This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/v_8XwCJBQoyP7mhjiRNA_mkQZ-k.roa
File:                     v_8XwCJBQoyP7mhjiRNA_mkQZ-k.roa (raw, json)
Hash identifier:          pMY9nBh6/UwsDxDddCcVlI4vP8imr57XVjh9i41unRk=
Subject key identifier:   BF:FF:17:C0:22:41:42:8C:8F:EE:68:63:89:13:40:FE:69:10:67:E9
Certificate issuer:       /CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
Certificate serial:       019B7BA350D9E7DEF67B57092C1AB222A755
Authority key identifier: 57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/v_8XwCJBQoyP7mhjiRNA_mkQZ-k.roa
Signing time:             Thu 01 Jan 2026 22:17:39 +0000
ROA not before:           Thu 01 Jan 2026 22:17:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200970
IP address blocks:        185.89.160.0/22 maxlen: 22
                          185.89.160.0/24 maxlen: 24
                          185.89.161.0/24 maxlen: 24
                          185.89.162.0/24 maxlen: 24
                          185.89.163.0/24 maxlen: 24
                          185.145.16.0/22 maxlen: 22
                          185.145.16.0/24 maxlen: 24
                          185.145.17.0/24 maxlen: 24
                          185.145.18.0/24 maxlen: 24
                          185.145.19.0/24 maxlen: 24
                          2a05:d9c0::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:50:d9:e7:de:f6:7b:57:09:2c:1a:b2:22:a7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57be8fc79c93504fc21ff70fba469a4cbbe2f029
        Validity
            Not Before: Jan  1 22:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bfff17c02241428c8fee6863891340fe691067e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:20:51:8a:42:5e:12:d7:28:fe:9e:ac:79:
                    c5:1e:6a:bf:dc:c6:64:bb:e7:79:99:fd:0e:9a:5f:
                    5c:5c:78:f3:41:09:9d:1b:f6:48:fc:0e:69:51:ae:
                    30:32:cd:95:2e:e9:99:96:9e:0e:ee:81:e2:3b:73:
                    0c:3f:da:46:eb:99:f7:60:ad:4e:de:b4:fb:85:4f:
                    94:31:92:42:4e:d3:80:84:a5:36:a0:a2:db:f7:4a:
                    5c:b7:2e:e4:e9:a2:c1:41:ac:36:2d:69:5b:c2:27:
                    a8:06:96:9f:29:6e:1a:48:68:84:77:f1:da:9d:9a:
                    df:d7:2d:72:87:ac:36:32:05:06:c7:cc:73:7c:2e:
                    a6:ca:a0:de:e9:06:1d:d8:6e:15:f4:16:94:b0:93:
                    78:39:36:fa:3c:7f:93:f9:95:69:e3:97:61:30:b6:
                    e4:73:3c:73:4d:b5:17:1b:87:17:be:fe:13:97:c5:
                    72:4c:a8:1f:f1:75:f4:bb:3b:ef:d1:78:67:ef:b2:
                    31:2d:63:63:6b:57:8a:9e:8a:8b:8a:15:c7:6e:85:
                    21:98:e2:80:56:68:93:5d:0c:27:65:50:f8:82:b7:
                    1d:e6:52:cc:44:3b:21:46:2c:71:ab:97:4c:ed:71:
                    9a:10:81:db:c8:54:30:f0:4e:01:bb:8a:7e:d6:74:
                    f0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FF:17:C0:22:41:42:8C:8F:EE:68:63:89:13:40:FE:69:10:67:E9
            X509v3 Authority Key Identifier:
                keyid:57:BE:8F:C7:9C:93:50:4F:C2:1F:F7:0F:BA:46:9A:4C:BB:E2:F0:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V76Px5yTUE_CH_cPukaaTLvi8Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/v_8XwCJBQoyP7mhjiRNA_mkQZ-k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/18be97-df3a-4e1d-b561-53c69c1ce50c/1/V76Px5yTUE_CH_cPukaaTLvi8Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.89.160.0/22
                  185.145.16.0/22
                IPv6:
                  2a05:d9c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         34:e6:76:81:7c:ac:c0:e6:5c:fa:87:27:f3:fa:fa:c3:0f:64:
         d2:4b:a3:d1:c3:57:ff:2d:9a:54:18:cb:cd:96:30:38:64:a4:
         78:1a:b8:01:3d:c3:da:f2:10:bc:d6:5d:c0:47:49:c6:66:22:
         d0:f5:28:44:2e:de:3d:98:8a:b5:27:e5:d8:b2:9a:02:c1:81:
         89:42:35:02:50:01:86:97:01:a3:86:27:a9:ab:34:c2:81:de:
         a4:f3:61:07:15:55:71:7e:d3:64:dd:c8:0b:f6:93:8e:c0:41:
         d2:56:14:c7:d6:93:80:36:bc:74:32:b2:b9:2e:fc:a2:fc:6b:
         84:07:82:b0:e0:3f:a6:d3:9e:be:82:40:dc:d8:19:f6:c4:57:
         22:52:73:7c:a6:3b:1c:00:63:f0:cf:15:76:84:3f:fb:76:85:
         03:82:05:de:b6:12:2a:4e:fb:07:8a:b5:98:0c:9e:d2:63:c3:
         c7:d8:68:2a:74:2d:f0:03:80:87:31:50:85:04:bd:ee:2c:9a:
         fa:69:03:03:5f:c3:5a:25:2a:d2:f3:91:b4:a4:60:2f:13:56:
         fb:38:e3:c2:75:58:39:3c:52:4d:18:16:6f:a9:5f:95:38:49:
         b8:69:94:90:16:e2:31:40:ec:08:f5:aa:bf:ef:37:4d:f0:f6:
         2e:f5:c5:ee
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZt7o1DZ5972e1cJLBqyIqdVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YmU4ZmM3OWM5MzUwNGZjMjFmZjcwZmJhNDY5YTRjYmJl
MmYwMjkwHhcNMjYwMTAxMjIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmZmMTdjMDIyNDE0MjhjOGZlZTY4NjM4OTEzNDBmZTY5MTA2N2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVggUYpCXhLXKP6erHnFHmq/3MZk
u+d5mf0Oml9cXHjzQQmdG/ZI/A5pUa4wMs2VLumZlp4O7oHiO3MMP9pG65n3YK1O
3rT7hU+UMZJCTtOAhKU2oKLb90pcty7k6aLBQaw2LWlbwieoBpafKW4aSGiEd/Ha
nZrf1y1yh6w2MgUGx8xzfC6myqDe6QYd2G4V9BaUsJN4OTb6PH+T+ZVp45dhMLbk
czxzTbUXG4cXvv4Tl8VyTKgf8XX0uzvv0Xhn77IxLWNja1eKnoqLihXHboUhmOKA
VmiTXQwnZVD4grcd5lLMRDshRixxq5dM7XGaEIHbyFQw8E4Bu4p+1nTw1wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFL//F8AiQUKMj+5oY4kTQP5pEGfpMB8GA1UdIwQY
MBaAFFe+j8eck1BPwh/3D7pGmky74vApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjc2UHg1eVRVRV9DSF9jUHVrYWFUTHZpOENrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xOGJlOTctZGYzYS00ZTFkLWI1NjEt
NTNjNjljMWNlNTBjLzEvdl84WHdDSkJRb3lQN21oamlSTkFfbWtRWi1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xOGJlOTctZGYzYS00ZTFkLWI1NjEtNTNjNjljMWNlNTBj
LzEvVjc2UHg1eVRVRV9DSF9jUHVrYWFUTHZpOENrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuVmgAwQC
uZEQMA0EAgACMAcDBQMqBdnAMA0GCSqGSIb3DQEBCwUAA4IBAQA05naBfKzA5lz6
hyfz+vrDD2TSS6PRw1f/LZpUGMvNljA4ZKR4GrgBPcPa8hC81l3AR0nGZiLQ9ShE
Lt49mIq1J+XYspoCwYGJQjUCUAGGlwGjhiepqzTCgd6k82EHFVVxftNk3cgL9pOO
wEHSVhTH1pOANrx0MrK5Lvyi/GuEB4Kw4D+m056+gkDc2Bn2xFciUnN8pjscAGPw
zxV2hD/7doUDggXethIqTvsHirWYDJ7SY8PH2GgqdC3wA4CHMVCFBL3uLJr6aQMD
X8NaJSrS85G0pGAvE1b7OOPCdVg5PFJNGBZvqV+VOEm4aZSQFuIxQOwI9aq/7zdN
8PYu9cXu
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:43:06 2026 by rpki-client