This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/8EMMRLq1ba74wsT5jVIHYHbcc00.roa
File:                     8EMMRLq1ba74wsT5jVIHYHbcc00.roa (raw, json)
Hash identifier:          OWkinLuII34KhV3crRd1+k5jvfaxcPKAbZAj2n4o9vI=
Subject key identifier:   F0:43:0C:44:BA:B5:6D:AE:F8:C2:C4:F9:8D:52:07:60:76:DC:73:4D
Certificate issuer:       /CN=934959adebf7de943555bca2508807eb913ce6f2
Certificate serial:       019B7BA54020681E8CB1E1E5CF75266AC13E
Authority key identifier: 93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/8EMMRLq1ba74wsT5jVIHYHbcc00.roa
Signing time:             Thu 01 Jan 2026 22:19:45 +0000
ROA not before:           Thu 01 Jan 2026 22:19:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201739
IP address blocks:        45.152.0.0/22 maxlen: 22
                          45.152.0.0/24 maxlen: 24
                          45.152.1.0/24 maxlen: 24
                          45.152.2.0/24 maxlen: 24
                          45.152.3.0/24 maxlen: 24
                          185.22.252.0/22 maxlen: 22
                          185.22.252.0/24 maxlen: 24
                          185.22.253.0/24 maxlen: 24
                          185.22.254.0/24 maxlen: 24
                          185.22.255.0/24 maxlen: 24
                          185.65.108.0/22 maxlen: 22
                          185.65.108.0/24 maxlen: 24
                          185.65.109.0/24 maxlen: 24
                          185.65.110.0/24 maxlen: 24
                          185.65.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:40:20:68:1e:8c:b1:e1:e5:cf:75:26:6a:c1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934959adebf7de943555bca2508807eb913ce6f2
        Validity
            Not Before: Jan  1 22:19:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f0430c44bab56daef8c2c4f98d52076076dc734d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:54:1d:c7:8a:78:1e:bb:67:09:db:af:8f:
                    aa:7e:4f:d4:2c:05:63:ce:51:ef:99:27:90:98:bf:
                    80:50:4c:89:84:03:ed:a8:f1:d5:51:6c:ff:34:4b:
                    eb:0d:85:2b:84:92:89:52:8c:57:09:50:7b:69:dc:
                    8e:2e:59:7a:37:c2:1a:9d:bc:e6:e7:d9:a0:62:e6:
                    91:e0:69:7c:b6:03:17:1d:74:d4:6b:ec:0d:2c:ff:
                    f9:f5:0d:0a:03:df:a3:83:e7:cf:3f:ac:83:c6:ee:
                    9b:fb:f9:7d:20:7e:22:26:9d:ab:29:f8:ed:91:72:
                    84:2d:52:fa:04:dd:56:5a:96:f0:e8:b0:b6:cc:2b:
                    33:05:0e:e7:9b:71:a8:5c:12:16:ea:db:b3:f2:33:
                    ea:c6:45:80:22:98:cf:f5:a7:c2:67:22:32:72:ee:
                    eb:20:06:82:ae:be:7f:c6:6d:d4:2e:3d:f9:c3:ef:
                    98:d7:fe:fb:c3:68:9a:0d:21:f4:c6:f4:89:8f:c7:
                    53:55:1c:fa:fd:83:3c:e5:0c:1f:ad:25:db:ee:8e:
                    33:e2:57:ac:73:74:64:27:33:f3:c4:a5:89:07:78:
                    92:f3:c3:6e:75:32:c9:77:03:7d:72:fc:90:fd:bc:
                    ad:c5:f1:25:00:4e:73:19:68:95:8f:9e:f1:ec:d0:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:43:0C:44:BA:B5:6D:AE:F8:C2:C4:F9:8D:52:07:60:76:DC:73:4D
            X509v3 Authority Key Identifier:
                keyid:93:49:59:AD:EB:F7:DE:94:35:55:BC:A2:50:88:07:EB:91:3C:E6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0lZrev33pQ1VbyiUIgH65E85vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/8EMMRLq1ba74wsT5jVIHYHbcc00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/175762-6929-4e70-b3eb-fb0ee5f997da/1/k0lZrev33pQ1VbyiUIgH65E85vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.152.0.0/22
                  185.22.252.0/22
                  185.65.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:7e:07:d7:b6:b3:bd:26:1c:81:9c:01:93:f3:ec:1b:e3:25:
         43:d4:e3:ab:ac:81:02:43:54:ed:3c:88:2c:47:36:f4:b1:95:
         fe:02:27:ad:31:8e:c3:6e:d5:30:47:22:95:1d:d7:ea:ad:9b:
         d9:6e:fe:15:07:38:dd:28:8c:0c:5d:3c:3b:36:37:b4:f6:a3:
         87:dd:ab:a9:74:a8:75:28:46:4f:91:96:ff:b8:97:e3:f9:fb:
         3e:57:1c:25:8d:1b:51:e6:12:a3:2e:fd:8c:93:8d:ea:ce:0c:
         a3:6a:14:51:1f:89:f2:17:f2:ac:6f:b1:0e:59:fc:67:09:40:
         1e:6e:85:ce:55:3c:a3:2a:cb:e2:15:5f:3c:67:e2:a1:6b:e0:
         7e:80:b7:0d:01:7c:e4:eb:91:87:eb:c1:66:50:24:7d:d2:4c:
         ae:f9:78:d9:3a:36:8f:af:8b:c1:02:5e:27:b2:bc:53:a4:9f:
         1c:a2:30:88:2a:e1:d0:9a:c0:97:f6:63:78:51:1b:7b:40:b4:
         70:4c:43:ec:a8:aa:d3:00:b0:b3:ef:7d:84:16:d5:25:9a:e4:
         85:22:42:48:3b:18:f1:d2:11:2c:39:e8:e3:36:4d:84:a7:e0:
         f4:b1:db:a0:de:2f:b4:1e:c6:b5:ad:62:da:9a:da:b9:6b:61:
         e5:7f:59:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:09 2026 by rpki-client