This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/N8Zoy1vifh_5W3HRcsXOVx07-88.roa
File:                     N8Zoy1vifh_5W3HRcsXOVx07-88.roa (raw, json)
Hash identifier:          nVC13WvZK1Z+urB7Vuugml3Yvf9akiWxKhcLBrFPWrQ=
Subject key identifier:   37:C6:68:CB:5B:E2:7E:1F:F9:5B:71:D1:72:C5:CE:57:1D:3B:FB:CF
Certificate issuer:       /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial:       019BB3926449009C028AFDC6D72BC9EC87F9
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/N8Zoy1vifh_5W3HRcsXOVx07-88.roa
Signing time:             Mon 12 Jan 2026 18:57:54 +0000
ROA not before:           Mon 12 Jan 2026 18:57:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49535
IP address blocks:        185.151.124.0/22 maxlen: 22
                          185.151.124.0/24 maxlen: 24
                          185.151.125.0/24 maxlen: 24
                          185.151.126.0/24 maxlen: 24
                          185.151.127.0/24 maxlen: 24
                          188.94.192.0/21 maxlen: 21
                          188.94.192.0/24 maxlen: 24
                          188.94.193.0/24 maxlen: 24
                          188.94.194.0/24 maxlen: 24
                          188.94.195.0/24 maxlen: 24
                          188.94.196.0/24 maxlen: 24
                          188.94.197.0/24 maxlen: 24
                          188.94.198.0/24 maxlen: 24
                          188.94.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 00:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b3:92:64:49:00:9c:02:8a:fd:c6:d7:2b:c9:ec:87:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
        Validity
            Not Before: Jan 12 18:57:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=37c668cb5be27e1ff95b71d172c5ce571d3bfbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:de:b6:28:6b:e4:fc:e9:73:e3:b2:85:47:
                    47:fd:2b:1b:36:d1:ba:31:5f:4e:fd:87:f9:b2:db:
                    68:20:88:66:d2:0f:9d:ae:4e:71:a5:26:5e:74:15:
                    02:cd:30:e9:2e:b8:9e:38:97:d3:4f:73:c1:9f:d9:
                    41:26:07:0e:f8:ee:0d:6b:4f:fe:35:4a:cc:d5:60:
                    46:13:73:9c:c8:40:13:f4:2c:38:81:1b:1d:dc:7f:
                    a0:95:80:fb:79:41:38:29:94:5b:4b:eb:c3:51:b5:
                    ea:4c:66:75:a4:9b:b9:92:db:65:1b:99:a0:2e:93:
                    52:41:4a:53:0d:0c:25:6b:21:74:9d:ce:e2:a3:6b:
                    be:24:b7:59:04:0d:3c:02:a5:bf:c6:6f:5e:2e:c9:
                    5d:86:d9:b6:c3:5b:cc:5c:89:46:8a:e3:1a:84:f7:
                    d1:80:3e:aa:33:0a:de:f0:75:69:d7:79:bf:56:f5:
                    fa:59:2c:9d:c2:6c:82:88:f2:87:82:ec:d3:91:88:
                    1d:e5:81:5a:bf:d4:92:74:eb:b9:9c:23:82:50:93:
                    e2:2d:3e:91:59:f8:a3:af:07:d4:f9:a9:ea:95:68:
                    0c:89:36:ce:3e:32:9e:fe:f5:0f:19:1f:9e:4e:57:
                    7f:e2:51:96:45:3f:e7:30:e2:bb:49:eb:89:6a:a2:
                    c7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C6:68:CB:5B:E2:7E:1F:F9:5B:71:D1:72:C5:CE:57:1D:3B:FB:CF
            X509v3 Authority Key Identifier:
                keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/N8Zoy1vifh_5W3HRcsXOVx07-88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.151.124.0/22
                  188.94.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:20:69:cb:40:ba:23:25:5b:d5:34:39:5e:60:52:8c:7e:67:
         a7:e7:b8:54:c4:cb:87:7c:40:fa:a0:20:1d:e7:5c:b6:e3:6e:
         92:1e:a7:ac:80:be:89:15:0a:48:7a:0b:e2:57:3a:70:0a:84:
         70:f0:d5:04:05:db:1d:db:c4:56:32:ae:50:a6:f9:ec:9d:1c:
         80:10:ba:3b:71:6c:46:3f:4e:4f:32:67:59:1d:29:d7:12:98:
         4c:b3:39:33:ec:34:c4:0b:7d:37:7c:b2:52:0f:fd:eb:68:33:
         b4:d1:58:a6:74:1f:4e:f8:31:80:e4:a8:f0:0b:55:41:19:15:
         a0:48:48:c0:da:1e:0f:5e:e4:74:c9:98:67:99:ae:43:a3:67:
         1a:ff:f3:2c:fa:c3:f5:16:22:e6:da:50:87:b0:26:85:e3:99:
         26:e1:b3:34:2e:4a:c4:68:a1:94:ff:d2:c2:03:b5:91:92:44:
         f6:67:bf:fc:a9:50:99:14:24:13:ae:62:64:e1:2c:a3:aa:af:
         c6:05:1d:44:47:6c:88:6a:e9:bf:34:b3:b5:de:0f:44:32:a6:
         bc:a7:71:6b:dc:71:29:e3:2d:8b:86:60:72:fc:f5:18:ef:0a:
         62:b1:7f:a5:01:61:1a:18:c9:78:5c:9c:af:92:18:b9:00:e6:
         29:af:37:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 08:38:24 2026 by rpki-client