This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/8Gbdi7IUMhZxUxQuZhGJDiVa0LQ.roa
File:                     8Gbdi7IUMhZxUxQuZhGJDiVa0LQ.roa (raw, json)
Hash identifier:          /DvGyvGrOeXCAY+suzbyYJaZlIPzhL5zJA/RiuGPNH0=
Subject key identifier:   F0:66:DD:8B:B2:14:32:16:71:53:14:2E:66:11:89:0E:25:5A:D0:B4
Certificate issuer:       /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial:       019B78A3404F341BC1363DCB2D8ADF8BC728
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/8Gbdi7IUMhZxUxQuZhGJDiVa0LQ.roa
Signing time:             Thu 01 Jan 2026 08:18:43 +0000
ROA not before:           Thu 01 Jan 2026 08:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199447
IP address blocks:        185.12.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:40:4f:34:1b:c1:36:3d:cb:2d:8a:df:8b:c7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
        Validity
            Not Before: Jan  1 08:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f066dd8bb21432167153142e6611890e255ad0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:49:92:e2:89:0b:93:77:d7:8d:cc:3b:e1:e7:
                    ff:fc:54:0a:83:bc:81:4d:0f:e2:3a:1e:49:82:48:
                    6a:cf:63:ae:bc:46:c1:49:9f:97:e1:61:9f:53:0a:
                    51:a4:fe:5c:b1:12:e2:37:f2:7f:34:a7:dd:aa:69:
                    56:3e:44:7e:05:76:1b:c1:82:01:95:3f:f4:32:1f:
                    00:a6:3b:af:e1:66:f1:db:30:38:d7:8b:c1:3a:c6:
                    d5:20:98:ba:1a:0a:14:f9:27:0d:09:fb:29:17:9e:
                    b2:0e:b1:97:d9:b4:8c:54:2b:a7:c9:c0:76:4d:d6:
                    db:9d:c5:d2:a8:f1:20:c3:7b:12:5d:d1:12:3c:84:
                    94:fe:74:96:ca:d4:1b:b4:9c:a4:28:67:fc:bb:ed:
                    18:81:c6:b9:76:56:22:ef:51:6f:6b:56:c1:f4:10:
                    86:42:c6:bb:da:81:19:a9:45:db:a3:1d:aa:bf:4d:
                    89:13:ce:78:2e:16:cf:d6:dd:ca:8f:4d:7c:b3:dd:
                    dd:71:e3:1a:9d:83:b0:ff:8d:69:1d:39:86:08:63:
                    41:e3:4a:81:ac:25:8a:64:6b:01:ac:f1:05:a3:07:
                    fa:42:2d:a9:03:89:68:f3:03:6a:3a:8c:4a:df:ea:
                    40:85:ce:cb:23:d6:ce:68:b3:b5:9c:86:f0:30:1c:
                    26:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:66:DD:8B:B2:14:32:16:71:53:14:2E:66:11:89:0E:25:5A:D0:B4
            X509v3 Authority Key Identifier:
                keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/8Gbdi7IUMhZxUxQuZhGJDiVa0LQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.12.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:0a:e4:4b:38:5e:de:33:f0:ef:d9:e3:78:43:4c:ab:81:d8:
         44:52:f9:63:08:ee:9b:fe:4b:3d:d7:ee:f7:8c:9a:60:af:94:
         19:32:2a:cf:7c:24:5c:ee:95:e4:70:5a:e3:75:12:94:2f:3e:
         f6:c7:65:18:02:a5:a0:3c:6d:a2:88:1d:f5:c7:19:7e:d2:80:
         2c:a8:da:ed:38:25:a5:3d:a8:44:e7:d4:6a:16:0d:78:f4:4b:
         c3:0f:3c:45:22:f3:82:f6:14:a6:87:d8:eb:99:c4:36:41:e3:
         2a:f8:e2:60:52:9e:62:70:2f:27:18:25:fa:73:6e:9b:d3:1f:
         1f:7d:58:bc:db:5e:a2:8a:ec:e2:8c:24:7d:56:c3:1f:c0:f4:
         56:e8:2b:3a:0b:b1:69:9c:5a:90:57:f4:b7:be:8e:25:ac:2d:
         af:a2:8d:b8:df:da:eb:b7:f5:20:c0:0a:1a:cf:d3:a7:dc:be:
         6a:c3:11:a8:78:36:b3:f6:90:6b:4a:50:c3:0d:99:98:92:5a:
         91:7a:7c:13:4a:4a:fe:6a:d6:bc:83:66:ad:11:98:94:08:c7:
         7f:bb:7c:60:2b:36:40:05:e0:14:a6:fa:ea:84:8f:f6:aa:58:
         42:5c:f1:d1:4b:96:50:cc:b8:19:6f:7f:96:e2:71:5e:4a:56:
         6a:54:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:15 2026 by rpki-client