This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/rcB_gTKQyon5L1ekK6QyPY33ncE.roa
File:                     rcB_gTKQyon5L1ekK6QyPY33ncE.roa (raw, json)
Hash identifier:          m6GuZytNUPy8PIlHIB9uYKzZao0j2orEwSJM8CoLyyE=
Subject key identifier:   AD:C0:7F:81:32:90:CA:89:F9:2F:57:A4:2B:A4:32:3D:8D:F7:9D:C1
Certificate issuer:       /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial:       019B7D5B4A69816902F08004349628D5A589
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/rcB_gTKQyon5L1ekK6QyPY33ncE.roa
Signing time:             Fri 02 Jan 2026 06:18:13 +0000
ROA not before:           Fri 02 Jan 2026 06:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39855
IP address blocks:        185.82.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 14:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:4a:69:81:69:02:f0:80:04:34:96:28:d5:a5:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
        Validity
            Not Before: Jan  2 06:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=adc07f813290ca89f92f57a42ba4323d8df79dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c0:26:52:0d:89:28:cb:8d:74:c9:42:96:50:
                    9b:29:f9:01:65:21:bd:e9:ec:19:54:66:ea:dc:b8:
                    3d:f2:07:2a:02:ec:17:45:b2:84:28:72:f6:a2:ee:
                    0f:19:21:9f:25:0c:8d:91:c2:bb:da:49:fe:ca:c3:
                    c9:fa:84:92:8b:77:a8:f5:a0:f1:30:51:0d:7f:e4:
                    a7:bb:d2:af:04:0b:e3:8e:15:90:dd:e2:77:51:42:
                    60:48:c6:19:6e:2c:93:c2:23:3e:08:a9:01:5c:bb:
                    ef:e1:ab:20:a8:31:da:47:ae:87:09:c5:a2:e8:db:
                    9e:b3:1c:b7:b2:29:03:8e:4a:44:06:45:86:59:66:
                    60:df:45:67:25:0d:48:84:bd:04:4f:ea:f7:d6:e6:
                    af:b0:52:03:b1:7d:3e:31:a2:8e:84:26:ef:bf:da:
                    3d:e5:87:58:13:1c:b0:98:15:75:c2:0b:b3:05:eb:
                    aa:85:24:d0:7d:78:55:bc:1f:dd:74:cb:b0:84:77:
                    cf:49:e4:84:54:63:11:7a:e8:0f:55:b3:14:a3:78:
                    d7:87:ec:0a:de:b1:91:96:a6:62:47:8c:a4:b4:2c:
                    b2:90:bb:1e:fd:65:13:94:4e:fc:fb:42:c1:f6:9c:
                    23:89:59:f3:02:4b:fe:61:7f:90:b0:e3:45:cc:b4:
                    fc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C0:7F:81:32:90:CA:89:F9:2F:57:A4:2B:A4:32:3D:8D:F7:9D:C1
            X509v3 Authority Key Identifier:
                keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/rcB_gTKQyon5L1ekK6QyPY33ncE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:5d:69:7c:19:64:40:c9:0f:34:90:0d:5b:c6:a7:14:dc:70:
         b8:27:a3:d2:89:86:54:41:f3:68:6e:27:f8:c3:49:23:ea:52:
         2a:81:9d:e5:ad:c4:a1:00:7f:49:59:4b:3f:db:61:4d:70:6b:
         2c:84:0b:d9:b8:61:c0:e3:7a:45:ce:ee:65:d7:04:b2:91:48:
         c6:ef:c1:1e:4b:1c:b1:25:42:7e:a5:35:18:8e:84:b2:da:e8:
         ff:12:e6:2e:58:58:d3:6b:56:5b:57:e8:1b:9c:81:e8:e6:45:
         0c:84:c0:b2:43:92:ab:6c:58:67:15:f6:a3:42:62:28:68:3a:
         89:3f:1b:e7:3d:dd:2a:ec:5e:4e:41:ee:fe:ae:95:63:5f:81:
         c9:c7:bb:dd:67:ce:cb:9d:3a:44:23:da:ea:c3:54:e1:60:c5:
         a6:1f:d4:07:4f:be:bf:4e:e0:19:d4:3c:af:b7:de:6d:c7:e6:
         ac:77:0d:9a:fb:d3:8f:81:d8:41:59:bf:e2:96:46:90:c7:ef:
         35:35:a9:55:40:08:3f:1f:54:be:17:06:59:d0:9f:48:4c:57:
         e4:28:cf:6f:44:5d:80:7d:52:d4:49:47:c9:4a:ed:81:20:1a:
         22:72:c5:8e:23:24:23:d8:2e:0b:3a:99:66:66:b6:e9:12:cb:
         a9:22:26:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9W0ppgWkC8IAENJYo1aWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNmEyOGI3YzYzZWY2YWIyMTRhNTJjZmE3YzNlNzhkYjlh
NDA4MjMwHhcNMjYwMTAyMDYxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGMwN2Y4MTMyOTBjYTg5ZjkyZjU3YTQyYmE0MzIzZDhkZjc5ZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsAmUg2JKMuNdMlCllCbKfkBZSG9
6ewZVGbq3Lg98gcqAuwXRbKEKHL2ou4PGSGfJQyNkcK72kn+ysPJ+oSSi3eo9aDx
MFENf+Snu9KvBAvjjhWQ3eJ3UUJgSMYZbiyTwiM+CKkBXLvv4asgqDHaR66HCcWi
6Nuesxy3sikDjkpEBkWGWWZg30VnJQ1IhL0ET+r31uavsFIDsX0+MaKOhCbvv9o9
5YdYExywmBV1wguzBeuqhSTQfXhVvB/ddMuwhHfPSeSEVGMReugPVbMUo3jXh+wK
3rGRlqZiR4yktCyykLse/WUTlE78+0LB9pwjiVnzAkv+YX+QsONFzLT8CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK3Af4EykMqJ+S9XpCukMj2N953BMB8GA1UdIwQY
MBaAFGJqKLfGPvarIUpSz6fD5425pAgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUt
ZDJjZDI2YjY5ZGYxLzEvcmNCX2dUS1F5b241TDFla0s2UXlQWTMzbmNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zYzA3ODUtYjI3My00MDcyLWE2MzUtZDJjZDI2YjY5ZGYx
LzEvWW1vb3Q4WS05cXNoU2xMUHA4UG5qYm1rQ0NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVJYMA0G
CSqGSIb3DQEBCwUAA4IBAQByXWl8GWRAyQ80kA1bxqcU3HC4J6PSiYZUQfNobif4
w0kj6lIqgZ3lrcShAH9JWUs/22FNcGsshAvZuGHA43pFzu5l1wSykUjG78EeSxyx
JUJ+pTUYjoSy2uj/EuYuWFjTa1ZbV+gbnIHo5kUMhMCyQ5KrbFhnFfajQmIoaDqJ
PxvnPd0q7F5OQe7+rpVjX4HJx7vdZ87LnTpEI9rqw1ThYMWmH9QHT76/TuAZ1Dyv
t95tx+asdw2a+9OPgdhBWb/ilkaQx+81NalVQAg/H1S+FwZZ0J9ITFfkKM9vRF2A
fVLUSUfJSu2BIBoicsWOIyQj2C4LOplmZrbpEsupIiZL
-----END CERTIFICATE-----
Generated at Mon Jan 19 23:20:47 2026 by rpki-client