This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/tK2blI7Nfw6lv-wfNLEAveyAmAY.roa
File:                     tK2blI7Nfw6lv-wfNLEAveyAmAY.roa (raw, json)
Hash identifier:          prj90rUe5ES6wRKLWnPtxwq7jXFJ/Ddfe1ZKDbZTkQQ=
Subject key identifier:   B4:AD:9B:94:8E:CD:7F:0E:A5:BF:EC:1F:34:B1:00:BD:EC:80:98:06
Certificate issuer:       /CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Certificate serial:       019B77C6D54F82217A9E4B43F1D9F42DCFBD
Authority key identifier: 62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/tK2blI7Nfw6lv-wfNLEAveyAmAY.roa
Signing time:             Thu 01 Jan 2026 04:17:58 +0000
ROA not before:           Thu 01 Jan 2026 04:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203543
IP address blocks:        185.194.172.0/24 maxlen: 24
                          185.194.173.0/24 maxlen: 24
                          185.194.174.0/24 maxlen: 24
                          185.194.175.0/24 maxlen: 24
                          194.156.236.0/24 maxlen: 24
                          194.156.237.0/24 maxlen: 24
                          194.156.238.0/24 maxlen: 24
                          194.156.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:d5:4f:82:21:7a:9e:4b:43:f1:d9:f4:2d:cf:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
        Validity
            Not Before: Jan  1 04:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b4ad9b948ecd7f0ea5bfec1f34b100bdec809806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:cf:ea:28:98:ab:bf:49:5b:e2:3b:78:d6:
                    dc:41:f6:be:a4:85:cd:7b:a1:b7:f6:a2:76:38:1a:
                    0b:65:ad:78:d1:bd:ac:25:b0:f0:72:21:f5:bf:22:
                    fe:eb:84:a2:57:e0:69:76:cd:f3:4a:99:a9:b8:9c:
                    12:a8:5a:c1:2e:5f:4e:6c:5b:cf:9c:ae:cf:39:a8:
                    cf:e3:60:cd:94:fe:f1:2b:46:e0:ab:d1:a9:b3:9d:
                    a3:b0:cb:62:7b:c9:df:cd:38:cc:e4:78:7a:83:f2:
                    6e:2e:84:9c:62:30:27:ca:cb:84:d4:b1:4b:cb:b1:
                    8d:a6:64:33:86:a8:ba:e0:02:3b:34:f3:3e:5c:b1:
                    28:a6:8f:be:d0:cf:5e:b6:c2:63:3e:b6:d9:4f:e8:
                    8a:53:9d:37:64:a5:16:f1:02:5a:34:c6:de:a2:35:
                    18:7e:94:a0:2b:b7:04:d1:09:22:3d:dd:70:fc:f6:
                    d6:99:37:19:17:16:30:4a:a9:68:0f:23:c4:7c:2a:
                    fc:37:cc:41:a7:f6:81:af:55:a1:59:3f:5c:6c:9e:
                    03:f1:0b:bd:f5:56:6a:c2:d3:76:e9:c7:cb:39:ae:
                    bc:4e:c9:e0:0b:cb:5b:e8:28:62:e4:8a:e5:0e:64:
                    8c:46:e7:f8:80:a7:7c:73:ac:f5:19:46:f4:9b:8c:
                    94:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AD:9B:94:8E:CD:7F:0E:A5:BF:EC:1F:34:B1:00:BD:EC:80:98:06
            X509v3 Authority Key Identifier:
                keyid:62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/tK2blI7Nfw6lv-wfNLEAveyAmAY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.172.0/22
                  194.156.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:03:d9:8b:8d:15:6c:85:20:3a:91:5b:49:fd:99:25:53:46:
         35:c2:5b:94:8e:e1:65:93:b7:d6:d3:5d:93:53:09:dd:89:a5:
         04:65:af:c4:89:2b:f9:1c:ee:ff:56:7a:61:87:a0:a2:0e:34:
         d5:b5:c9:23:f7:f2:eb:f0:6e:77:ee:0a:94:48:59:24:3d:8b:
         0e:e3:94:dd:3f:72:9d:0c:ec:f0:8d:ef:e3:60:96:01:6d:b3:
         ad:13:a6:68:9a:7f:0d:b8:de:cc:9f:42:ea:95:fa:2d:44:68:
         a5:50:ac:3a:8f:c9:7d:8e:cf:2a:ea:f2:d1:8e:8e:b0:68:2a:
         1c:55:e8:eb:23:23:f0:81:dd:4e:b3:f3:47:bc:f0:bc:d9:4d:
         e3:ca:72:b9:d0:cf:e9:6c:5d:df:8f:af:b6:86:57:c0:79:b4:
         8b:f2:a1:46:44:3a:82:ea:fb:06:b8:ca:fb:69:97:74:6b:1f:
         a9:07:ff:4d:2b:c8:d7:60:8a:2f:5b:60:33:8e:71:f3:3e:60:
         a4:20:53:5e:16:ef:32:c3:79:f5:8d:15:23:e1:d3:24:b3:cc:
         ca:2b:5b:1b:07:70:84:47:c0:1f:4b:57:32:12:5c:a4:d7:ba:
         62:e6:f3:a5:cf:3c:aa:16:66:b7:29:92:bb:e0:33:9b:94:5b:
         70:41:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:41 2026 by rpki-client