This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa
File:                     TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa (raw, json)
Hash identifier:          iK5z4qk0gr8bvYoAqNPpIK2aAVNKtW+7/UdSHbw3Lm4=
Subject key identifier:   4C:FC:01:A2:31:C9:D1:2D:61:99:15:14:03:F0:1C:3D:F8:62:37:46
Certificate issuer:       /CN=0747d06d14ba4e278097f35a80c715684cac2661
Certificate serial:       019B7A5AC569399A1B82F7620914BDC9F698
Authority key identifier: 07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa
Signing time:             Thu 01 Jan 2026 16:18:47 +0000
ROA not before:           Thu 01 Jan 2026 16:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48716
IP address blocks:        31.3.209.0/24 maxlen: 24
                          83.97.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:c5:69:39:9a:1b:82:f7:62:09:14:bd:c9:f6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0747d06d14ba4e278097f35a80c715684cac2661
        Validity
            Not Before: Jan  1 16:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4cfc01a231c9d12d6199151403f01c3df8623746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:28:25:42:cb:c8:b3:25:8f:c8:27:3d:77:78:
                    fd:55:88:e7:0b:da:b2:3a:46:1d:0a:71:dc:6e:7e:
                    11:3e:be:b7:f8:e7:0e:b2:18:b4:3e:fd:70:a9:23:
                    94:bf:b5:a3:5b:03:33:0d:e7:ab:3e:d0:55:a9:68:
                    e6:1c:af:77:c9:43:dd:18:cb:3d:c7:51:46:fe:50:
                    b7:43:a6:52:de:a7:9d:35:02:23:2c:32:74:14:75:
                    db:43:9b:cb:59:2c:87:76:bb:86:a1:90:8e:45:93:
                    64:40:07:c5:51:1a:5f:fd:bb:2f:fd:6a:41:81:fc:
                    8f:7d:0b:17:61:3a:ad:00:cd:80:8d:27:84:8f:9d:
                    3a:e0:14:b1:b8:9f:6f:2f:36:6d:a1:4d:7e:9e:ac:
                    52:0a:19:91:91:a0:1b:89:94:e0:38:a7:90:cf:51:
                    d0:83:fd:91:23:ea:a8:9b:06:aa:6d:8a:3a:f5:b2:
                    94:ff:f0:7c:15:6a:98:28:7b:94:dd:b1:e6:5d:66:
                    6e:d1:06:04:ac:6f:4a:47:a0:05:68:da:87:93:72:
                    5b:fc:4b:69:31:60:dc:88:cc:37:fe:7d:4e:cb:fb:
                    fc:61:fd:e3:9f:67:e9:88:50:ea:d8:13:b8:c5:71:
                    5e:41:78:3d:c7:6b:97:cd:a6:97:67:e2:3c:43:61:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FC:01:A2:31:C9:D1:2D:61:99:15:14:03:F0:1C:3D:F8:62:37:46
            X509v3 Authority Key Identifier:
                keyid:07:47:D0:6D:14:BA:4E:27:80:97:F3:5A:80:C7:15:68:4C:AC:26:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0fQbRS6TieAl_NagMcVaEysJmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/TPwBojHJ0S1hmRUUA_AcPfhiN0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f97b1-1725-4bde-8b9a-0d1cbfcd3bc0/1/B0fQbRS6TieAl_NagMcVaEysJmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.3.209.0/24
                  83.97.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:e8:17:13:32:6b:58:66:f3:a6:6a:14:cf:9b:7e:5b:91:e6:
         44:2f:81:a7:65:1e:5f:a6:e5:6e:49:98:21:c9:4f:a6:31:1c:
         f2:0c:52:db:ea:97:d4:dc:5a:a0:77:10:51:0c:d7:b4:58:3c:
         9b:b5:41:e1:26:11:36:43:d0:31:a0:aa:5b:90:c6:cf:3e:ab:
         7f:aa:5a:fb:84:07:fd:ef:c0:e4:a8:f8:1a:ea:da:78:b6:37:
         ed:54:0b:fb:bf:3b:07:41:61:26:58:d9:f7:a6:f5:e3:a8:35:
         b2:fc:d4:d1:5a:06:37:7d:5a:e9:0b:3f:be:de:45:02:4d:bf:
         1c:0b:0e:89:bc:18:ed:aa:c3:96:a3:77:be:b1:9b:d8:75:ae:
         1a:9e:14:61:8f:bc:b4:32:f2:44:0d:35:fb:5b:d4:fb:8f:1f:
         c8:a7:50:16:91:0a:95:8c:b5:11:d6:f1:ec:37:ef:8b:45:75:
         76:59:b1:17:33:0a:e6:fc:77:89:c2:36:1a:fd:ef:a9:35:b8:
         73:bf:cc:02:ce:fa:26:74:f3:b6:d5:8c:6c:c5:af:6b:ac:03:
         4e:25:40:05:46:97:f5:d5:89:5c:cd:ed:4a:56:df:e3:ff:bc:
         4e:28:90:8b:86:b8:f4:9d:c4:2e:5a:f0:db:e5:3e:d1:f3:db:
         28:b8:54:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt6WsVpOZobgvdiCRS9yfaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NDdkMDZkMTRiYTRlMjc4MDk3ZjM1YTgwYzcxNTY4NGNh
YzI2NjEwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2ZjMDFhMjMxYzlkMTJkNjE5OTE1MTQwM2YwMWMzZGY4NjIzNzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CglQsvIsyWPyCc9d3j9VYjnC9qy
OkYdCnHcbn4RPr63+OcOshi0Pv1wqSOUv7WjWwMzDeerPtBVqWjmHK93yUPdGMs9
x1FG/lC3Q6ZS3qedNQIjLDJ0FHXbQ5vLWSyHdruGoZCORZNkQAfFURpf/bsv/WpB
gfyPfQsXYTqtAM2AjSeEj5064BSxuJ9vLzZtoU1+nqxSChmRkaAbiZTgOKeQz1HQ
g/2RI+qomwaqbYo69bKU//B8FWqYKHuU3bHmXWZu0QYErG9KR6AFaNqHk3Jb/Etp
MWDciMw3/n1Oy/v8Yf3jn2fpiFDq2BO4xXFeQXg9x2uXzaaXZ+I8Q2ELwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEz8AaIxydEtYZkVFAPwHD34YjdGMB8GA1UdIwQY
MBaAFAdH0G0Uuk4ngJfzWoDHFWhMrCZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjBmUWJSUzZUaWVBbF9OYWdNY1ZhRXlzSm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80Zjk3YjEtMTcyNS00YmRlLThiOWEt
MGQxY2JmY2QzYmMwLzEvVFB3Qm9qSEowUzFobVJVVUFfQWNQZmhpTjBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80Zjk3YjEtMTcyNS00YmRlLThiOWEtMGQxY2JmY2QzYmMw
LzEvQjBmUWJSUzZUaWVBbF9OYWdNY1ZhRXlzSm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHwPRAwQA
U2FNMA0GCSqGSIb3DQEBCwUAA4IBAQAJ6BcTMmtYZvOmahTPm35bkeZEL4GnZR5f
puVuSZghyU+mMRzyDFLb6pfU3FqgdxBRDNe0WDybtUHhJhE2Q9AxoKpbkMbPPqt/
qlr7hAf978DkqPga6tp4tjftVAv7vzsHQWEmWNn3pvXjqDWy/NTRWgY3fVrpCz++
3kUCTb8cCw6JvBjtqsOWo3e+sZvYda4anhRhj7y0MvJEDTX7W9T7jx/Ip1AWkQqV
jLUR1vHsN++LRXV2WbEXMwrm/HeJwjYa/e+pNbhzv8wCzvomdPO21Yxsxa9rrANO
JUAFRpf11Ylcze1KVt/j/7xOKJCLhrj0ncQuWvDb5T7R89souFSo
-----END CERTIFICATE-----
Generated at Tue Feb 10 07:11:11 2026 by rpki-client