This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/273yYIBbogtiT7VaT2amUMKtB0Y.roa
File:                     273yYIBbogtiT7VaT2amUMKtB0Y.roa (raw, json)
Hash identifier:          8JEoiBOYv9v8w4eCGr3DLwQXwlI8A4A+5VaAQ2ATkcQ=
Subject key identifier:   DB:BD:F2:60:80:5B:A2:0B:62:4F:B5:5A:4F:66:A6:50:C2:AD:07:46
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       019B7B36138E6E1E3F43306B99CE98DC7EBA
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/273yYIBbogtiT7VaT2amUMKtB0Y.roa
Signing time:             Thu 01 Jan 2026 20:18:20 +0000
ROA not before:           Thu 01 Jan 2026 20:18:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214950
IP address blocks:        85.92.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:13:8e:6e:1e:3f:43:30:6b:99:ce:98:dc:7e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Jan  1 20:18:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dbbdf260805ba20b624fb55a4f66a650c2ad0746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:7d:7e:b9:60:7e:e6:3f:2f:67:89:02:04:
                    a0:b0:3d:bf:c8:b0:7c:06:84:6c:33:f8:0c:ed:7f:
                    30:89:c5:08:28:e7:60:20:6f:ad:4d:ac:f5:d8:4d:
                    cb:70:d6:8d:d3:f0:e7:d6:33:e5:54:e1:dd:c7:97:
                    01:24:d3:bb:2e:60:b4:7d:72:3b:8d:ab:ee:a1:b7:
                    85:62:05:51:36:b5:c5:6b:67:db:9f:16:1c:48:fa:
                    c8:b8:42:13:03:df:ad:cf:a1:78:9e:dd:3f:06:50:
                    cd:bf:4f:3b:22:10:d5:a4:c2:a0:ed:47:27:f6:5a:
                    ba:e0:ed:71:a0:c5:86:cb:0d:79:aa:66:b0:a4:e6:
                    75:68:67:ab:00:57:0a:8e:2b:9e:62:fc:b8:f8:5c:
                    23:43:d2:85:aa:8d:58:a3:dc:fe:19:c9:82:39:7b:
                    a4:a0:d2:7c:a2:4a:42:23:ce:13:a6:2d:45:93:cf:
                    3d:f2:5c:2f:f2:18:2c:1c:ef:b3:b6:5b:41:e2:a3:
                    9b:2f:1c:01:a6:42:48:d4:e1:77:b6:97:29:d0:84:
                    c5:b6:f4:2a:42:08:c9:a7:f9:fe:dd:3a:20:09:53:
                    7a:8e:81:09:01:32:37:43:14:31:58:a7:bf:1a:c2:
                    f6:41:a3:b4:7a:d1:7a:09:e6:8e:d4:ff:a0:56:87:
                    b5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BD:F2:60:80:5B:A2:0B:62:4F:B5:5A:4F:66:A6:50:C2:AD:07:46
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/273yYIBbogtiT7VaT2amUMKtB0Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.92.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:14:03:5f:9e:f3:9b:36:63:de:93:55:2c:b0:cd:ae:94:e9:
         63:6c:d6:60:96:44:ce:42:24:e7:93:b7:8c:5f:ee:6a:08:46:
         21:9c:71:05:db:1d:92:a1:4a:df:bd:85:ed:0e:ea:a2:ec:1d:
         b6:52:6a:0f:ee:84:4f:04:cd:d2:ce:ea:4d:3f:cf:35:89:53:
         a0:55:35:1b:09:a8:27:7f:b2:c0:d9:de:88:f7:4c:07:9c:6f:
         a5:6d:07:73:ca:f5:d8:95:84:f7:55:f4:d5:b1:32:a4:2a:eb:
         33:ad:31:28:61:7e:4b:1c:13:d4:d6:97:a3:60:53:c2:ae:35:
         0b:eb:3f:e4:b6:39:6b:16:27:26:03:8d:98:dc:68:ed:6f:55:
         71:68:0c:ab:db:6e:0e:b2:ec:17:81:47:67:2a:98:53:c7:33:
         d8:3e:6f:28:06:45:a7:40:1d:fe:b3:df:bd:b0:fc:da:5a:50:
         e0:5b:76:b5:51:98:b0:cb:c1:76:8b:ab:21:d4:b8:5d:cc:c7:
         c5:59:2c:38:f7:09:22:b3:e5:8a:3e:23:c5:4e:a0:11:46:58:
         8f:02:b0:37:dc:e9:9d:9f:cc:69:09:7d:22:f4:dd:80:08:74:
         7e:71:e0:62:2f:42:6a:6e:f7:f2:75:21:6c:f0:51:8f:84:88:
         da:db:2c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 09:23:04 2026 by rpki-client