This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa
File:                     ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa (raw, json)
Hash identifier:          Z0tlGeHI28w/uWa6BzOx7bS4D0r8kubbhdFc5SfUT7M=
Subject key identifier:   00:36:FE:F1:C1:50:F8:DA:81:88:D8:C1:FB:D5:51:74:45:F1:5C:6A
Certificate issuer:       /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial:       019B797E531815F5526CA35B2B3715DB4EE2
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa
Signing time:             Thu 01 Jan 2026 12:18:00 +0000
ROA not before:           Thu 01 Jan 2026 12:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35635
IP address blocks:        80.243.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:53:18:15:f5:52:6c:a3:5b:2b:37:15:db:4e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
        Validity
            Not Before: Jan  1 12:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0036fef1c150f8da8188d8c1fbd5517445f15c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:0a:c1:08:4a:47:e0:b8:76:bc:ad:a8:8e:
                    63:83:49:d0:25:1c:01:de:4f:5c:99:0f:da:af:54:
                    01:35:a1:90:ee:08:ac:59:eb:a0:eb:a9:f6:f1:57:
                    ce:21:84:a6:0f:55:5c:79:23:66:32:33:88:92:95:
                    5b:e3:63:b4:ab:44:3c:f9:df:07:38:42:8a:41:75:
                    e6:79:64:b2:10:06:e8:68:7a:17:be:54:83:69:9e:
                    1a:ac:6c:a6:8b:75:fb:33:d2:05:fa:69:ef:b6:c7:
                    62:32:33:0a:93:45:22:94:7d:65:6c:4b:94:60:9b:
                    d4:99:2d:4e:d6:9e:5c:c2:04:5c:c8:8e:0a:1c:9a:
                    0d:72:bd:ab:6a:ac:fa:6c:f4:c9:92:26:17:b3:e1:
                    67:bf:36:28:db:10:14:0f:d0:fd:fa:dd:64:d5:21:
                    81:49:70:67:33:98:5f:e0:14:6f:18:bd:bf:e7:c6:
                    07:1e:3f:40:f6:da:65:6c:ff:b7:6c:4b:8d:f7:ed:
                    e1:03:85:05:6f:42:b1:a5:d7:69:ca:16:0d:df:e3:
                    9a:c4:e3:8a:2b:f6:d5:57:15:6d:47:49:16:72:34:
                    46:7a:a5:8e:19:8f:5e:ba:69:34:e7:a4:b9:dd:c3:
                    5b:d9:2f:25:33:8c:75:e1:50:ed:31:bc:f5:9f:6c:
                    71:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:36:FE:F1:C1:50:F8:DA:81:88:D8:C1:FB:D5:51:74:45:F1:5C:6A
            X509v3 Authority Key Identifier:
                keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/ADb-8cFQ-NqBiNjB-9VRdEXxXGo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.243.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d5:ff:03:12:e1:1c:d9:92:78:8b:41:ff:f4:77:9f:8c:d1:82:
         85:b6:18:85:38:cd:48:4e:82:4d:37:4c:65:3b:ad:33:ea:fc:
         91:bd:37:bf:6a:f5:7f:4e:b9:14:87:a9:16:bd:ae:99:62:cf:
         4d:68:5b:f1:76:72:cc:49:14:21:17:3d:62:b4:ac:ff:7c:89:
         1b:2e:08:4d:15:08:c4:94:8a:9a:85:05:82:57:75:4a:f5:32:
         1f:16:48:cc:83:da:dd:a1:ef:fd:d6:c4:0a:c6:59:f8:6b:2d:
         29:dd:d0:81:88:26:3b:5e:0a:68:0f:15:d6:1f:9c:eb:cc:08:
         53:50:c0:bd:07:06:ad:49:68:60:72:22:59:e6:15:df:73:d7:
         49:d7:b5:b4:4a:50:df:bf:1f:cd:2f:e1:73:42:da:0a:80:8e:
         e7:cb:fe:29:90:12:30:d6:f4:0d:eb:80:65:92:f4:8f:87:bc:
         07:b9:fc:31:20:6f:30:78:5f:7b:ae:c5:86:99:99:fc:18:28:
         5d:12:69:d5:38:07:7e:54:c7:9b:fc:b1:7b:30:59:6c:7d:d2:
         5c:d0:f1:e9:27:73:7b:ac:cb:2f:d6:cc:7b:ee:d0:0a:52:48:
         34:be:1d:a6:ee:0e:89:46:74:7a:59:5f:03:48:22:5c:27:cd:
         a4:b7:59:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5flMYFfVSbKNbKzcV207iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2Y1ZWI4ODE3ZjJkYTk3ZjY2NTUwNzY4M2I1YzQ1YTc0
ZDBjYTAwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDM2ZmVmMWMxNTBmOGRhODE4OGQ4YzFmYmQ1NTE3NDQ1ZjE1YzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB0KwQhKR+C4drytqI5jg0nQJRwB
3k9cmQ/ar1QBNaGQ7gisWeug66n28VfOIYSmD1VceSNmMjOIkpVb42O0q0Q8+d8H
OEKKQXXmeWSyEAboaHoXvlSDaZ4arGymi3X7M9IF+mnvtsdiMjMKk0UilH1lbEuU
YJvUmS1O1p5cwgRcyI4KHJoNcr2raqz6bPTJkiYXs+FnvzYo2xAUD9D9+t1k1SGB
SXBnM5hf4BRvGL2/58YHHj9A9tplbP+3bEuN9+3hA4UFb0KxpddpyhYN3+OaxOOK
K/bVVxVtR0kWcjRGeqWOGY9eumk056S53cNb2S8lM4x14VDtMbz1n2xx8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAA2/vHBUPjagYjYwfvVUXRF8VxqMB8GA1UdIwQY
MBaAFN9/XriBfy2pf2ZVB2g7XEWnTQygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC84NTdkOWMtNTk2ZS00Yjg5LTlmMWMt
ZjkyMTI4YmU4Yjc5LzEvQURiLThjRlEtTnFCaU5qQi05VlJkRVh4WEdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC84NTdkOWMtNTk2ZS00Yjg5LTlmMWMtZjkyMTI4YmU4Yjc5
LzEvMzM5ZXVJRl9MYWxfWmxVSGFEdGNSYWROREtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEUPPQMA0G
CSqGSIb3DQEBCwUAA4IBAQDV/wMS4RzZkniLQf/0d5+M0YKFthiFOM1IToJNN0xl
O60z6vyRvTe/avV/TrkUh6kWva6ZYs9NaFvxdnLMSRQhFz1itKz/fIkbLghNFQjE
lIqahQWCV3VK9TIfFkjMg9rdoe/91sQKxln4ay0p3dCBiCY7XgpoDxXWH5zrzAhT
UMC9BwatSWhgciJZ5hXfc9dJ17W0SlDfvx/NL+FzQtoKgI7ny/4pkBIw1vQN64Bl
kvSPh7wHufwxIG8weF97rsWGmZn8GChdEmnVOAd+VMeb/LF7MFlsfdJc0PHpJ3N7
rMsv1sx77tAKUkg0vh2m7g6JRnR6WV8DSCJcJ82kt1m7
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:20:28 2026 by rpki-client