This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa
File:                     i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa (raw, json)
Hash identifier:          w8gWgmF42nIarY6Emvf1fz/wNEfrJpHlyRzan9puCwg=
Subject key identifier:   8B:84:DE:EE:23:25:F2:08:5B:A9:AD:B5:63:A1:C3:83:FE:A9:1C:7B
Certificate issuer:       /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial:       019B797E887F61779AB07AAB5ED11CAD8D00
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa
Signing time:             Thu 01 Jan 2026 12:18:14 +0000
ROA not before:           Thu 01 Jan 2026 12:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211855
IP address blocks:        185.105.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:88:7f:61:77:9a:b0:7a:ab:5e:d1:1c:ad:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
        Validity
            Not Before: Jan  1 12:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8b84deee2325f2085ba9adb563a1c383fea91c7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:75:72:01:31:f0:35:48:af:b4:74:b7:75:7c:
                    27:1f:fd:98:b8:4e:47:4e:01:29:16:c5:7d:d0:e3:
                    15:d0:5d:6d:1a:e9:b0:e5:59:82:5b:b5:4e:62:3c:
                    98:8a:01:ec:5d:be:99:bf:ce:a1:a8:ea:62:52:f2:
                    26:41:7a:e0:7f:16:ee:b8:f4:66:f3:44:45:9e:fd:
                    f2:62:48:f6:e5:5b:f2:57:35:3c:04:6c:1c:56:43:
                    eb:90:41:35:15:f5:4b:92:cf:49:48:69:e3:0c:b6:
                    a5:9e:6e:be:ca:54:4e:11:ce:35:15:49:c7:76:51:
                    a7:3f:c5:ef:d2:36:c5:72:f3:2e:99:28:81:da:a8:
                    13:c3:5d:0a:ee:df:a7:d8:69:cc:1d:17:48:d1:51:
                    6a:94:24:46:39:de:38:97:4d:cf:85:ac:c8:e4:95:
                    ee:59:d0:b1:7d:6a:20:a8:a6:28:ec:b5:13:48:36:
                    a8:b9:12:64:a9:08:2c:43:9c:db:f4:6b:41:b7:65:
                    99:34:46:fb:00:b5:44:a0:cb:cb:97:1c:79:65:59:
                    bb:a9:02:0a:9f:33:42:ee:cb:c6:71:e1:88:4c:87:
                    98:9f:5b:df:51:86:63:6e:f0:ff:f4:35:f7:c6:43:
                    51:3d:d1:09:f0:ab:c0:ac:62:8a:a6:43:ae:89:0d:
                    c2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:84:DE:EE:23:25:F2:08:5B:A9:AD:B5:63:A1:C3:83:FE:A9:1C:7B
            X509v3 Authority Key Identifier:
                keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.105.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:39:3e:1b:f3:14:a6:cd:a5:37:00:86:3f:1d:6e:a2:4b:51:
         d0:79:2f:73:f0:86:86:a4:e6:6f:80:da:08:17:2e:a7:5a:87:
         8b:e6:a5:89:75:54:31:c3:72:d8:f9:2c:d5:be:87:ba:05:e7:
         7e:ee:77:3c:88:82:0c:86:1c:7b:bb:9b:6f:24:a4:4f:a8:76:
         16:5a:45:28:cb:0e:0e:7a:db:35:39:a9:da:45:18:94:db:c7:
         1b:1c:3a:aa:38:dc:8e:b0:3d:82:99:5e:61:50:2a:68:a4:0e:
         f7:22:79:e2:06:a4:73:4c:85:b2:ee:e0:4b:9b:57:da:d9:ff:
         82:cd:60:df:80:34:a7:7a:e1:54:82:93:3d:77:36:95:c9:e2:
         c9:28:f0:a9:79:61:09:8e:cb:39:6b:a7:8b:9d:4b:6d:3a:e2:
         97:9d:bc:4d:e6:88:99:81:82:5f:6f:e3:6f:f0:35:21:18:da:
         2f:f1:90:3e:6a:01:40:96:70:18:72:26:59:a2:5e:d5:e7:4c:
         1d:89:74:9e:55:a8:f9:fe:a2:54:d2:06:16:e6:a8:af:db:9a:
         97:e1:d4:67:c5:17:90:13:0b:f7:36:29:aa:12:b4:d1:f2:70:
         c3:c7:3d:27:30:e0:b3:a3:6b:6c:46:48:9a:61:71:5f:c2:08:
         b6:66:d0:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5foh/YXeasHqrXtEcrY0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODc0YTg4N2FhMjg4ZGFiNzJjNjU4ZTkzNjk0ZWQ1ZGFm
ZDIwMjYwHhcNMjYwMTAxMTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yjg0ZGVlZTIzMjVmMjA4NWJhOWFkYjU2M2ExYzM4M2ZlYTkxYzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3VyATHwNUivtHS3dXwnH/2YuE5H
TgEpFsV90OMV0F1tGumw5VmCW7VOYjyYigHsXb6Zv86hqOpiUvImQXrgfxbuuPRm
80RFnv3yYkj25VvyVzU8BGwcVkPrkEE1FfVLks9JSGnjDLalnm6+ylROEc41FUnH
dlGnP8Xv0jbFcvMumSiB2qgTw10K7t+n2GnMHRdI0VFqlCRGOd44l03PhazI5JXu
WdCxfWogqKYo7LUTSDaouRJkqQgsQ5zb9GtBt2WZNEb7ALVEoMvLlxx5ZVm7qQIK
nzNC7svGceGITIeYn1vfUYZjbvD/9DX3xkNRPdEJ8KvArGKKpkOuiQ3C4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIuE3u4jJfIIW6mttWOhw4P+qRx7MB8GA1UdIwQY
MBaAFOGHSoh6oojatyxljpNpTtXa/SAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTct
ZWRhMjNmMmYxN2U5LzEvaTRUZTdpTWw4Z2hicWEyMVk2SERnXzZwSEhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTctZWRhMjNmMmYxN2U5
LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWkLMA0G
CSqGSIb3DQEBCwUAA4IBAQC/OT4b8xSmzaU3AIY/HW6iS1HQeS9z8IaGpOZvgNoI
Fy6nWoeL5qWJdVQxw3LY+SzVvoe6Bed+7nc8iIIMhhx7u5tvJKRPqHYWWkUoyw4O
ets1OanaRRiU28cbHDqqONyOsD2CmV5hUCpopA73InniBqRzTIWy7uBLm1fa2f+C
zWDfgDSneuFUgpM9dzaVyeLJKPCpeWEJjss5a6eLnUttOuKXnbxN5oiZgYJfb+Nv
8DUhGNov8ZA+agFAlnAYciZZol7V50wdiXSeVaj5/qJU0gYW5qiv25qX4dRnxReQ
Ewv3NimqErTR8nDDxz0nMOCzo2tsRkiaYXFfwgi2ZtBr
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:20 2026 by rpki-client