This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/C0RY1BgP7-gM4SA2kF-ZubYjdMQ.roa
File:                     C0RY1BgP7-gM4SA2kF-ZubYjdMQ.roa (raw, json)
Hash identifier:          n8yzv8xHg2NtYJD4BaB2U0HQGcbp6eAIylk5+xYZg2A=
Subject key identifier:   0B:44:58:D4:18:0F:EF:E8:0C:E1:20:36:90:5F:99:B9:B6:23:74:C4
Certificate issuer:       /CN=572bc93f1580fc95274d983940f3efaede304ae5
Certificate serial:       019B77595173175023BDFFABB24BED02AFDA
Authority key identifier: 57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/C0RY1BgP7-gM4SA2kF-ZubYjdMQ.roa
Signing time:             Thu 01 Jan 2026 02:18:20 +0000
ROA not before:           Thu 01 Jan 2026 02:18:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200887
IP address blocks:        185.244.236.0/24 maxlen: 24
                          2a13:1580::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:51:73:17:50:23:bd:ff:ab:b2:4b:ed:02:af:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572bc93f1580fc95274d983940f3efaede304ae5
        Validity
            Not Before: Jan  1 02:18:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0b4458d4180fefe80ce12036905f99b9b62374c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:82:f6:ab:06:8e:60:9e:1c:9a:2b:e6:b3:
                    3a:e2:dd:4e:f4:f9:7d:dc:58:7b:49:5e:3d:20:36:
                    f6:78:49:3f:22:33:d3:7b:ee:22:52:86:8b:11:7c:
                    7b:cd:28:55:15:f3:76:23:d3:a7:78:5e:1b:4d:63:
                    09:55:79:81:08:07:ab:49:62:0b:ec:15:23:14:b6:
                    fa:e9:25:7e:8e:9f:2a:ec:eb:22:a3:cb:64:40:8a:
                    d9:e3:98:75:92:b9:41:85:13:0a:3d:99:4d:ce:c8:
                    24:ff:70:66:d5:2a:ad:2b:b3:6b:2e:92:37:df:a9:
                    1a:6a:09:cd:25:cf:87:81:a3:1b:20:16:6d:8b:d1:
                    84:35:7a:4d:35:39:94:61:e2:40:8f:e1:ae:ff:95:
                    8b:b1:e8:23:8a:c4:bf:01:21:48:9a:c6:8d:02:68:
                    c0:55:f3:35:1b:f6:6e:16:6b:a7:cf:3b:a1:d1:54:
                    d8:3b:50:ae:39:86:21:53:d1:df:08:db:57:64:23:
                    fb:2a:fa:17:0e:8a:64:a4:39:89:f3:93:21:23:1a:
                    0e:a3:4c:cf:d9:68:32:77:89:93:d2:d2:46:99:8e:
                    83:01:0b:24:c9:37:dd:56:b1:b6:15:7c:60:42:19:
                    46:c8:df:81:e9:0e:ae:ef:af:97:4d:b0:13:98:50:
                    cf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:44:58:D4:18:0F:EF:E8:0C:E1:20:36:90:5F:99:B9:B6:23:74:C4
            X509v3 Authority Key Identifier:
                keyid:57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/C0RY1BgP7-gM4SA2kF-ZubYjdMQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.236.0/24
                IPv6:
                  2a13:1580::/29

    Signature Algorithm: sha256WithRSAEncryption
         97:47:4f:09:6f:3e:d9:57:26:69:f2:fb:b0:65:b1:4e:86:16:
         5b:d3:b0:a7:5e:b6:42:f9:af:a3:e5:41:a3:a4:5a:42:42:0f:
         46:c3:7a:e9:0f:b5:49:60:49:be:24:d0:5e:51:c7:31:31:35:
         4a:a5:4a:e5:85:c7:ba:c9:ac:6a:7f:e2:60:40:57:f3:e7:d8:
         0b:0a:ac:ff:4a:88:a4:fa:51:14:be:91:19:b8:15:f4:dd:0e:
         8a:ce:01:ef:4e:8d:cf:b0:a4:b7:a2:c3:d9:d0:c4:56:0e:b0:
         b8:4b:5a:12:e4:3c:c4:0d:c5:50:9e:41:d6:05:a6:a5:41:50:
         ec:45:e6:d3:bd:3b:f5:02:93:92:24:91:16:5e:8e:dd:af:d7:
         39:ff:0d:73:d2:17:73:03:8f:c1:7b:88:b9:34:a6:2c:21:a7:
         f5:cc:69:18:4b:c2:b6:db:6d:81:e3:f7:51:b4:96:68:35:29:
         b4:c9:c2:e9:19:db:93:5b:90:b5:14:de:9e:1a:6a:55:52:f1:
         17:28:ac:f8:74:59:94:b2:04:c7:76:72:ab:6d:48:21:bb:81:
         54:fe:c1:e3:1f:c4:30:76:fe:6b:04:5e:ed:a7:a1:62:a5:d1:
         aa:77:15:ec:9c:6b:8e:cf:70:42:8b:af:67:9b:8a:37:6d:bb:
         19:4f:bd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:40:18 2026 by rpki-client