This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iWdn0SfXIARXAoGavF-tJqA__v8.roa
File:                     iWdn0SfXIARXAoGavF-tJqA__v8.roa (raw, json)
Hash identifier:          L7H4nDBc7qcTPVHc0qlRD2IQzpDawAZ7Ei6t4itV5to=
Subject key identifier:   89:67:67:D1:27:D7:20:04:57:02:81:9A:BC:5F:AD:26:A0:3F:FE:FF
Certificate issuer:       /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial:       019B7F13FD92C95AA139D374AF7C23F872C7
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iWdn0SfXIARXAoGavF-tJqA__v8.roa
Signing time:             Fri 02 Jan 2026 14:19:35 +0000
ROA not before:           Fri 02 Jan 2026 14:19:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60944
IP address blocks:        80.90.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 23:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:13:fd:92:c9:5a:a1:39:d3:74:af:7c:23:f8:72:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
        Validity
            Not Before: Jan  2 14:19:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=896767d127d720045702819abc5fad26a03ffeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d5:d5:ab:fe:bf:f3:75:fd:4f:08:3b:2c:d5:
                    c2:42:3b:51:49:52:0b:52:ab:0c:ee:2b:ef:37:b8:
                    18:7b:fd:fc:76:49:f3:ee:1d:10:60:3d:b4:2d:a2:
                    4b:0f:38:d7:11:1f:3e:2b:1e:f4:e8:32:9b:a1:f2:
                    fb:a6:9c:21:6a:22:b2:13:42:66:de:0b:6a:00:a1:
                    fd:2b:b7:50:3d:9a:ff:d9:2e:26:8b:23:b0:30:82:
                    01:cd:3c:03:7a:31:29:54:20:ed:6a:77:68:25:db:
                    c1:87:eb:d8:57:6d:77:89:53:6e:40:68:76:a7:d7:
                    2b:2a:9b:c7:51:05:81:c2:75:c4:45:c7:2f:40:ad:
                    50:d1:c4:85:e2:8f:e3:49:df:58:9e:d0:06:2b:35:
                    bc:79:b5:65:98:54:ab:98:e3:5d:24:d8:3e:01:a8:
                    3d:af:93:04:a3:1f:36:b9:f5:52:c6:72:78:b2:d0:
                    79:15:bf:3c:a3:37:ab:66:ff:74:54:3b:80:8a:92:
                    79:1f:bf:97:82:85:b3:a6:84:8a:fc:e3:f3:b6:ec:
                    86:c6:df:3c:82:30:a0:ef:b8:17:0b:18:18:91:df:
                    1a:c9:64:d0:2b:89:40:47:48:77:03:a4:99:38:3e:
                    dc:ff:7d:cd:a2:32:4d:50:e0:56:2b:d0:11:02:a1:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:67:67:D1:27:D7:20:04:57:02:81:9A:BC:5F:AD:26:A0:3F:FE:FF
            X509v3 Authority Key Identifier:
                keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iWdn0SfXIARXAoGavF-tJqA__v8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.90.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:c0:58:df:96:f6:70:a8:3b:32:fb:d0:cc:e8:cf:64:3c:07:
         e4:14:c5:93:dd:03:4f:24:4b:cf:3c:1c:78:ab:fe:bf:75:ef:
         7d:c2:c5:8d:cc:cc:ec:f9:6f:5f:ef:58:81:e4:e0:04:00:47:
         26:cd:21:61:1f:2f:d7:46:22:9c:56:e6:2c:34:7d:da:92:ff:
         02:fe:ce:f1:01:20:2f:70:60:03:2f:b0:0e:2f:25:f5:d0:61:
         a2:9a:f1:74:26:58:2b:b0:5d:53:1b:2c:48:ca:2d:80:06:44:
         4b:0c:17:2a:72:49:fe:b3:8b:19:7b:2f:4b:67:fe:1e:5b:d2:
         89:2b:b8:fc:a3:62:4a:a2:a1:da:66:63:f2:d8:03:0f:e0:ea:
         bf:3b:94:65:3d:9b:25:c1:03:bf:14:ca:87:44:ba:55:c2:cd:
         a0:d7:9d:10:b5:36:a4:45:7b:be:e7:24:a7:5d:66:36:d1:32:
         eb:51:10:6e:ab:f9:f9:06:31:52:db:b7:c4:e5:36:13:30:54:
         b0:85:16:ee:6d:9a:fc:2d:fb:f0:79:13:4f:d7:15:39:df:02:
         9f:51:60:9d:c2:cb:12:1e:58:ba:25:8b:3f:48:5d:0e:aa:73:
         12:47:c3:36:42:39:4c:ef:3a:3d:5a:0f:09:d9:94:f2:5f:b9:
         a3:30:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 05:55:58 2026 by rpki-client