This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/TvG3Q6EJi73UFGx8HGDQbEV3WNc.roa
File:                     TvG3Q6EJi73UFGx8HGDQbEV3WNc.roa (raw, json)
Hash identifier:          Qu2IYNlx3K5ylZfshukrlEjDYd3s5hf2xdzeBfabSNs=
Subject key identifier:   4E:F1:B7:43:A1:09:8B:BD:D4:14:6C:7C:1C:60:D0:6C:45:77:58:D7
Certificate issuer:       /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial:       019B7C12545884C2DBB118BE79E1161F4B91
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/TvG3Q6EJi73UFGx8HGDQbEV3WNc.roa
Signing time:             Fri 02 Jan 2026 00:18:54 +0000
ROA not before:           Fri 02 Jan 2026 00:18:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49544
IP address blocks:        212.18.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:54:58:84:c2:db:b1:18:be:79:e1:16:1f:4b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
        Validity
            Not Before: Jan  2 00:18:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4ef1b743a1098bbdd4146c7c1c60d06c457758d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6b:b2:f8:32:bc:cf:cd:3a:bb:3d:5c:c8:83:
                    7b:ab:c0:a8:c1:07:9e:f9:f8:75:b5:24:08:91:a8:
                    0b:6d:af:60:c4:b6:93:7a:7f:da:60:7b:8c:ed:f2:
                    a3:46:7d:df:d7:22:9f:4b:88:5b:94:ea:3f:3c:b0:
                    58:68:67:7f:9b:69:8e:4a:2c:79:18:44:46:2b:1a:
                    8f:c6:c8:79:0c:5a:17:cb:1e:63:b9:97:09:b8:c8:
                    6f:65:37:86:45:ed:1a:34:bb:a2:41:1d:ac:56:dc:
                    4e:66:c3:d8:7d:0a:c4:5c:bb:d7:0a:dc:e1:22:2b:
                    0c:0e:dc:b9:49:49:78:cd:e2:87:3e:cb:aa:8f:01:
                    3c:d8:37:48:84:be:52:c4:2f:d8:b4:91:33:e0:85:
                    08:0b:50:90:b0:d5:ca:cf:2f:61:a1:2a:49:4b:24:
                    19:19:2f:91:21:1e:09:fe:e8:ed:f1:59:f3:99:57:
                    3b:ea:25:40:0b:6b:fc:67:a8:58:c4:e7:42:8d:33:
                    2b:ef:ba:bb:0b:48:c0:c7:05:87:ba:9f:cc:aa:7f:
                    c2:17:fd:e6:39:fc:ce:13:47:cd:51:85:b5:73:e1:
                    48:94:7b:06:fc:f9:0b:2b:be:7e:a8:e2:88:73:8e:
                    2a:5c:05:47:fb:eb:bd:a5:9c:cb:20:d5:aa:7e:30:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F1:B7:43:A1:09:8B:BD:D4:14:6C:7C:1C:60:D0:6C:45:77:58:D7
            X509v3 Authority Key Identifier:
                keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/TvG3Q6EJi73UFGx8HGDQbEV3WNc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:63:78:5b:b6:9f:21:ad:e4:bc:3d:46:f4:b2:88:60:9d:5b:
         af:c0:76:92:09:5f:14:2d:43:b9:a9:2d:65:bb:d0:ef:d0:3c:
         bf:56:40:da:d8:0a:b3:7b:21:ed:4d:42:f4:7f:58:39:8a:12:
         c1:59:85:80:48:86:ff:09:1b:ea:70:9d:d6:63:80:e5:c2:32:
         28:d8:a2:3a:b8:20:f2:f8:24:4e:23:fd:2a:58:c6:84:84:2e:
         3a:6e:b9:54:af:ac:10:e1:77:83:64:4e:eb:bd:1e:aa:45:98:
         4e:35:f7:4c:f0:cf:d4:e4:b1:da:23:02:95:c3:9a:33:3d:ab:
         66:be:31:ae:e6:56:ae:ce:9c:8a:27:18:45:3c:6a:b2:f8:15:
         81:ca:51:08:c9:18:15:62:d2:0d:27:8e:67:25:af:aa:44:0b:
         cb:2b:85:1d:b8:e8:a0:ba:9e:ba:d1:1d:42:fa:6f:08:07:07:
         b6:95:8a:f8:0d:84:40:c7:e9:0c:43:99:9a:9f:f9:7b:b1:c8:
         24:21:90:8c:40:d8:48:cb:5d:cf:2c:8a:07:cf:26:95:45:d3:
         f3:5d:6e:c8:0c:1d:68:26:1e:ad:5d:40:d4:63:c6:ad:54:ae:
         98:6f:37:5e:45:f3:9a:03:f2:9f:6a:0a:e0:57:b0:2a:9e:d7:
         1a:f7:f1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 06:25:49 2026 by rpki-client