This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/I8Y7k4PBkzGM3uGR_Gc3m5roLv8.roa
File:                     I8Y7k4PBkzGM3uGR_Gc3m5roLv8.roa (raw, json)
Hash identifier:          Z+HeN443sRDuiL/lJ2AnO37Q1Ethfs5BRmHnOhLCr4w=
Subject key identifier:   23:C6:3B:93:83:C1:93:31:8C:DE:E1:91:FC:67:37:9B:9A:E8:2E:FF
Certificate issuer:       /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial:       019C2ED8E731808827AB62B45C5A06FF6FD2
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/I8Y7k4PBkzGM3uGR_Gc3m5roLv8.roa
Signing time:             Thu 05 Feb 2026 17:28:12 +0000
ROA not before:           Thu 05 Feb 2026 17:28:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200083
IP address blocks:        62.182.16.0/21 maxlen: 21
                          62.182.16.0/23 maxlen: 23
                          185.41.8.0/22 maxlen: 22
                          2a04:84c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2e:d8:e7:31:80:88:27:ab:62:b4:5c:5a:06:ff:6f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
        Validity
            Not Before: Feb  5 17:28:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=23c63b9383c193318cdee191fc67379b9ae82eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:48:27:f5:aa:7e:53:8d:47:5e:c1:6d:29:
                    6f:66:b6:3f:69:5d:10:93:73:ed:95:4c:36:a0:d2:
                    3e:13:36:88:de:32:20:b9:65:03:a0:63:72:73:a0:
                    c4:2b:b7:1a:79:91:f7:b1:d8:2b:1e:db:df:76:53:
                    3b:d8:1e:0c:6c:1d:96:5e:dd:9a:42:0b:a4:09:db:
                    86:19:01:ae:ca:53:fd:07:2b:5a:3b:83:77:b5:27:
                    9a:05:19:34:2a:4c:4c:1a:2b:45:8d:2a:22:8a:67:
                    12:cc:79:06:d8:55:d9:46:e0:38:01:92:89:4a:d7:
                    9b:a3:fe:e6:3d:8f:6c:79:2b:ef:e5:9c:b5:06:b3:
                    2c:21:77:b7:d8:da:53:d7:4d:9d:32:54:69:80:75:
                    e3:94:1d:f2:b3:93:bc:35:1b:d1:a1:40:02:8d:8d:
                    c5:c3:1a:39:82:99:f2:a0:58:d4:30:ac:7c:cd:1c:
                    5b:bd:fe:4e:df:ef:50:a5:a2:b0:3a:5f:3b:a2:40:
                    3c:65:01:29:38:4a:b3:02:75:28:ad:95:d4:73:be:
                    1d:a5:0d:46:fe:ef:f0:84:8c:42:b8:3a:2e:da:a4:
                    1f:30:a7:c8:5a:4a:15:2b:1c:ae:41:35:d4:9c:57:
                    60:57:15:35:1c:ae:a6:05:b3:09:6d:e0:02:de:62:
                    c7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C6:3B:93:83:C1:93:31:8C:DE:E1:91:FC:67:37:9B:9A:E8:2E:FF
            X509v3 Authority Key Identifier:
                keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/I8Y7k4PBkzGM3uGR_Gc3m5roLv8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.182.16.0/21
                  185.41.8.0/22
                IPv6:
                  2a04:84c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:f5:4a:d7:ef:73:ba:58:c7:5b:e4:94:b9:bb:51:b2:58:1f:
         e1:0c:f0:fe:66:5d:3d:c3:d3:31:17:4d:13:c1:35:3a:a8:c6:
         9d:ce:96:55:6e:14:82:a2:f3:a8:6b:92:d5:d4:69:46:e5:a4:
         42:dc:dd:94:1c:f4:f0:15:e5:5c:58:43:fc:32:5a:76:06:ef:
         05:5e:0e:bf:cc:52:07:6b:20:f7:e9:eb:f8:a1:1c:b3:65:ac:
         21:9e:0b:c8:6d:b4:61:92:ac:d4:f1:18:e4:c1:34:b9:f4:ed:
         11:2b:e9:f1:9d:e0:51:3b:ac:d4:7c:d9:6d:6b:53:ea:44:a9:
         c5:a3:8c:92:38:12:43:53:b3:99:19:17:b2:3e:be:1a:a5:cb:
         a7:1c:0c:0e:02:83:93:21:ea:3e:9a:f8:bd:f6:58:16:4b:dc:
         d7:94:8f:23:51:7a:f2:a8:92:5a:1c:bf:59:5c:09:72:f3:c3:
         d0:96:e6:27:e8:01:f9:f7:a9:cb:4d:04:e7:b7:44:db:20:25:
         b5:ae:a9:0d:fa:6b:00:cc:8c:cb:5b:29:fc:b6:6b:ad:56:5e:
         51:da:05:30:f9:db:6b:05:42:06:4b:8b:05:f2:de:0f:2a:2e:
         83:d1:56:32:01:1d:d2:c8:9d:8a:41:8b:81:62:7c:2e:f9:1b:
         9b:d7:2d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:23:16 2026 by rpki-client