This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/myL47iydC8eKGLu8PQ2TD5S3cnE.roa
File:                     myL47iydC8eKGLu8PQ2TD5S3cnE.roa (raw, json)
Hash identifier:          l0U46siz8BLtzrVkMhNRaqElDbC1K1LmUtKA9hKwXgg=
Subject key identifier:   9B:22:F8:EE:2C:9D:0B:C7:8A:18:BB:BC:3D:0D:93:0F:94:B7:72:71
Certificate issuer:       /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial:       019B7758A018815CBF5E5F8ACABDD39F32F1
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/myL47iydC8eKGLu8PQ2TD5S3cnE.roa
Signing time:             Thu 01 Jan 2026 02:17:35 +0000
ROA not before:           Thu 01 Jan 2026 02:17:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8422
IP address blocks:        194.55.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:a0:18:81:5c:bf:5e:5f:8a:ca:bd:d3:9f:32:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
        Validity
            Not Before: Jan  1 02:17:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9b22f8ee2c9d0bc78a18bbbc3d0d930f94b77271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:bf:5f:f0:5e:18:6d:95:e6:36:6c:2a:17:
                    a3:ca:7f:37:cf:55:4a:37:6e:76:25:e9:26:67:58:
                    11:87:79:36:10:0c:d8:14:7d:77:f4:dd:08:31:86:
                    8e:ba:8e:62:0c:88:30:b1:3e:4d:bd:a1:b1:7d:b8:
                    f3:ba:3b:ad:2f:f9:a6:af:8b:eb:35:11:47:13:59:
                    df:31:78:90:50:4a:ba:70:ef:35:bb:c2:ed:06:11:
                    85:7d:59:d2:66:22:46:ae:0e:9a:2c:c6:e9:b3:ff:
                    06:5e:2a:5d:86:fb:3d:92:37:d0:e9:68:cc:1a:6a:
                    9a:75:2c:6d:06:10:12:c0:1d:b7:c8:b2:dd:0d:cd:
                    ed:d1:93:c8:0a:c7:73:90:65:5a:97:ab:fc:77:6d:
                    53:9e:23:78:89:bd:bf:24:d0:f0:8c:41:92:c6:d1:
                    fc:78:1b:df:bf:53:93:40:ea:5d:55:a7:ef:90:13:
                    33:f6:e2:ba:3c:7d:9b:58:01:0c:6c:c0:8b:8d:e0:
                    03:e3:9f:22:bb:f7:59:87:03:00:f6:11:f9:24:4f:
                    9c:1c:1e:3a:1c:85:ac:51:54:8e:ce:36:87:cf:30:
                    f5:49:ec:bb:73:c1:67:8d:ae:69:56:5f:4e:7e:c8:
                    d6:81:3e:73:6e:02:da:17:5b:2a:15:10:6a:8a:d7:
                    3a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:22:F8:EE:2C:9D:0B:C7:8A:18:BB:BC:3D:0D:93:0F:94:B7:72:71
            X509v3 Authority Key Identifier:
                keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/myL47iydC8eKGLu8PQ2TD5S3cnE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.55.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:24:bd:c8:a2:a1:5e:37:e8:28:33:2a:14:92:12:b4:8d:42:
         0b:a4:c0:92:44:ee:ff:cf:30:de:62:21:ff:07:3d:d0:5f:07:
         44:da:bf:2d:f3:a8:70:40:45:23:0c:f3:d8:e8:c1:c6:94:da:
         74:c0:6e:b9:29:ba:77:22:5d:a0:48:4b:af:20:c7:63:3d:70:
         2c:26:98:40:75:51:32:88:17:f2:ee:a2:96:0b:7b:b3:d1:46:
         2f:ad:a7:2e:21:3c:90:9d:d3:a9:57:1c:1d:84:f9:21:4d:28:
         e6:39:90:93:10:df:a7:42:77:5d:5f:9e:07:c1:cb:1c:ab:15:
         ae:91:48:9e:ce:9e:fc:cb:34:e5:11:14:3b:a0:ee:fb:a0:20:
         57:4b:aa:98:66:5c:17:fe:c1:4a:e8:cf:74:f3:aa:56:af:1d:
         3b:c9:7d:c3:cd:4f:ca:f7:d5:3c:c8:fa:7f:5a:f0:c1:d2:0f:
         d2:72:0d:7c:06:5d:c0:fe:eb:71:13:7b:61:8d:99:a8:83:44:
         e9:c5:30:d0:ab:81:70:56:a1:2d:33:9d:d8:9c:91:d1:c5:b2:
         0d:bf:36:67:6d:8d:93:8d:75:14:5a:6c:55:6c:51:b7:0d:69:
         bc:6a:c1:0d:14:da:a7:bf:de:2e:6a:d0:1d:cd:fc:32:7b:43:
         87:f9:f7:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WKAYgVy/Xl+Kyr3TnzLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDY0YzhjMTY3ZGQyYzg3YWEzZDg4YWNiZmFlNGMyMzNm
Zjc3YjAwHhcNMjYwMTAxMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjIyZjhlZTJjOWQwYmM3OGExOGJiYmMzZDBkOTMwZjk0Yjc3MjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqu/X/BeGG2V5jZsKhejyn83z1VK
N252JekmZ1gRh3k2EAzYFH139N0IMYaOuo5iDIgwsT5NvaGxfbjzujutL/mmr4vr
NRFHE1nfMXiQUEq6cO81u8LtBhGFfVnSZiJGrg6aLMbps/8GXipdhvs9kjfQ6WjM
GmqadSxtBhASwB23yLLdDc3t0ZPICsdzkGVal6v8d21TniN4ib2/JNDwjEGSxtH8
eBvfv1OTQOpdVafvkBMz9uK6PH2bWAEMbMCLjeAD458iu/dZhwMA9hH5JE+cHB46
HIWsUVSOzjaHzzD1Sey7c8Fnja5pVl9OfsjWgT5zbgLaF1sqFRBqitc6PwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJsi+O4snQvHihi7vD0Nkw+Ut3JxMB8GA1UdIwQY
MBaAFOhGTIwWfdLIeqPYisv65MIz/3ewMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVaTWpCWjkwc2g2bzlpS3lfcmt3alBfZDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jY2E2YzQtZWM3MC00NDA1LWE2YTgt
NmVhYTU5YjBkNzUwLzEvbXlMNDdpeWRDOGVLR0x1OFBRMlRENVMzY25FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jY2E2YzQtZWM3MC00NDA1LWE2YTgtNmVhYTU5YjBkNzUw
LzEvNkVaTWpCWjkwc2g2bzlpS3lfcmt3alBfZDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjceMA0G
CSqGSIb3DQEBCwUAA4IBAQCTJL3IoqFeN+goMyoUkhK0jUILpMCSRO7/zzDeYiH/
Bz3QXwdE2r8t86hwQEUjDPPY6MHGlNp0wG65Kbp3Il2gSEuvIMdjPXAsJphAdVEy
iBfy7qKWC3uz0UYvracuITyQndOpVxwdhPkhTSjmOZCTEN+nQnddX54HwcscqxWu
kUiezp78yzTlERQ7oO77oCBXS6qYZlwX/sFK6M9086pWrx07yX3DzU/K99U8yPp/
WvDB0g/Scg18Bl3A/utxE3thjZmog0TpxTDQq4FwVqEtM53YnJHRxbINvzZnbY2T
jXUUWmxVbFG3DWm8asENFNqnv94uatAdzfwye0OH+fdV
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:10:24 2026 by rpki-client