This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/p_5KG3Sp9mR-pXEa46SnlH8Aek8.roa
File:                     p_5KG3Sp9mR-pXEa46SnlH8Aek8.roa (raw, json)
Hash identifier:          3dV+rW9N+9OA8iBH1axyHdTqUPpTMbGp4N0HyyUoeQ8=
Subject key identifier:   A7:FE:4A:1B:74:A9:F6:64:7E:A5:71:1A:E3:A4:A7:94:7F:00:7A:4F
Certificate issuer:       /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial:       019B77595BCC336BB494E7541BB7BF59E535
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/p_5KG3Sp9mR-pXEa46SnlH8Aek8.roa
Signing time:             Thu 01 Jan 2026 02:18:23 +0000
ROA not before:           Thu 01 Jan 2026 02:18:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49371
IP address blocks:        185.124.12.0/24 maxlen: 24
                          185.124.13.0/24 maxlen: 24
                          185.124.14.0/24 maxlen: 24
                          185.124.15.0/24 maxlen: 24
                          185.236.28.0/22 maxlen: 22
                          185.236.28.0/24 maxlen: 24
                          185.236.29.0/24 maxlen: 24
                          185.236.30.0/24 maxlen: 24
                          185.236.31.0/24 maxlen: 24
                          2a03:9000::/40 maxlen: 40
                          2a03:9000:100::/40 maxlen: 40
                          2a03:9000:200::/40 maxlen: 40
                          2a03:9000:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:5b:cc:33:6b:b4:94:e7:54:1b:b7:bf:59:e5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
        Validity
            Not Before: Jan  1 02:18:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a7fe4a1b74a9f6647ea5711ae3a4a7947f007a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:26:2c:b5:42:1b:94:77:e6:ef:65:a1:dd:
                    1f:d1:ce:65:25:db:4e:37:c7:9a:c0:9a:1d:75:41:
                    e5:b1:42:37:31:9b:d5:b0:64:b7:e2:bd:32:1f:56:
                    22:b6:66:d7:24:9f:72:a3:da:bb:e5:13:9b:8a:5b:
                    70:94:c9:2b:22:c6:a7:52:bd:b6:f8:51:6e:c6:3d:
                    2d:47:91:7f:4d:f1:84:eb:67:3f:d4:17:29:11:aa:
                    0e:34:dc:cf:20:b7:49:ca:fb:46:b2:e7:e4:96:49:
                    f3:51:e7:87:58:46:11:cb:62:eb:8e:81:c4:f1:15:
                    75:ba:40:f7:a1:49:16:db:56:63:c6:a7:ff:9d:be:
                    cf:06:a1:45:fa:fc:70:c9:82:c5:9c:ef:1b:e4:4a:
                    8b:27:a2:a6:d8:29:a8:a5:1a:2f:8c:5b:14:92:bd:
                    7c:db:23:87:4d:00:99:a5:ae:09:bf:9d:c9:a9:69:
                    d5:ec:8b:24:7e:fd:9b:cd:51:a4:4c:1a:bd:bb:31:
                    fb:0e:63:ae:8a:96:47:11:70:19:2a:8f:1a:18:81:
                    ad:3d:11:c7:48:95:53:94:58:82:96:4a:58:fb:a0:
                    1e:a3:d1:c1:ef:e3:9d:79:6b:a5:e3:4b:c4:0a:fc:
                    af:a7:47:35:cd:d7:f8:83:5e:ff:86:8f:f7:3e:5a:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FE:4A:1B:74:A9:F6:64:7E:A5:71:1A:E3:A4:A7:94:7F:00:7A:4F
            X509v3 Authority Key Identifier:
                keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/p_5KG3Sp9mR-pXEa46SnlH8Aek8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.124.12.0/22
                  185.236.28.0/22
                IPv6:
                  2a03:9000::-2a03:9000:2ff:ffff:ffff:ffff:ffff:ffff
                  2a03:9000:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:98:8e:97:29:d1:d6:a7:91:be:07:8c:82:0d:d6:80:72:f7:
         3c:5d:1b:dd:ef:85:61:be:1e:95:ea:88:13:8b:7e:6d:f9:59:
         1a:ea:3f:d0:77:4d:2c:19:b5:be:6e:8f:d7:69:82:0e:dc:d2:
         c2:ac:23:0b:24:30:2f:97:e3:a1:ba:43:c1:f4:b4:cc:a6:3a:
         d6:8d:43:c8:d3:9d:0a:f9:43:80:de:38:5c:6b:ff:04:41:f8:
         83:e1:25:83:de:d1:01:2f:d5:e6:ff:72:38:06:dc:c5:0f:a0:
         20:70:b1:a1:38:82:d2:9a:ba:56:a4:59:04:8c:b5:a4:2e:56:
         fd:2f:af:5a:e0:ee:b0:a9:8e:90:f1:d4:ff:af:9a:83:b7:b6:
         c5:1e:ed:fc:c7:11:32:bf:e1:68:0e:21:84:0e:cb:38:aa:9f:
         13:7b:16:d9:c1:7a:c4:d4:00:6b:36:c4:5a:3c:37:76:c1:92:
         52:13:9b:4d:1f:21:ad:a1:87:44:c4:22:16:c8:28:9f:b8:7d:
         ec:b7:3d:fa:0d:bc:b1:49:67:ba:f9:6a:29:f3:e2:ee:ef:c7:
         9d:80:e2:e2:7f:a4:02:2d:ed:7c:7b:14:42:c2:63:76:ca:03:
         69:e1:12:bd:0a:7a:59:84:00:2b:cf:e0:ef:ea:8a:14:7e:72:
         f2:2c:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:53 2026 by rpki-client