This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/Ro8iEiW7rbl5__Js738-X47zd7o.roa
File:                     Ro8iEiW7rbl5__Js738-X47zd7o.roa (raw, json)
Hash identifier:          +phYjFZmxaM+pbKEjfOqXvZnYdeDvt8m3Nbx57x5ex4=
Subject key identifier:   46:8F:22:12:25:BB:AD:B9:79:FF:F2:6C:EF:7F:3E:5F:8E:F3:77:BA
Certificate issuer:       /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial:       019B7A5AA0009616FB9DE38AFA16C18BD747
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/Ro8iEiW7rbl5__Js738-X47zd7o.roa
Signing time:             Thu 01 Jan 2026 16:18:38 +0000
ROA not before:           Thu 01 Jan 2026 16:18:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207867
IP address blocks:        45.159.104.0/22 maxlen: 24
                          45.159.104.0/23 maxlen: 23
                          45.159.104.0/24 maxlen: 24
                          45.159.105.0/24 maxlen: 24
                          45.159.106.0/24 maxlen: 24
                          45.159.107.0/24 maxlen: 24
                          188.68.188.0/24 maxlen: 24
                          188.68.191.0/24 maxlen: 24
                          2a0f:7580::/36 maxlen: 36
                          2a0f:7580:1000::/36 maxlen: 36
                          2a0f:7580:2000::/36 maxlen: 36
                          2a0f:7580:4000::/36 maxlen: 36
                          2a0f:7581::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:a0:00:96:16:fb:9d:e3:8a:fa:16:c1:8b:d7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
        Validity
            Not Before: Jan  1 16:18:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=468f221225bbadb979fff26cef7f3e5f8ef377ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:66:67:be:6e:48:a3:40:ae:ae:66:49:a4:23:
                    77:9e:b9:0c:08:33:02:f3:0c:81:aa:5a:c1:dd:ac:
                    2a:e0:81:b5:e2:f9:f2:7b:a0:ca:f3:8b:e1:5a:73:
                    d8:1f:69:e7:98:cd:08:ca:10:b7:91:be:b5:b8:93:
                    12:56:ba:96:14:01:b3:4e:70:91:e3:8f:7f:74:2e:
                    0c:08:b5:1c:5b:ed:54:a4:b9:ea:b0:74:92:2c:e7:
                    62:56:3d:78:a8:1b:2b:7c:f3:41:62:0f:1a:77:db:
                    1d:0f:06:54:6b:4a:8e:fc:9e:ce:d4:79:f4:b6:22:
                    59:43:d0:e9:59:80:3f:e0:8d:ba:e7:92:8f:1c:5f:
                    0e:e7:ce:0b:b0:da:5f:73:29:67:bc:7b:31:f9:8a:
                    16:59:15:26:80:42:7f:87:60:42:dd:c4:90:65:84:
                    d4:3d:67:c6:a8:a0:59:b9:36:86:f2:56:79:23:e0:
                    99:33:54:fd:31:91:1f:8b:31:2a:11:f5:12:35:21:
                    57:d7:55:fc:70:8f:5e:21:d9:4d:11:e1:ee:7e:a1:
                    80:10:f2:e6:1b:c2:32:08:82:62:c3:94:16:8e:74:
                    77:4a:21:34:8d:36:cc:53:24:0a:65:03:7f:f1:b1:
                    de:e2:46:ba:e6:8f:79:18:9e:c8:1a:f5:25:c9:ef:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8F:22:12:25:BB:AD:B9:79:FF:F2:6C:EF:7F:3E:5F:8E:F3:77:BA
            X509v3 Authority Key Identifier:
                keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/Ro8iEiW7rbl5__Js738-X47zd7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.104.0/22
                  188.68.188.0/24
                  188.68.191.0/24
                IPv6:
                  2a0f:7580::-2a0f:7580:2fff:ffff:ffff:ffff:ffff:ffff
                  2a0f:7580:4000::/36
                  2a0f:7581::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:0d:c5:d2:82:96:9a:ca:e2:bc:fe:6b:e0:6a:69:e3:a0:6e:
         b4:db:15:09:c2:32:8e:67:63:15:81:28:ad:88:ed:26:a0:2a:
         74:f4:9d:5b:db:4f:29:6b:5b:77:18:99:91:e0:09:06:45:a1:
         8b:69:6f:b5:64:c5:ab:41:9b:3f:50:7c:6c:8b:d7:94:90:10:
         6e:3b:ae:36:24:64:fa:f5:d2:f4:90:d4:6f:d2:46:c6:49:8c:
         62:08:78:4c:8b:c9:2e:8e:b7:ff:ec:56:f9:fb:d6:d9:d1:ea:
         5c:20:6b:ed:9c:ac:94:86:f8:6d:f6:ff:67:3c:b5:d5:df:b5:
         82:63:e4:7a:5e:99:47:bc:8b:85:7c:b6:e1:ac:59:48:cc:72:
         97:6d:33:17:7c:93:b5:a7:f7:d7:96:e9:d6:09:7d:0f:2f:83:
         cd:43:9e:a9:99:03:18:ab:c7:74:ca:ba:c9:98:1b:bb:d9:94:
         48:76:e5:3a:91:49:51:b5:5d:64:b9:11:11:03:84:9b:30:fc:
         92:77:6f:20:5d:84:fa:f8:bb:c5:5f:4e:b1:1d:f9:01:13:b5:
         0d:fb:ce:7a:35:2b:ec:c5:bc:31:45:e7:cf:43:43:1f:db:aa:
         09:99:e6:44:ba:5b:b0:c0:6c:bc:5d:88:0f:e8:a5:09:22:58:
         0a:17:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:45:12 2026 by rpki-client