This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/imq_-vyZQocM05HAJ1aGB-Na32E.roa
File:                     imq_-vyZQocM05HAJ1aGB-Na32E.roa (raw, json)
Hash identifier:          zILdHViD6+2XwPUydnZqZNWtXsiWdTIyLeh2NFQq4bA=
Subject key identifier:   8A:6A:BF:FA:FC:99:42:87:0C:D3:91:C0:27:56:86:07:E3:5A:DF:61
Certificate issuer:       /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial:       019B7758ABCBEF554F5D44032720AEC5F0AB
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/imq_-vyZQocM05HAJ1aGB-Na32E.roa
Signing time:             Thu 01 Jan 2026 02:17:38 +0000
ROA not before:           Thu 01 Jan 2026 02:17:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43391
IP address blocks:        185.185.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:ab:cb:ef:55:4f:5d:44:03:27:20:ae:c5:f0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
        Validity
            Not Before: Jan  1 02:17:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8a6abffafc9942870cd391c027568607e35adf61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7a:28:20:b3:13:c9:93:01:47:22:ed:29:d6:
                    83:ee:35:5f:3e:85:b8:fa:b5:b5:b0:b0:cf:37:6d:
                    0d:25:fe:11:25:dd:b0:2a:69:5a:7e:15:98:b1:e2:
                    51:85:26:af:08:7f:83:3e:49:c4:26:2e:0d:b5:93:
                    17:e7:9a:e6:47:c0:a9:cd:46:dd:4e:9c:d6:75:bb:
                    a6:7c:ef:bd:08:fe:92:82:4e:fe:53:8d:f0:1b:27:
                    85:dc:2a:1a:91:74:8c:65:98:68:1a:ac:0a:1c:bb:
                    f0:4f:44:3b:71:16:51:02:86:65:ef:d1:d1:20:3e:
                    af:42:f8:af:33:50:9f:4a:f6:7d:94:d8:08:71:44:
                    9f:59:4b:a0:ed:5e:13:c3:51:f4:18:d9:de:44:53:
                    ae:4b:9a:f4:b7:6b:f1:45:ba:86:0c:8a:81:39:8a:
                    6f:bc:c5:cf:1b:36:7e:bb:aa:a2:93:fd:d9:63:b4:
                    8a:8a:d3:f6:e8:c6:53:d7:79:e0:80:c9:e2:4a:1d:
                    19:6c:62:2d:72:7d:51:e7:03:af:bb:99:75:36:7f:
                    29:81:af:6b:dc:b7:e7:27:44:47:b1:1b:f6:78:a9:
                    a6:8e:4b:e5:3c:6a:67:e1:a4:7b:94:8b:a1:ef:3b:
                    4a:89:ab:ae:d3:60:49:98:e0:04:ee:a3:21:79:e3:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6A:BF:FA:FC:99:42:87:0C:D3:91:C0:27:56:86:07:E3:5A:DF:61
            X509v3 Authority Key Identifier:
                keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/imq_-vyZQocM05HAJ1aGB-Na32E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.185.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:dc:cf:95:87:0b:d3:e8:18:28:31:61:f2:f9:6b:95:ae:2a:
         73:8b:cd:a9:3e:47:f6:76:cd:60:d6:33:10:a4:ad:20:41:64:
         7e:f4:e5:f3:1e:43:5d:49:49:ee:3b:85:3f:3a:87:df:17:9c:
         a2:00:56:82:32:c3:8a:73:67:1c:11:a6:6e:9b:97:2b:e2:2b:
         f9:c0:c3:f4:69:56:f1:4c:89:bd:70:c6:5a:93:87:4e:37:b5:
         ef:49:5e:80:08:6e:a3:33:3b:0b:ca:ac:47:46:fe:89:5a:01:
         19:e2:2e:2c:25:f1:fe:81:4e:41:19:d7:a6:c2:b8:79:c1:72:
         9a:38:a2:d0:6b:01:f3:02:6b:e0:af:36:53:64:65:9b:b6:a2:
         c9:c8:c8:fc:fb:45:33:51:31:31:d9:1f:74:5a:0e:26:fb:30:
         11:0a:35:11:2d:d4:41:e0:62:3e:32:05:6f:11:f1:82:2f:c2:
         c1:b8:75:2b:02:3f:dd:39:31:f7:b3:df:86:e5:a4:c1:a4:cc:
         ae:5e:0b:0f:02:b7:a4:60:20:f6:cf:2a:ca:fb:0e:69:02:a3:
         af:ba:e1:07:18:98:a4:89:eb:e3:67:d2:7f:8f:8f:ea:1b:9b:
         d8:ae:29:fe:a9:e5:a1:b8:11:04:41:cc:aa:27:cc:3a:2c:6b:
         df:b9:43:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WKvL71VPXUQDJyCuxfCrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYwMTAxMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTZhYmZmYWZjOTk0Mjg3MGNkMzkxYzAyNzU2ODYwN2UzNWFkZjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HooILMTyZMBRyLtKdaD7jVfPoW4
+rW1sLDPN20NJf4RJd2wKmlafhWYseJRhSavCH+DPknEJi4NtZMX55rmR8CpzUbd
TpzWdbumfO+9CP6Sgk7+U43wGyeF3CoakXSMZZhoGqwKHLvwT0Q7cRZRAoZl79HR
ID6vQvivM1CfSvZ9lNgIcUSfWUug7V4Tw1H0GNneRFOuS5r0t2vxRbqGDIqBOYpv
vMXPGzZ+u6qik/3ZY7SKitP26MZT13nggMniSh0ZbGItcn1R5wOvu5l1Nn8pga9r
3LfnJ0RHsRv2eKmmjkvlPGpn4aR7lIuh7ztKiauu02BJmOAE7qMheePW5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIpqv/r8mUKHDNORwCdWhgfjWt9hMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvaW1xXy12eVpRb2NNMDVIQUoxYUdCLU5hMzJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubnpMA0G
CSqGSIb3DQEBCwUAA4IBAQBn3M+VhwvT6BgoMWHy+WuVripzi82pPkf2ds1g1jMQ
pK0gQWR+9OXzHkNdSUnuO4U/OoffF5yiAFaCMsOKc2ccEaZum5cr4iv5wMP0aVbx
TIm9cMZak4dON7XvSV6ACG6jMzsLyqxHRv6JWgEZ4i4sJfH+gU5BGdemwrh5wXKa
OKLQawHzAmvgrzZTZGWbtqLJyMj8+0UzUTEx2R90Wg4m+zARCjURLdRB4GI+MgVv
EfGCL8LBuHUrAj/dOTH3s9+G5aTBpMyuXgsPArekYCD2zyrK+w5pAqOvuuEHGJik
ievjZ9J/j4/qG5vYrin+qeWhuBEEQcyqJ8w6LGvfuUP/
-----END CERTIFICATE-----
Generated at Wed Jan 21 14:12:42 2026 by rpki-client