This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/g323boBVOxyFFRDtn1suxBzGHN0.roa
File:                     g323boBVOxyFFRDtn1suxBzGHN0.roa (raw, json)
Hash identifier:          eyZdCahVj22vnipsJsBb9tIVCdJEj0KFcdD786lVupg=
Subject key identifier:   83:7D:B7:6E:80:55:3B:1C:85:15:10:ED:9F:5B:2E:C4:1C:C6:1C:DD
Certificate issuer:       /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial:       019B7D5C1384623ECE0F60E38F874E541523
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/g323boBVOxyFFRDtn1suxBzGHN0.roa
Signing time:             Fri 02 Jan 2026 06:19:04 +0000
ROA not before:           Fri 02 Jan 2026 06:19:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57364
IP address blocks:        194.110.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:13:84:62:3e:ce:0f:60:e3:8f:87:4e:54:15:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
        Validity
            Not Before: Jan  2 06:19:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=837db76e80553b1c851510ed9f5b2ec41cc61cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:fb:ca:97:f4:09:8a:46:99:a3:a7:c7:b7:
                    33:4a:15:29:0d:ea:b6:23:72:dc:6f:a8:b5:e4:2a:
                    b8:25:a7:85:0c:20:ff:fd:27:40:cd:3f:00:99:c8:
                    25:b4:82:e4:0c:f5:16:0e:43:c7:9b:a0:83:4a:14:
                    d6:0e:e7:3b:bd:b5:cb:74:2d:00:50:75:6d:e7:4a:
                    af:b0:ac:cd:cd:ab:30:e2:39:d1:37:e7:2d:0b:d7:
                    bb:76:2d:d9:ef:c0:30:aa:4f:15:60:cc:5a:55:3c:
                    04:cc:2a:63:be:3d:5b:cf:85:be:6c:a5:d2:d9:76:
                    e0:c9:53:b5:24:54:d7:66:f7:b2:1d:cf:68:be:c5:
                    84:f0:07:04:a4:c8:a5:34:a2:1d:5b:57:59:f8:7d:
                    83:45:a8:52:2f:dc:a5:45:0e:18:9f:65:6a:3f:25:
                    70:4d:d2:5c:46:0b:3f:bf:ff:d7:43:25:b2:a0:7d:
                    44:ce:69:24:33:4e:94:a4:de:08:3a:61:35:11:b7:
                    d2:be:a3:84:4f:d5:32:4c:b9:dd:45:bd:0c:e7:16:
                    f6:85:8e:78:79:7d:5a:50:a0:fb:c3:e2:9f:ab:e8:
                    9a:47:bb:43:0a:18:85:91:48:c9:06:34:57:ab:d0:
                    c0:89:52:44:0b:c9:23:0d:9f:39:8a:bf:2f:30:96:
                    a7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7D:B7:6E:80:55:3B:1C:85:15:10:ED:9F:5B:2E:C4:1C:C6:1C:DD
            X509v3 Authority Key Identifier:
                keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/g323boBVOxyFFRDtn1suxBzGHN0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:98:68:f6:04:62:b3:4e:d7:fa:7b:c3:2b:fb:7c:c5:f1:f0:
         b0:c2:dc:02:47:8e:28:9f:46:c9:2a:b9:47:7f:4b:24:54:e7:
         4c:3f:3e:cc:1e:44:a4:80:36:a1:40:96:20:fe:42:9e:d6:3b:
         65:3c:aa:7c:d9:b9:57:1d:a0:e7:d8:5b:27:05:fb:03:99:9e:
         8c:a5:90:8e:df:fa:d2:2d:63:ee:00:e0:a4:34:4d:2c:fc:9a:
         b0:14:f6:fe:44:88:94:cd:ed:ec:aa:82:27:9c:f1:7d:ed:ff:
         50:04:3c:a0:cc:5f:a5:83:af:ac:d3:e6:cd:a7:61:e7:a9:9a:
         2e:84:f3:6c:a8:ac:41:da:bd:36:1c:40:10:0b:39:ab:bf:03:
         b3:d7:76:81:85:00:75:64:4c:e7:43:b5:1f:24:11:52:34:36:
         f4:ba:ee:b8:74:0e:ca:8b:60:4e:c3:11:3e:2a:de:ad:51:24:
         f9:47:cb:e1:06:28:2e:9d:f7:3d:39:f1:00:94:79:5e:2e:c3:
         38:d1:76:c8:37:77:dd:14:fc:35:ce:e1:7d:15:ef:a4:f2:86:
         bc:bb:20:df:64:48:b4:65:51:95:d0:f3:7a:c6:83:f4:65:f6:
         38:23:15:da:8f:a8:82:5d:1e:93:8f:c4:20:63:c0:7e:6e:24:
         43:ed:ea:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XBOEYj7OD2Djj4dOVBUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZTdmMjZkYjQzYWQ0MzIwNWJlYjA2N2ZkMGFiM2UzMDAy
Nzg2NWQwHhcNMjYwMTAyMDYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzdkYjc2ZTgwNTUzYjFjODUxNTEwZWQ5ZjViMmVjNDFjYzYxY2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyP7ypf0CYpGmaOnx7czShUpDeq2
I3Lcb6i15Cq4JaeFDCD//SdAzT8AmcgltILkDPUWDkPHm6CDShTWDuc7vbXLdC0A
UHVt50qvsKzNzasw4jnRN+ctC9e7di3Z78Awqk8VYMxaVTwEzCpjvj1bz4W+bKXS
2XbgyVO1JFTXZveyHc9ovsWE8AcEpMilNKIdW1dZ+H2DRahSL9ylRQ4Yn2VqPyVw
TdJcRgs/v//XQyWyoH1EzmkkM06UpN4IOmE1EbfSvqOET9UyTLndRb0M5xb2hY54
eX1aUKD7w+Kfq+iaR7tDChiFkUjJBjRXq9DAiVJEC8kjDZ85ir8vMJanFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIN9t26AVTschRUQ7Z9bLsQcxhzdMB8GA1UdIwQY
MBaAFA3n8m20OtQyBb6wZ/0Ks+MAJ4ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZTMyYjktNWM5ZC00ZWYwLTliOTIt
ZDIyMTIzMzk3YjUwLzEvZzMyM2JvQlZPeHlGRlJEdG4xc3V4QnpHSE4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZTMyYjktNWM5ZC00ZWYwLTliOTItZDIyMTIzMzk3YjUw
LzEvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwm6YMA0G
CSqGSIb3DQEBCwUAA4IBAQAPmGj2BGKzTtf6e8Mr+3zF8fCwwtwCR44on0bJKrlH
f0skVOdMPz7MHkSkgDahQJYg/kKe1jtlPKp82blXHaDn2FsnBfsDmZ6MpZCO3/rS
LWPuAOCkNE0s/JqwFPb+RIiUze3sqoInnPF97f9QBDygzF+lg6+s0+bNp2HnqZou
hPNsqKxB2r02HEAQCzmrvwOz13aBhQB1ZEznQ7UfJBFSNDb0uu64dA7Ki2BOwxE+
Kt6tUST5R8vhBigunfc9OfEAlHleLsM40XbIN3fdFPw1zuF9Fe+k8oa8uyDfZEi0
ZVGV0PN6xoP0ZfY4IxXaj6iCXR6Tj8QgY8B+biRD7eqv
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:23:19 2026 by rpki-client