This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/w07IS6VwbFT7C45jHwNSzVbwcR8.roa
File:                     w07IS6VwbFT7C45jHwNSzVbwcR8.roa (raw, json)
Hash identifier:          lDpW+bIbUHoYEkbMa43ojnpgVM2clYFDS8nSWRgzTl8=
Subject key identifier:   C3:4E:C8:4B:A5:70:6C:54:FB:0B:8E:63:1F:03:52:CD:56:F0:71:1F
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       019B7A5AA0BBA69EB4F41944CD3CE8BAFC40
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/w07IS6VwbFT7C45jHwNSzVbwcR8.roa
Signing time:             Thu 01 Jan 2026 16:18:38 +0000
ROA not before:           Thu 01 Jan 2026 16:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61112
IP address blocks:        83.147.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:a0:bb:a6:9e:b4:f4:19:44:cd:3c:e8:ba:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Jan  1 16:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c34ec84ba5706c54fb0b8e631f0352cd56f0711f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:ae:ab:d6:19:74:0b:61:0d:e3:03:fd:3a:
                    30:6a:38:fa:da:19:dd:0f:22:99:a5:db:95:57:b4:
                    e7:c8:9b:44:91:0d:50:6d:2c:fa:1f:40:59:d2:2e:
                    21:a4:bd:0a:da:1b:d7:e1:7c:24:0f:60:d9:cf:a4:
                    30:6c:3c:64:a9:74:52:d3:01:a2:e2:4e:5a:69:47:
                    44:dd:88:f0:49:fb:7d:d0:98:83:46:cd:05:4a:21:
                    02:84:48:d1:f7:55:bb:cc:ea:92:5c:1d:cf:0e:ba:
                    61:1d:32:ef:5d:2d:8f:87:d1:2a:b9:f5:37:49:ac:
                    e1:55:0d:e2:0d:70:6a:fb:52:59:5f:dc:48:41:11:
                    82:49:9e:cd:b7:47:9c:79:a6:b0:9a:48:58:87:bc:
                    f3:26:35:03:ba:80:81:f7:92:87:38:c0:0e:bf:07:
                    5c:60:2d:12:aa:d4:fc:cf:13:9b:79:25:ca:d0:c1:
                    ee:f1:28:32:04:61:0c:3b:a4:b7:83:01:6c:1f:56:
                    f6:97:97:fe:be:21:d1:72:d8:e6:6b:9d:51:a7:29:
                    84:41:9d:0d:95:76:a2:45:6a:eb:43:7b:d6:c9:7d:
                    f6:a4:43:bc:80:af:cc:13:89:43:92:4a:cb:b7:5a:
                    1e:b4:cf:7c:48:b1:ce:58:09:61:05:12:e3:75:ab:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4E:C8:4B:A5:70:6C:54:FB:0B:8E:63:1F:03:52:CD:56:F0:71:1F
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/w07IS6VwbFT7C45jHwNSzVbwcR8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:7a:ac:6d:b1:ef:e5:a6:a3:25:e6:97:1b:28:b4:cf:0d:4d:
         8d:93:a5:da:a6:1b:88:fb:24:67:2d:4c:5d:ad:e5:94:03:67:
         5a:8c:d7:5e:12:a3:8f:da:9b:68:59:1a:91:63:d4:fc:b6:25:
         5b:e0:a7:1f:54:2a:4e:02:1c:4e:7a:29:83:f7:b8:a9:38:60:
         ae:0c:bb:dd:09:73:66:b9:94:71:71:eb:64:90:20:36:8c:25:
         b1:dc:de:31:1b:c7:e4:dd:5c:e7:f7:3a:16:72:f1:e7:38:4d:
         ee:23:f7:c2:74:69:7e:bb:df:ce:a0:02:47:07:11:67:5a:cb:
         40:bf:58:3f:8d:15:f7:af:df:88:fc:02:07:ea:37:36:df:91:
         c7:14:85:f0:18:9b:c0:07:ea:2a:d3:3e:26:c4:f9:58:37:dc:
         4e:8e:f7:82:69:eb:95:03:6d:98:a6:49:91:14:ca:1e:a8:80:
         06:2a:9d:2d:fd:76:9c:ad:29:65:82:c3:a8:3c:15:c8:34:98:
         09:25:7d:73:3c:14:e9:f8:dc:2c:a7:b7:af:6c:b1:54:80:c7:
         0e:ec:f4:9f:be:1a:4a:3a:b4:3f:d7:13:9b:d6:68:ba:52:b3:
         45:3f:3f:ce:98:4f:5c:05:10:5e:b4:17:2d:30:11:d3:d6:a8:
         a5:b2:e2:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6WqC7pp609BlEzTzouvxAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm
MzBjOWYwHhcNMjYwMTAxMTYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzRlYzg0YmE1NzA2YzU0ZmIwYjhlNjMxZjAzNTJjZDU2ZjA3MTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw+uq9YZdAthDeMD/Towajj62hnd
DyKZpduVV7TnyJtEkQ1QbSz6H0BZ0i4hpL0K2hvX4XwkD2DZz6QwbDxkqXRS0wGi
4k5aaUdE3YjwSft90JiDRs0FSiEChEjR91W7zOqSXB3PDrphHTLvXS2Ph9EqufU3
SazhVQ3iDXBq+1JZX9xIQRGCSZ7Nt0eceaawmkhYh7zzJjUDuoCB95KHOMAOvwdc
YC0SqtT8zxObeSXK0MHu8SgyBGEMO6S3gwFsH1b2l5f+viHRctjma51RpymEQZ0N
lXaiRWrrQ3vWyX32pEO8gK/ME4lDkkrLt1oetM98SLHOWAlhBRLjdasmAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMNOyEulcGxU+wuOYx8DUs1W8HEfMB8GA1UdIwQY
MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt
MDhkMTI3MGMyZTcxLzEvdzA3SVM2VndiRlQ3QzQ1akh3TlN6VmJ3Y1I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx
LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MMMA0G
CSqGSIb3DQEBCwUAA4IBAQAaeqxtse/lpqMl5pcbKLTPDU2Nk6XaphuI+yRnLUxd
reWUA2dajNdeEqOP2ptoWRqRY9T8tiVb4KcfVCpOAhxOeimD97ipOGCuDLvdCXNm
uZRxcetkkCA2jCWx3N4xG8fk3Vzn9zoWcvHnOE3uI/fCdGl+u9/OoAJHBxFnWstA
v1g/jRX3r9+I/AIH6jc235HHFIXwGJvAB+oq0z4mxPlYN9xOjveCaeuVA22YpkmR
FMoeqIAGKp0t/XacrSllgsOoPBXINJgJJX1zPBTp+Nwsp7evbLFUgMcO7PSfvhpK
OrQ/1xOb1mi6UrNFPz/OmE9cBRBetBctMBHT1qilsuKN
-----END CERTIFICATE-----
Generated at Mon Jan 19 11:23:45 2026 by rpki-client