae:65:54:08:41:80:1a:5b:9a:da:67:53:64:a9:2f:74:13:79:
         f9:cc:fe:90:84:96:94:d2:c7:44:61:82:94:68:49:5a:75:ea:
         69:61:84:b8:f6:67:8d:df:0b:2e:92:c7:48:f6:18:18:cf:42:
         62:11:11:0c:49:74:80:df:70:d0:8a:4a:99:42:22:29:cb:72:
         1f:bd:28:ec:c0:db:5e:9b:bb:0d:70:cd:47:78:8c:2c:a4:f8:
         51:95:1c:3a:f5:7e:63:dc:6c:ee:c2:2d:c8:79:41:d8:79:ac:
         59:07:d7:b3:ed:fe:54:92:4b:df:d8:cf:a4:29:3e:be:81:f2:
         b7:c6:49:48:88:53:20:0c:25:ce:0d:57:1a:bf:26:99:53:3b:
         ca:e6:96:8f:d0:fc:70:34:11:54:17:46:d2:c3:3b:75:16:b6:
         f9:6c:e0:0e:53:ff:77:e7:ea:b2:7c:a4:86:e4:c9:e9:ef:a8:
         3b:1d:a6:3a:bd:9c:43:00:d0:16:f2:c4:fe:8b:24:bd:da:68:
         32:14:28:44:62:6b:c1:8d:87:86:1c:5e:e2:c8:7d:5d:c7:4b:
         84:d5:d9:04:07:5d:ec:9a:02:12:e3:dd:10:44:c3:82:1b:b6:
         1c:37:56:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6WqMMen6KM/Cd98qVL+MCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjYwMTAxMTYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTBiY2ZjOWJiNjY2YmRiNmY0YjBhODFmODBhMmM0YWYyMjNjMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU/682tbT+CCAKS4yrrtSBfgAbm9
F4driYHlHElH0T8LGeASbGxvkf/rbkVYE0st+xvJSvVguIlSEibfsBiqCBWQrQpw
fKxqJyqnAJ1xZgM5Tpeva5/WYQzHZTXGMr/87cnocOzUCuh0IkAY1c/0Rpc0oGq2
3mBZrfGLR9Qre/9tfqf9OKv4L5B3q9c6q4B6+mfYRWSRG7i2zfM2Qk9gmEt6i+1o
ASHZSsGbV8dV2z3r7KDS0Cwhvx0f8yysaDtLPnXgGL1Bopupc8XuRBrcaBfo2SV8
XBPTPCWkkHGSX2QhN+mT2MdY1a3BOoPabpKlSsE61amW3lCe2SYmcny4JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLELz8m7Zmvbb0sKgfgKLEryI8M2MB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvc1F2UHlidG1hOXR2U3dxQi1Bb3NTdklqd3pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5MZMA0G
CSqGSIb3DQEBCwUAA4IBAQAihBqht5XLQb3GY1Rz39zvKzCuZVQIQYAaW5raZ1Nk
qS90E3n5zP6QhJaU0sdEYYKUaEladeppYYS49meN3wsuksdI9hgYz0JiEREMSXSA
33DQikqZQiIpy3IfvSjswNtem7sNcM1HeIwspPhRlRw69X5j3Gzuwi3IeUHYeaxZ
B9ez7f5Ukkvf2M+kKT6+gfK3xklIiFMgDCXODVcavyaZUzvK5paP0PxwNBFUF0bS
wzt1Frb5bOAOU/935+qyfKSG5Mnp76g7HaY6vZxDANAW8sT+iyS92mgyFChEYmvB
jYeGHF7iyH1dx0uE1dkEB13smgIS490QRMOCG7YcN1Yf
-----END CERTIFICATE-----
Generated at Mon Jan 19 10:56:37 2026 by rpki-client