This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0Mk6g443uhaEabXaAD6dU9N3yHw.roa
File:                     0Mk6g443uhaEabXaAD6dU9N3yHw.roa (raw, json)
Hash identifier:          fRaGRjNpQYMekAmpIw8L9DTZDmjanRkZfHvE1ApZdc0=
Subject key identifier:   D0:C9:3A:83:8E:37:BA:16:84:69:B5:DA:00:3E:9D:53:D3:77:C8:7C
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       019B9BA3AF5C1CE022B56EB782105E309898
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0Mk6g443uhaEabXaAD6dU9N3yHw.roa
Signing time:             Thu 08 Jan 2026 03:25:54 +0000
ROA not before:           Thu 08 Jan 2026 03:25:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209178
IP address blocks:        185.233.19.0/24 maxlen: 24
                          185.235.164.0/24 maxlen: 24
                          185.235.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9b:a3:af:5c:1c:e0:22:b5:6e:b7:82:10:5e:30:98:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Jan  8 03:25:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d0c93a838e37ba168469b5da003e9d53d377c87c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:f0:3a:91:56:e7:c2:37:5d:41:70:a7:aa:
                    19:22:68:db:91:be:15:0d:f2:83:34:43:ed:d7:6f:
                    06:1e:44:be:62:85:75:6b:7b:12:95:d7:38:e4:6b:
                    ff:8d:80:6c:d6:a2:e2:0c:2b:f1:fc:48:86:bc:36:
                    5d:1f:e2:78:16:2c:de:51:4f:8d:2f:5d:14:68:6e:
                    54:d6:69:82:77:4d:e8:4c:9e:c4:a3:c6:ee:c0:19:
                    49:31:3a:be:33:6b:ca:75:b1:82:7a:92:19:39:dd:
                    a4:7d:20:1d:91:a4:56:9f:19:18:6d:aa:18:b5:99:
                    95:b4:42:a8:9b:b3:b5:e0:77:26:04:b3:24:cf:af:
                    e1:18:0c:f1:bf:8c:61:75:24:93:a9:73:87:3e:67:
                    9a:73:07:36:22:8e:77:0f:55:81:79:2b:85:f0:55:
                    d8:7e:9d:dd:ed:5e:0a:d9:63:a7:9c:31:15:85:4c:
                    a6:ea:5f:70:b2:d4:83:f6:f1:c6:37:7b:e2:22:36:
                    f5:a5:f1:7f:36:b6:3a:ab:d9:77:52:23:08:3b:b8:
                    71:f6:55:0f:15:f8:53:15:77:d6:f2:d4:29:60:f1:
                    72:ec:57:f1:0f:95:65:dd:59:ca:64:08:4b:32:5e:
                    d1:6a:6e:eb:0c:35:64:0c:96:18:e1:73:ca:47:46:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C9:3A:83:8E:37:BA:16:84:69:B5:DA:00:3E:9D:53:D3:77:C8:7C
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0Mk6g443uhaEabXaAD6dU9N3yHw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.19.0/24
                  185.235.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:7f:7e:79:4d:c8:59:7c:02:53:54:76:55:f7:0c:e9:8e:18:
         b7:1f:05:68:db:ec:44:0b:89:b2:33:f7:b7:88:a8:fd:8d:51:
         e8:6b:16:24:8b:c7:a1:2f:5b:f2:5d:2c:ce:24:6d:17:15:4c:
         eb:3c:0f:60:d6:a4:a6:03:53:4a:63:3a:65:84:4e:98:be:78:
         6b:93:4a:4a:78:de:e3:95:e8:1b:f5:80:d1:f4:b0:03:01:d5:
         4e:04:56:be:6e:ab:59:26:77:e9:c9:23:d8:77:7c:30:d0:a4:
         e5:37:a6:57:50:26:ae:49:99:05:0a:2d:a5:85:3e:9f:c1:ff:
         27:ca:ef:66:7f:f8:f4:1b:44:ee:e4:fd:da:d7:45:0f:5a:97:
         0d:89:7d:e4:a7:4b:bd:c4:85:8b:8f:80:b0:05:e0:1d:1d:5d:
         01:2c:b0:57:da:27:02:3d:b1:42:86:d1:d3:20:f7:68:61:bb:
         13:a0:8e:4d:4d:f9:3a:df:13:3f:55:f3:a6:bf:aa:74:9a:4d:
         f4:5d:0b:6a:3f:99:bf:43:48:74:27:32:33:19:fb:99:ab:d9:
         d9:b6:20:be:90:4b:03:f1:b2:9f:ca:56:cd:9a:44:bc:4a:62:
         e6:22:6c:b4:ba:fd:2e:db:cf:21:fe:17:57:08:44:ea:fa:c8:
         41:c8:8f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 09:24:15 2026 by rpki-client