This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/CoyZCfaOcZY80oMLwGYLGifGG00.roa
File:                     CoyZCfaOcZY80oMLwGYLGifGG00.roa (raw, json)
Hash identifier:          nYHBOEN0r4yuBEIDk5skKHs7ZJbN7Zmh9lRo7Z6eAxY=
Subject key identifier:   0A:8C:99:09:F6:8E:71:96:3C:D2:83:0B:C0:66:0B:1A:27:C6:1B:4D
Certificate issuer:       /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial:       019B93F88E2FD97BA85314493F961D2F593F
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/CoyZCfaOcZY80oMLwGYLGifGG00.roa
Signing time:             Tue 06 Jan 2026 15:41:38 +0000
ROA not before:           Tue 06 Jan 2026 15:41:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     5650
IP address blocks:        185.54.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:93:f8:8e:2f:d9:7b:a8:53:14:49:3f:96:1d:2f:59:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
        Validity
            Not Before: Jan  6 15:41:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0a8c9909f68e71963cd2830bc0660b1a27c61b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:11:44:25:58:0e:36:6e:a1:c7:40:9f:ae:
                    bc:04:1a:66:69:f1:b2:30:c3:14:04:99:f7:0d:59:
                    8d:2c:66:ca:7a:1d:fd:7f:cb:8b:32:0e:2b:5a:d0:
                    8a:12:28:d1:fd:73:c2:1e:08:9a:b7:71:64:79:97:
                    af:48:e1:bb:db:cd:02:db:04:0b:60:40:c4:87:5b:
                    18:be:53:df:9b:47:67:4b:78:74:07:46:3c:88:52:
                    fc:ed:2d:58:d6:81:e5:74:60:d7:66:d3:68:3e:e3:
                    14:8f:97:6e:d1:7e:e0:2c:57:49:7e:bd:70:81:d9:
                    49:30:d8:aa:d3:f6:cf:97:21:42:71:89:01:3d:6d:
                    53:98:5f:7d:1e:54:de:02:ce:ff:99:18:98:43:24:
                    0f:a6:9f:29:e9:37:3f:54:87:99:1e:76:c5:8f:86:
                    95:52:ad:7a:38:bd:95:cb:44:04:95:77:91:ac:a7:
                    e3:86:6d:01:33:8a:9e:5a:68:f1:cb:28:da:93:d3:
                    99:c4:06:87:4a:05:ac:d6:3e:b3:19:fc:84:e0:78:
                    1f:20:db:fe:17:0a:da:72:6a:bc:da:a7:f4:fc:f6:
                    7a:70:00:ac:dc:13:63:40:30:dd:8e:74:1b:bd:5c:
                    09:26:af:fa:85:af:60:b5:bc:3e:a3:6f:56:66:19:
                    30:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8C:99:09:F6:8E:71:96:3C:D2:83:0B:C0:66:0B:1A:27:C6:1B:4D
            X509v3 Authority Key Identifier:
                keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/CoyZCfaOcZY80oMLwGYLGifGG00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.54.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:09:57:c9:ce:39:f2:d3:6f:dc:1d:18:c7:d8:03:8f:dc:f4:
         4c:8a:59:50:76:f3:4d:6f:20:83:bb:1f:20:36:c6:13:33:0f:
         32:f3:42:3d:3a:1b:4c:f7:02:f4:ca:63:5a:4f:44:47:07:df:
         d5:cb:a7:7e:0b:10:38:5c:ad:89:b1:76:7c:5b:07:de:bc:8e:
         f3:da:dc:85:50:f7:9b:23:d1:20:82:c4:4e:5f:69:8e:c9:6c:
         0e:0a:14:59:a8:d9:ca:29:75:4c:bc:cf:a9:aa:78:15:bc:26:
         47:34:fd:11:b4:cb:e5:55:55:e4:f1:e0:d1:59:b5:25:41:4e:
         70:e6:97:2b:fd:e1:de:12:ce:f9:5c:1b:e7:58:34:03:6d:8e:
         a2:32:28:5c:f6:58:ff:bd:36:a6:76:9a:61:ac:c8:6f:d5:ff:
         a9:dc:e8:cf:e6:3c:b2:b2:42:6c:b2:16:36:1e:35:88:f7:42:
         b4:28:a5:e2:3b:51:ef:80:3d:55:fb:f7:0f:5c:ec:c4:d5:ef:
         b5:06:17:d6:32:24:fb:33:c7:b0:52:51:b3:f5:ac:7f:4e:0b:
         87:0b:f0:59:2f:8c:99:09:d4:ce:bb:92:db:6e:b8:ea:ad:04:
         40:09:5d:00:6d:65:9f:f0:f6:42:a0:4b:55:6e:f0:c6:6c:69:
         2c:9e:99:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:13 2026 by rpki-client