This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/MaydDWrUbLvw1QYZAkPLLUQxbi0.roa
File:                     MaydDWrUbLvw1QYZAkPLLUQxbi0.roa (raw, json)
Hash identifier:          wvyXfigpqaIstAVGqzcAWkhhWQ5Hr2D2AHS65eJuN5U=
Subject key identifier:   31:AC:9D:0D:6A:D4:6C:BB:F0:D5:06:19:02:43:CB:2D:44:31:6E:2D
Certificate issuer:       /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Certificate serial:       019B79ECE2E9F461DC0BAE9174602A78FC27
Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/MaydDWrUbLvw1QYZAkPLLUQxbi0.roa
Signing time:             Thu 01 Jan 2026 14:18:46 +0000
ROA not before:           Thu 01 Jan 2026 14:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208909
IP address blocks:        185.190.178.0/24 maxlen: 24
                          185.190.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:e2:e9:f4:61:dc:0b:ae:91:74:60:2a:78:fc:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
        Validity
            Not Before: Jan  1 14:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=31ac9d0d6ad46cbbf0d506190243cb2d44316e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:a1:9a:8a:93:a1:09:f9:e6:d0:31:fc:2a:
                    2a:bd:03:6c:40:e6:a2:53:e9:b9:7a:b5:d3:d4:75:
                    94:d7:b4:5d:b6:4e:44:9f:d1:42:b8:92:ab:fe:25:
                    08:27:96:e7:c5:23:03:60:75:88:c5:61:2f:b7:aa:
                    d0:11:b1:c5:16:33:5d:48:82:60:a4:c1:24:b5:18:
                    b9:aa:da:af:df:ba:fb:9b:65:9f:5d:9e:51:8d:0a:
                    d6:79:4a:d6:9d:fd:2a:1e:19:73:f2:65:36:55:ae:
                    7d:00:14:22:a8:99:ef:cd:7d:91:27:c8:83:df:70:
                    bf:9c:9b:8e:32:f1:34:03:d5:80:ac:cb:1e:56:32:
                    5e:cc:1d:55:7f:ee:7f:9b:4d:13:7a:dd:ee:05:c5:
                    e6:53:62:e3:a8:84:53:9a:fc:a0:d6:e3:c8:20:37:
                    f4:53:7c:39:5d:68:c2:a8:2b:79:46:f1:26:84:dc:
                    ff:77:5d:34:f0:4f:58:67:28:76:5d:3b:fb:3d:33:
                    b3:53:85:0e:22:3f:25:08:d2:e0:18:ce:a0:30:3a:
                    4f:9a:e4:7a:41:c0:f8:07:ce:d3:f2:00:fb:a7:ce:
                    7c:56:ac:90:10:0a:14:58:9e:c2:c0:bf:72:e8:b9:
                    3a:32:4a:5f:e5:58:36:5a:16:7c:c4:e0:29:a0:58:
                    15:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AC:9D:0D:6A:D4:6C:BB:F0:D5:06:19:02:43:CB:2D:44:31:6E:2D
            X509v3 Authority Key Identifier:
                keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/MaydDWrUbLvw1QYZAkPLLUQxbi0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:6c:1c:51:74:7e:d1:fa:d0:a7:88:47:3e:d9:6e:17:47:9a:
         87:dc:c3:63:eb:06:4d:22:2b:e7:50:d9:98:8c:66:5a:d8:72:
         c6:bb:7c:c1:5c:d3:0d:53:09:d0:ea:fd:59:ba:bd:51:ac:bb:
         1d:9e:ce:8f:d3:f3:78:40:02:dc:08:bb:b1:75:80:18:71:20:
         4c:5f:a9:2f:6c:11:65:7b:29:94:a5:c7:5b:11:af:45:49:78:
         33:03:36:17:0e:f2:d4:8f:4a:4f:72:f6:90:f7:39:c8:69:2f:
         c0:b4:4e:41:ef:52:78:cb:b2:28:e9:f3:f2:05:78:69:10:47:
         f2:2f:d4:55:56:38:f9:56:72:af:6d:c6:04:23:46:2d:db:14:
         de:13:63:bd:6d:b8:60:86:cf:d8:d2:de:f8:c8:12:04:18:8d:
         cb:58:ad:de:79:36:f9:d6:b3:4c:02:b9:3e:aa:c3:96:48:72:
         01:cb:c6:83:c8:89:68:4f:fb:b2:de:22:15:30:5c:23:c4:7d:
         81:8b:ad:e8:05:be:5a:94:1d:3a:e3:eb:ef:73:3c:ea:06:c1:
         97:99:f8:8e:ba:57:ae:60:21:e5:d8:22:73:03:71:b8:f1:0b:
         8f:50:01:fe:6a:55:e4:a2:1e:4a:ae:09:15:3d:e3:fe:22:da:
         ff:0a:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:28 2026 by rpki-client