This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa
File:                     ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa (raw, json)
Hash identifier:          RZTYOXGch0DUBzdLJFR6bBMusCngAipnQLe9rTFjcIU=
Subject key identifier:   7B:2D:CC:AF:C2:73:6C:55:AA:A6:2F:F3:A4:41:E9:65:F7:0F:55:32
Certificate issuer:       /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial:       019B7E37DF538D600E20CD1640BEE5F1A9C9
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa
Signing time:             Fri 02 Jan 2026 10:19:09 +0000
ROA not before:           Fri 02 Jan 2026 10:19:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        185.223.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 21:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:df:53:8d:60:0e:20:cd:16:40:be:e5:f1:a9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
        Validity
            Not Before: Jan  2 10:19:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7b2dccafc2736c55aaa62ff3a441e965f70f5532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:23:39:36:68:9d:33:b6:c1:87:96:e9:18:
                    e7:e2:d3:e2:ad:f0:43:39:3f:9f:a0:00:fa:5c:78:
                    24:15:78:f9:8f:5d:66:24:0e:01:0a:7a:55:f2:25:
                    62:60:27:fa:c0:d2:c5:e9:16:7d:aa:16:ff:9b:89:
                    b0:ed:5c:0f:ad:41:ad:cc:d2:7d:1b:be:fa:32:e0:
                    10:a2:48:7d:5f:08:61:1a:f3:c7:86:3f:b2:02:18:
                    f0:d7:31:da:a8:6f:d8:3c:46:0e:1d:68:85:30:f3:
                    01:6a:31:46:0b:45:70:84:49:7a:cf:d0:51:e0:56:
                    65:ae:35:33:2e:a2:ec:75:47:06:75:c6:a3:06:ba:
                    db:33:0c:eb:78:c8:3e:df:4d:21:69:57:67:c7:90:
                    43:51:16:bd:d0:25:e8:dc:2f:ed:52:c2:23:af:65:
                    c4:11:3c:f6:ad:e4:ce:b6:77:bd:2a:29:a5:f3:97:
                    82:12:2e:53:8c:35:58:4d:09:25:30:9f:6f:18:fa:
                    2a:e2:69:89:47:12:fe:f1:0e:de:06:5d:27:09:4a:
                    99:56:08:d6:8a:96:bd:eb:b1:30:08:e8:f9:31:e8:
                    74:22:3e:4c:d8:7d:ce:b8:54:dc:13:75:7a:6c:0b:
                    77:df:5f:07:a5:36:b8:86:e8:53:69:33:45:d9:1e:
                    78:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2D:CC:AF:C2:73:6C:55:AA:A6:2F:F3:A4:41:E9:65:F7:0F:55:32
            X509v3 Authority Key Identifier:
                keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.223.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:c2:13:d1:8c:cb:ed:b8:b7:00:d4:83:5b:ea:a6:10:fb:2b:
         67:23:e6:62:97:e4:58:de:e5:55:40:2e:aa:b0:74:da:5f:50:
         69:88:31:3b:6a:67:38:14:b3:65:1a:bb:07:1d:d2:cd:75:f2:
         f1:99:9b:2b:7f:27:0b:d0:f3:e2:a9:94:07:6d:94:0d:7b:39:
         29:9f:a7:7d:8e:81:cd:55:87:e1:3f:aa:cf:57:34:2f:81:35:
         f9:84:91:f2:1a:1b:7a:83:9e:c1:85:b0:03:10:1d:0a:1d:cf:
         81:e2:56:32:78:33:06:5e:9c:70:a0:cd:27:3b:69:bf:3c:2f:
         ad:d8:c8:00:c6:17:94:57:48:22:eb:8e:62:8e:f9:97:3b:95:
         f7:8b:93:31:b7:c7:0c:59:44:85:bb:cc:b6:15:13:82:ef:e4:
         54:86:31:de:7e:5e:8d:78:29:f5:7d:36:01:94:91:cb:f6:13:
         17:80:95:4a:f7:69:c4:43:17:26:a7:17:6a:96:59:5d:cd:bd:
         87:ae:ce:52:04:c4:5e:1d:b1:6b:7b:6c:8a:85:83:29:c6:df:
         71:dd:39:2e:be:72:5e:83:f8:ca:15:52:2d:88:32:1c:0e:a0:
         f3:73:e9:02:7b:a2:0d:ff:04:82:fc:a7:30:15:62:52:08:4a:
         e9:68:5f:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+N99TjWAOIM0WQL7l8anJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YmFjZTc4ZmM5MDI3OGQ4MmYxZTg2NjhhOGExOWVlOTk4
MmNkYzMwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjJkY2NhZmMyNzM2YzU1YWFhNjJmZjNhNDQxZTk2NWY3MGY1NTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMwjOTZonTO2wYeW6Rjn4tPirfBD
OT+foAD6XHgkFXj5j11mJA4BCnpV8iViYCf6wNLF6RZ9qhb/m4mw7VwPrUGtzNJ9
G776MuAQokh9XwhhGvPHhj+yAhjw1zHaqG/YPEYOHWiFMPMBajFGC0VwhEl6z9BR
4FZlrjUzLqLsdUcGdcajBrrbMwzreMg+300haVdnx5BDURa90CXo3C/tUsIjr2XE
ETz2reTOtne9Kiml85eCEi5TjDVYTQklMJ9vGPoq4mmJRxL+8Q7eBl0nCUqZVgjW
ipa967EwCOj5Meh0Ij5M2H3OuFTcE3V6bAt3318HpTa4huhTaTNF2R54zQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHstzK/Cc2xVqqYv86RB6WX3D1UyMB8GA1UdIwQY
MBaAFPa6znj8kCeNgvHoZoqKGe6Zgs3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjkt
ZjZkZDNiNTE2MWY1LzEvZXkzTXI4SnpiRldxcGlfenBFSHBaZmNQVlRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjktZjZkZDNiNTE2MWY1
LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud9AMA0G
CSqGSIb3DQEBCwUAA4IBAQA+whPRjMvtuLcA1INb6qYQ+ytnI+Zil+RY3uVVQC6q
sHTaX1BpiDE7amc4FLNlGrsHHdLNdfLxmZsrfycL0PPiqZQHbZQNezkpn6d9joHN
VYfhP6rPVzQvgTX5hJHyGht6g57BhbADEB0KHc+B4lYyeDMGXpxwoM0nO2m/PC+t
2MgAxheUV0gi645ijvmXO5X3i5Mxt8cMWUSFu8y2FROC7+RUhjHefl6NeCn1fTYB
lJHL9hMXgJVK92nEQxcmpxdqllldzb2Hrs5SBMReHbFre2yKhYMpxt9x3TkuvnJe
g/jKFVItiDIcDqDzc+kCe6IN/wSC/KcwFWJSCErpaF93
-----END CERTIFICATE-----
Generated at Fri Jan 9 06:22:16 2026 by rpki-client