This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/tVIvfnxeNd5Q4fCCoef2VPaercM.roa
File:                     tVIvfnxeNd5Q4fCCoef2VPaercM.roa (raw, json)
Hash identifier:          UsZ5qTmb76xuEbD3sjS7Uzqq6fgKmtSM905Jk8/9DNA=
Subject key identifier:   B5:52:2F:7E:7C:5E:35:DE:50:E1:F0:82:A1:E7:F6:54:F6:9E:AD:C3
Certificate issuer:       /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial:       019B7835574C8C6092EB9BF21314A04820AE
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/tVIvfnxeNd5Q4fCCoef2VPaercM.roa
Signing time:             Thu 01 Jan 2026 06:18:40 +0000
ROA not before:           Thu 01 Jan 2026 06:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50941
IP address blocks:        178.18.192.0/24 maxlen: 24
                          178.18.193.0/24 maxlen: 24
                          178.18.195.0/24 maxlen: 24
                          178.18.196.0/24 maxlen: 24
                          178.18.197.0/24 maxlen: 24
                          178.18.198.0/24 maxlen: 24
                          178.18.199.0/24 maxlen: 24
                          178.18.200.0/24 maxlen: 24
                          178.18.201.0/24 maxlen: 24
                          178.18.203.0/24 maxlen: 24
                          178.18.204.0/24 maxlen: 24
                          178.18.205.0/24 maxlen: 24
                          178.18.206.0/24 maxlen: 24
                          178.18.207.0/24 maxlen: 24
                          185.21.6.0/24 maxlen: 24
                          185.21.7.0/24 maxlen: 24
                          185.88.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:57:4c:8c:60:92:eb:9b:f2:13:14:a0:48:20:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
        Validity
            Not Before: Jan  1 06:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b5522f7e7c5e35de50e1f082a1e7f654f69eadc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:b7:7e:fb:f4:1d:eb:73:70:c2:db:83:b6:
                    1d:0c:1a:b6:ce:ef:4c:c6:bc:f0:b2:0f:bf:ba:0d:
                    0b:c5:b7:5a:82:d0:ed:30:bf:f5:4f:a1:97:e4:96:
                    83:0f:8a:88:8b:5a:2c:52:83:61:52:83:38:0a:c4:
                    0c:e0:4e:61:7a:90:62:8f:21:32:18:cc:f4:19:02:
                    34:75:6e:e1:bc:72:9c:80:ae:4c:34:07:cb:b3:1b:
                    7f:7e:99:b0:21:8c:c8:2c:a4:0c:38:9e:78:04:8e:
                    66:e6:49:60:82:b6:fd:7b:03:55:6e:bd:72:c8:ca:
                    b5:d0:c1:96:f5:af:a1:dc:13:e4:46:c6:91:65:c2:
                    d1:c0:eb:66:2c:b2:7b:e6:8e:00:e5:ee:77:aa:b8:
                    82:70:47:da:2b:8b:45:63:aa:29:fd:7d:96:d4:6c:
                    7d:7c:67:aa:b8:2d:1c:49:56:a2:fe:2c:3d:3e:21:
                    fa:3f:20:58:d9:4e:dc:eb:7a:f8:1f:f5:70:6a:7d:
                    74:79:dd:08:7d:b5:c1:91:8d:e2:39:e7:45:10:6b:
                    2c:e7:ba:5c:90:cf:93:39:73:eb:e2:5e:00:f2:1a:
                    91:cf:2a:b0:80:fa:d0:bf:a8:3e:36:a0:4d:3b:10:
                    5d:9e:21:d4:70:80:d5:09:7b:67:6a:e1:da:36:aa:
                    be:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:52:2F:7E:7C:5E:35:DE:50:E1:F0:82:A1:E7:F6:54:F6:9E:AD:C3
            X509v3 Authority Key Identifier:
                keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/tVIvfnxeNd5Q4fCCoef2VPaercM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.18.192.0/23
                  178.18.195.0-178.18.201.255
                  178.18.203.0-178.18.207.255
                  185.21.6.0/23
                  185.88.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:c8:00:5f:95:07:a4:83:72:03:f7:6f:90:e0:09:69:12:25:
         07:e5:19:55:b1:a0:d0:d0:56:5b:b9:26:88:99:1a:b5:fb:3f:
         ed:dd:a8:98:56:eb:9a:5c:87:10:16:84:5e:11:9e:7a:3e:7f:
         13:c0:d1:8c:d9:24:36:b9:10:a6:d8:18:60:80:ef:0a:d5:75:
         73:6e:f3:b9:9d:80:6d:b6:f4:94:57:c4:70:92:fd:cb:63:44:
         c9:f2:59:4f:c3:dc:20:aa:c2:9c:cc:e0:9d:e1:60:62:ed:10:
         10:d6:41:45:85:6d:df:40:d0:2d:f7:63:33:b0:ff:30:0a:0d:
         6b:42:ef:06:b6:f2:a1:85:b0:32:da:94:ad:48:a8:10:b1:e8:
         94:36:d4:ad:6d:17:f1:63:ec:ae:b9:61:1f:fe:57:be:d2:57:
         7c:93:51:13:d4:4f:26:a7:bc:cd:fb:61:28:e5:d3:84:3c:fe:
         d7:ff:bc:7b:db:eb:e8:fc:81:8f:21:d6:57:8a:f3:27:89:8a:
         0a:91:fe:1b:12:e9:b3:ce:01:6d:fd:4e:e5:ac:28:9e:c2:5f:
         9c:c2:fa:42:49:35:e4:ab:c6:7b:42:bc:41:f0:04:b5:7f:7c:
         54:bf:18:fa:b7:0a:bf:59:92:0a:d1:91:6a:17:5e:a5:66:9e:
         02:08:4b:e3
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZt4NVdMjGCS65vyExSgSCCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OWQ5MDUzNzE3YTE2YTc2YzEwYWU4MzhmNTYyNTA1NWJl
MDQ4MWYwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTUyMmY3ZTdjNWUzNWRlNTBlMWYwODJhMWU3ZjY1NGY2OWVhZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt763fvv0HetzcMLbg7YdDBq2zu9M
xrzwsg+/ug0LxbdagtDtML/1T6GX5JaDD4qIi1osUoNhUoM4CsQM4E5hepBijyEy
GMz0GQI0dW7hvHKcgK5MNAfLsxt/fpmwIYzILKQMOJ54BI5m5klggrb9ewNVbr1y
yMq10MGW9a+h3BPkRsaRZcLRwOtmLLJ75o4A5e53qriCcEfaK4tFY6op/X2W1Gx9
fGequC0cSVai/iw9PiH6PyBY2U7c63r4H/Vwan10ed0IfbXBkY3iOedFEGss57pc
kM+TOXPr4l4A8hqRzyqwgPrQv6g+NqBNOxBdniHUcIDVCXtnauHaNqq+MwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFLVSL358XjXeUOHwgqHn9lT2nq3DMB8GA1UdIwQY
MBaAFAedkFNxehanbBCug49WJQVb4EgfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAt
MjdkMDNlMzkzZmI3LzEvdFZJdmZueGVOZDVRNGZDQ29lZjJWUGFlcmNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OGQxNmEtODJlNS00ZjRhLTg3MzAtMjdkMDNlMzkzZmI3
LzEvQjUyUVUzRjZGcWRzRUs2RGoxWWxCVnZnU0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQBshLAMAwD
BACyEsMDBAGyEsgwDAMEALISywMEBLISwAMEAbkVBgMEALlYhDANBgkqhkiG9w0B
AQsFAAOCAQEAXMgAX5UHpINyA/dvkOAJaRIlB+UZVbGg0NBWW7kmiJkatfs/7d2o
mFbrmlyHEBaEXhGeej5/E8DRjNkkNrkQptgYYIDvCtV1c27zuZ2Abbb0lFfEcJL9
y2NEyfJZT8PcIKrCnMzgneFgYu0QENZBRYVt30DQLfdjM7D/MAoNa0LvBrbyoYWw
MtqUrUioELHolDbUrW0X8WPsrrlhH/5XvtJXfJNRE9RPJqe8zfthKOXThDz+1/+8
e9vr6PyBjyHWV4rzJ4mKCpH+GxLps84Bbf1O5awonsJfnML6Qkk15KvGe0K8QfAE
tX98VL8Y+rcKv1mSCtGRahdepWaeAghL4w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 16:56:13 2026 by rpki-client