This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa
File:                     ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa (raw, json)
Hash identifier:          iGCdrPf4Ppnrs4dgUDy3DlxhNj0AHzaCi9s56mQZshU=
Subject key identifier:   82:16:D2:F5:F4:3D:BA:F0:2C:C6:8B:14:92:B2:FE:09:2E:8E:2E:9C
Certificate issuer:       /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial:       019BBC6909BC29CE1AC2C4259035E2446074
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa
Signing time:             Wed 14 Jan 2026 12:09:18 +0000
ROA not before:           Wed 14 Jan 2026 12:09:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42560
IP address blocks:        5.43.64.0/18 maxlen: 18
                          31.185.112.0/20 maxlen: 20
                          37.205.24.0/21 maxlen: 21
                          37.208.32.0/21 maxlen: 21
                          77.77.192.0/18 maxlen: 24
                          77.77.195.0/24 maxlen: 24
                          77.77.216.0/22 maxlen: 22
                          77.78.192.0/18 maxlen: 18
                          77.78.192.0/19 maxlen: 24
                          77.78.224.0/19 maxlen: 19
                          77.78.224.0/22 maxlen: 22
                          77.221.0.0/19 maxlen: 19
                          77.238.192.0/19 maxlen: 19
                          77.239.0.0/19 maxlen: 19
                          77.239.16.0/22 maxlen: 22
                          80.80.32.0/20 maxlen: 20
                          93.180.96.0/19 maxlen: 19
                          109.237.32.0/20 maxlen: 20
                          128.65.104.0/21 maxlen: 21
                          141.170.192.0/20 maxlen: 20
                          146.255.128.0/19 maxlen: 19
                          178.209.0.0/19 maxlen: 19
                          178.236.80.0/20 maxlen: 20
                          185.6.104.0/22 maxlen: 22
                          185.13.240.0/22 maxlen: 22
                          185.15.64.0/22 maxlen: 22
                          185.18.152.0/22 maxlen: 22
                          185.24.208.0/22 maxlen: 22
                          185.48.172.0/22 maxlen: 22
                          185.58.92.0/22 maxlen: 22
                          188.127.96.0/19 maxlen: 19
                          217.197.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:bc:69:09:bc:29:ce:1a:c2:c4:25:90:35:e2:44:60:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
        Validity
            Not Before: Jan 14 12:09:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8216d2f5f43dbaf02cc68b1492b2fe092e8e2e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d9:77:8c:f7:d9:18:04:bd:07:4f:6e:6c:66:
                    e1:d2:36:e8:01:9d:72:25:67:f4:40:70:84:23:e1:
                    fe:8e:2c:53:9d:41:71:b9:2a:aa:d2:50:7a:c8:e8:
                    54:18:71:b6:24:0e:d1:7e:a4:71:b1:2b:5d:df:eb:
                    83:45:1d:0d:3b:c4:90:74:cb:06:ee:2f:25:9e:3b:
                    b7:9f:8a:38:00:dc:b5:4c:44:03:40:9b:41:e9:7f:
                    72:a7:36:6b:1a:82:07:fe:4e:b6:7f:99:5a:41:90:
                    2b:95:03:47:0e:bd:43:ff:65:d6:97:83:24:9e:9b:
                    bc:19:bb:f5:4d:08:e9:53:1e:cb:9a:d4:fa:64:28:
                    be:69:96:a7:ae:ca:55:21:b7:5f:58:90:06:72:64:
                    f0:4c:f8:29:66:72:dd:90:30:7b:3e:e0:a0:28:1c:
                    74:f3:db:fd:92:e6:94:bd:e7:17:9b:c9:de:c0:d9:
                    11:da:88:b9:17:e8:28:a1:17:a2:7c:55:cc:7c:e2:
                    78:98:1e:b0:e1:c4:1e:e1:1e:fc:02:b5:16:87:d6:
                    5d:e5:c9:93:34:ee:5a:81:72:21:7a:05:0f:b1:87:
                    62:66:cf:63:18:6f:6a:c3:6f:af:10:f6:fb:93:56:
                    ff:73:d8:54:6e:e8:44:17:00:3a:4b:4d:ea:73:c7:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:16:D2:F5:F4:3D:BA:F0:2C:C6:8B:14:92:B2:FE:09:2E:8E:2E:9C
            X509v3 Authority Key Identifier:
                keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/ghbS9fQ9uvAsxosUkrL-CS6OLpw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.43.64.0/18
                  31.185.112.0/20
                  37.205.24.0/21
                  37.208.32.0/21
                  77.77.192.0/18
                  77.78.192.0/18
                  77.221.0.0/19
                  77.238.192.0/19
                  77.239.0.0/19
                  80.80.32.0/20
                  93.180.96.0/19
                  109.237.32.0/20
                  128.65.104.0/21
                  141.170.192.0/20
                  146.255.128.0/19
                  178.209.0.0/19
                  178.236.80.0/20
                  185.6.104.0/22
                  185.13.240.0/22
                  185.15.64.0/22
                  185.18.152.0/22
                  185.24.208.0/22
                  185.48.172.0/22
                  185.58.92.0/22
                  188.127.96.0/19
                  217.197.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:52:7c:0a:29:0f:1d:94:da:15:66:22:ca:52:0c:14:88:14:
         25:21:2e:af:2b:9e:44:f3:09:a0:ff:1c:d7:b9:67:c0:bb:3e:
         f6:8c:f6:76:56:ec:53:b5:bd:dc:a8:d5:31:7d:5d:5c:95:15:
         26:c5:7f:6e:e3:e3:c2:19:7f:44:ea:14:7d:c4:66:bd:1c:32:
         5a:21:83:84:5d:41:86:9d:ea:bb:f2:ea:85:f5:24:69:d6:6d:
         2a:07:9a:00:37:a6:92:0c:3e:87:16:70:57:7f:f1:ca:78:ec:
         e7:53:49:22:fa:d0:00:e2:b6:09:c2:dd:f1:fe:71:1a:7f:67:
         c0:72:f8:41:4f:64:92:f0:c3:11:05:38:b1:de:aa:35:cb:06:
         88:dd:0a:bb:7b:34:95:82:94:53:cc:2d:cb:39:80:5a:ce:14:
         3b:60:a2:11:5a:bf:5d:13:0e:cd:2e:33:73:68:a6:b5:8d:59:
         60:27:3e:e5:48:c4:a2:43:3c:28:8f:46:fd:c1:fc:5f:e6:28:
         1d:6a:38:7d:97:fe:af:9a:19:0c:c2:01:75:39:81:46:4b:ab:
         fe:46:c7:d5:9d:7c:f7:36:4e:d0:e4:e6:dd:a5:f0:dc:44:d5:
         2a:dc:59:c3:e2:05:b7:b9:62:f6:64:32:bd:bc:a9:a6:c6:6f:
         40:ad:6e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:30 2026 by rpki-client