This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/HOuhwbvx6O-5cHDTNhX1sxSZlpI.roa
File:                     HOuhwbvx6O-5cHDTNhX1sxSZlpI.roa (raw, json)
Hash identifier:          zsxEeXJ21gFLuvO6iq49uCDHYRyJWXnnYnaLZSVNYTU=
Subject key identifier:   1C:EB:A1:C1:BB:F1:E8:EF:B9:70:70:D3:36:15:F5:B3:14:99:96:92
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       019B7C80204C4D16A425BD4E3AEFC843D11F
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/HOuhwbvx6O-5cHDTNhX1sxSZlpI.roa
Signing time:             Fri 02 Jan 2026 02:18:49 +0000
ROA not before:           Fri 02 Jan 2026 02:18:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136258
IP address blocks:        92.118.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:20:4c:4d:16:a4:25:bd:4e:3a:ef:c8:43:d1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  2 02:18:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1ceba1c1bbf1e8efb97070d33615f5b314999692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:aa:9f:5e:dc:26:e3:4b:49:6a:60:17:de:05:
                    bb:4a:cb:f4:c3:12:47:62:bc:a5:73:77:63:0f:08:
                    be:ef:ff:cb:01:3e:5e:8a:18:ad:2c:b5:52:48:3b:
                    65:13:37:67:ad:4d:11:d4:20:03:a5:ce:bf:b4:08:
                    fc:e9:bd:c6:0a:65:ca:b8:3e:86:7e:f2:63:b7:75:
                    87:5d:3b:58:07:8a:7a:6b:76:0d:00:85:0c:84:ec:
                    47:64:ac:1d:51:81:ea:d5:87:0a:9c:a1:c1:0c:63:
                    72:36:95:5d:a8:a8:1e:f6:43:ee:08:b8:19:bc:73:
                    76:7b:80:05:c1:ef:f2:87:2f:d7:16:67:48:e2:06:
                    11:ef:33:f0:0c:0c:41:08:fa:0f:8a:e8:2e:0a:09:
                    32:83:40:e7:1c:f7:af:91:d8:84:59:34:7c:36:fd:
                    db:90:80:4d:b8:7c:7a:dc:86:24:f5:8a:5c:50:d2:
                    ee:81:3a:31:b3:8d:39:f5:44:6c:b7:94:73:64:d1:
                    c5:0f:ba:01:da:9f:2b:32:0c:c5:d7:d1:27:e7:7d:
                    06:59:10:6c:d1:c3:84:12:f0:5a:cf:b2:c2:33:9d:
                    bd:16:d8:0c:4f:09:8a:c1:63:f6:ba:91:8d:19:69:
                    6d:b5:97:d9:9c:0d:88:50:fc:53:18:f4:e6:61:fc:
                    f2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EB:A1:C1:BB:F1:E8:EF:B9:70:70:D3:36:15:F5:B3:14:99:96:92
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/HOuhwbvx6O-5cHDTNhX1sxSZlpI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:9e:b9:b1:19:59:34:31:29:8e:89:a1:41:75:49:d5:f3:5a:
         61:71:c8:c0:f2:b5:60:79:2f:8e:0a:3f:b9:f9:da:bc:92:71:
         a6:4d:0e:a1:81:19:75:c8:48:71:9a:04:21:9b:99:b8:8a:5e:
         a1:d3:ee:6c:03:34:2a:ab:1d:fa:64:f1:dd:d8:01:d4:d3:3f:
         69:eb:cc:7c:de:d1:9e:20:10:e1:19:e2:69:ee:e3:a5:96:e0:
         39:93:77:aa:61:5b:e6:a2:5c:ad:30:39:d7:f5:06:48:55:b1:
         55:f8:d4:c0:14:90:b0:9d:4e:7d:07:f5:17:fc:f4:e1:a8:2f:
         6b:4b:7c:e7:ac:8c:9d:f8:c5:8c:3c:41:6f:a6:c3:d2:4b:16:
         ca:a2:cf:3c:35:26:12:5e:1d:1b:68:49:8b:2c:70:55:e4:81:
         06:96:9b:87:48:84:df:f3:d8:60:2c:f4:4a:26:32:78:d4:f4:
         20:99:49:60:ff:c5:d8:a0:52:70:e4:4e:d1:12:b8:6f:b0:e1:
         1a:e5:bc:89:83:ad:12:4a:6a:f9:b2:5c:e1:7c:2e:0c:ca:e4:
         5b:82:1d:14:4b:2d:8f:1e:2b:96:55:e0:ba:9a:bd:e5:84:80:
         b5:88:cb:73:85:68:a0:34:1e:b4:0f:5f:a3:9d:e5:42:2b:6a:
         48:8e:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:48:31 2026 by rpki-client