This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/sncS8S2NsUSvaykCM37LNBlWYeU.roa
File:                     sncS8S2NsUSvaykCM37LNBlWYeU.roa (raw, json)
Hash identifier:          qh0is7RUGO8WSotkmc+90Ufb2ZAu2P4HHEPVCF4ovi4=
Subject key identifier:   B2:77:12:F1:2D:8D:B1:44:AF:6B:29:02:33:7E:CB:34:19:56:61:E5
Certificate issuer:       /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial:       019B7F16037B8317D48266409D44F6060326
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/sncS8S2NsUSvaykCM37LNBlWYeU.roa
Signing time:             Fri 02 Jan 2026 14:21:47 +0000
ROA not before:           Fri 02 Jan 2026 14:21:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     34305
IP address blocks:        85.12.26.0/24 maxlen: 24
                          85.12.27.0/24 maxlen: 24
                          85.12.28.0/22 maxlen: 24
                          85.12.32.0/20 maxlen: 20
                          85.12.48.0/21 maxlen: 21
                          85.12.58.0/23 maxlen: 24
                          85.12.60.0/22 maxlen: 22
                          91.148.208.0/20 maxlen: 20
                          185.91.28.0/24 maxlen: 24
                          193.138.220.0/24 maxlen: 24
                          195.200.84.0/24 maxlen: 24
                          195.200.85.0/24 maxlen: 24
                          2a01:788::/32 maxlen: 48
                          2a01:788:4::/48 maxlen: 48
                          2a01:788:1000::/48 maxlen: 48
                          2a01:788:aaaa::/48 maxlen: 48
                          2a01:788:aaab::/48 maxlen: 48
                          2a01:788:aaac::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 14:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:16:03:7b:83:17:d4:82:66:40:9d:44:f6:06:03:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
        Validity
            Not Before: Jan  2 14:21:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b27712f12d8db144af6b2902337ecb34195661e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4a:5f:30:1d:6b:ed:07:d5:b3:72:37:7c:96:
                    6b:fa:07:c5:ea:81:4e:aa:dc:a8:2d:3a:7e:69:b8:
                    4a:b5:dc:ad:87:a5:7b:48:dd:14:b8:50:56:71:a5:
                    cd:c4:06:c1:9e:f7:d9:11:e8:cc:54:e8:21:08:57:
                    a2:ee:dd:5e:8b:27:e4:f9:2b:5a:f4:27:60:52:05:
                    6f:3b:9e:e8:d7:f6:f0:38:f7:ee:bd:a5:5d:fd:05:
                    05:9c:46:f0:a5:83:5d:71:2f:fd:78:20:35:18:49:
                    74:23:9f:4e:f1:bf:62:ca:a9:93:36:9f:ec:14:fb:
                    18:7b:18:dd:24:59:5a:3e:60:e5:a3:e2:20:06:73:
                    6a:e8:ab:a2:a9:71:06:96:4d:31:34:4a:cd:23:ab:
                    a7:45:d2:2f:40:84:c6:36:fa:e8:75:cc:a2:a3:52:
                    b1:6a:09:97:51:c5:7c:ff:a0:cc:4e:cb:8d:64:e3:
                    c6:e6:b7:96:77:a1:63:a9:00:98:25:e3:42:0b:ee:
                    c6:54:b4:98:92:a2:6d:49:ae:ae:28:50:3f:a0:b7:
                    a2:b8:56:0a:4e:52:16:37:1e:c5:f5:43:40:e6:9f:
                    23:70:33:40:c9:12:71:cb:17:b1:a8:ed:d9:13:4a:
                    ca:61:55:d6:d1:56:81:77:df:a0:06:12:65:1c:80:
                    54:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:77:12:F1:2D:8D:B1:44:AF:6B:29:02:33:7E:CB:34:19:56:61:E5
            X509v3 Authority Key Identifier:
                keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/sncS8S2NsUSvaykCM37LNBlWYeU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.12.26.0-85.12.55.255
                  85.12.58.0-85.12.63.255
                  91.148.208.0/20
                  185.91.28.0/24
                  193.138.220.0/24
                  195.200.84.0/23
                IPv6:
                  2a01:788::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:6f:d1:7c:68:f2:4d:5e:3f:7b:64:cb:67:63:c0:2e:39:c4:
         35:57:41:67:e1:d5:5c:df:86:fe:c8:7d:c9:64:14:fa:96:53:
         aa:8e:87:5b:57:0e:5e:55:71:3d:5d:0e:b0:05:7f:32:e2:4b:
         0b:da:aa:93:d6:a6:ec:8b:9b:9b:3b:99:65:5e:69:f0:c2:f8:
         ed:74:86:64:dc:4d:a4:ad:24:02:58:b6:f3:47:2e:5f:df:08:
         38:f1:22:17:3c:02:ff:62:b8:bd:3d:b9:f4:a9:b6:7c:ab:86:
         b9:63:83:2c:8c:0b:1f:e6:90:49:c4:5e:28:b7:37:ff:05:b9:
         fb:1f:ac:b8:dd:6b:63:93:cb:fa:57:2d:ac:e0:d0:b5:5e:11:
         c6:55:4f:37:29:83:12:68:0d:40:33:a3:a9:d6:55:7d:b4:d1:
         c3:53:90:94:bb:62:e6:ad:3a:74:f7:9c:a6:59:47:5c:46:26:
         8e:fe:b7:98:0c:09:3f:27:ca:ff:cf:40:74:ea:ec:b2:89:c2:
         04:b2:cd:ff:41:ce:67:2b:bb:16:13:4c:76:5e:70:06:fa:0a:
         88:61:f6:4f:88:4a:e5:c3:52:bd:c8:af:41:9b:60:92:cf:62:
         2a:79:b3:13:41:16:c5:b3:5f:2b:90:1e:1d:47:99:82:7c:d5:
         48:c8:fe:51
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgISAZt/FgN7gxfUgmZAnUT2BgMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNDhjZjE0NmI0YzczZDI3NDA5NmQ3MDU3MDhkMjRiNzI5
MzI5ZjgwHhcNMjYwMTAyMTQyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjc3MTJmMTJkOGRiMTQ0YWY2YjI5MDIzMzdlY2IzNDE5NTY2MWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEpfMB1r7QfVs3I3fJZr+gfF6oFO
qtyoLTp+abhKtdyth6V7SN0UuFBWcaXNxAbBnvfZEejMVOghCFei7t1eiyfk+Sta
9CdgUgVvO57o1/bwOPfuvaVd/QUFnEbwpYNdcS/9eCA1GEl0I59O8b9iyqmTNp/s
FPsYexjdJFlaPmDlo+IgBnNq6KuiqXEGlk0xNErNI6unRdIvQITGNvrodcyio1Kx
agmXUcV8/6DMTsuNZOPG5reWd6FjqQCYJeNCC+7GVLSYkqJtSa6uKFA/oLeiuFYK
TlIWNx7F9UNA5p8jcDNAyRJxyxexqO3ZE0rKYVXW0VaBd9+gBhJlHIBUfQIDAQAB
o4ICRjCCAkIwHQYDVR0OBBYEFLJ3EvEtjbFEr2spAjN+yzQZVmHlMB8GA1UdIwQY
MBaAFEtIzxRrTHPSdAltcFcI0ktykyn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMt
NjRhNmEwNWI5OTA1LzEvc25jUzhTMk5zVVN2YXlrQ00zN0xOQmxXWWVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMtNjRhNmEwNWI5OTA1
LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0MAwDBAFVDBoD
BANVDDAwDAMEAVUMOgMEBlUMAAMEBFuU0AMEALlbHAMEAMGK3AMEAcPIVDANBAIA
AjAHAwUAKgEHiDANBgkqhkiG9w0BAQsFAAOCAQEAWm/RfGjyTV4/e2TLZ2PALjnE
NVdBZ+HVXN+G/sh9yWQU+pZTqo6HW1cOXlVxPV0OsAV/MuJLC9qqk9am7IubmzuZ
ZV5p8ML47XSGZNxNpK0kAli280cuX98IOPEiFzwC/2K4vT259Km2fKuGuWODLIwL
H+aQScReKLc3/wW5+x+suN1rY5PL+lctrODQtV4RxlVPNymDEmgNQDOjqdZVfbTR
w1OQlLti5q06dPecpllHXEYmjv63mAwJPyfK/89AdOrssonCBLLN/0HOZyu7FhNM
dl5wBvoKiGH2T4hK5cNSvcivQZtgks9iKnmzE0EWxbNfK5AeHUeZgnzVSMj+UQ==
-----END CERTIFICATE-----
Generated at Sun Jan 11 22:26:34 2026 by rpki-client