This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/FMytXTkalgyla6hJFj4eKXqjzf4.roa
File:                     FMytXTkalgyla6hJFj4eKXqjzf4.roa (raw, json)
Hash identifier:          uaDRTElD/eQeLBmpMs0iWQkiUkgTUHVvQqy46V1pRPI=
Subject key identifier:   14:CC:AD:5D:39:1A:96:0C:A5:6B:A8:49:16:3E:1E:29:7A:A3:CD:FE
Certificate issuer:       /CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Certificate serial:       019B7AC7BDA4F938E1E3E60CE65676FC4FE9
Authority key identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/FMytXTkalgyla6hJFj4eKXqjzf4.roa
Signing time:             Thu 01 Jan 2026 18:17:49 +0000
ROA not before:           Thu 01 Jan 2026 18:17:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35280
IP address blocks:        185.110.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:bd:a4:f9:38:e1:e3:e6:0c:e6:56:76:fc:4f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
        Validity
            Not Before: Jan  1 18:17:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=14ccad5d391a960ca56ba849163e1e297aa3cdfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:16:ee:3a:6b:08:d7:f9:dd:0f:bc:12:20:19:
                    93:55:1d:93:4b:5f:28:f4:a7:5a:e4:a1:57:f9:76:
                    13:c4:b9:28:55:d9:42:88:40:ff:6b:93:9d:2e:58:
                    99:b6:2d:ea:44:f4:81:95:a5:06:e9:7f:d9:be:35:
                    0c:ea:77:b4:28:df:bd:88:74:82:1d:90:87:0f:1f:
                    e0:f7:b6:2e:cc:4e:df:21:e7:83:45:25:3f:cf:26:
                    b2:ec:1d:83:87:1f:ec:f7:c0:f9:8e:fc:69:33:86:
                    cf:b4:76:b7:ce:0f:4e:0f:e0:46:7c:86:ab:87:53:
                    46:11:ba:2a:92:b9:79:8c:40:bb:8c:aa:67:4f:08:
                    68:45:72:dc:79:54:cc:94:c9:91:98:7b:f9:e6:69:
                    df:08:3a:bd:b1:b9:7c:2e:f3:aa:02:a9:78:05:e2:
                    a0:e4:27:5f:6c:8d:e8:9e:2e:a4:2d:7a:bf:6a:ea:
                    bc:ca:a6:c8:27:a8:ac:da:91:4f:21:36:ba:70:16:
                    18:61:53:d3:e6:e9:9e:cd:d3:21:1d:09:a0:c1:79:
                    4b:ba:3b:eb:a5:5b:e4:8b:a9:c9:41:ac:0c:93:9e:
                    86:38:78:84:ab:e8:15:9a:ad:b0:fa:84:51:33:18:
                    9b:57:67:a6:ef:05:fb:35:5b:33:d1:b2:59:02:bb:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CC:AD:5D:39:1A:96:0C:A5:6B:A8:49:16:3E:1E:29:7A:A3:CD:FE
            X509v3 Authority Key Identifier:
                keyid:8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/FMytXTkalgyla6hJFj4eKXqjzf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.110.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:ad:8d:46:fc:7c:58:63:c2:4f:06:bb:0b:73:bd:34:3a:ad:
         a8:4d:3c:8a:a0:bb:73:b9:b4:9e:48:af:b9:21:7f:d8:40:95:
         8f:c5:f0:f8:e1:20:63:1c:b0:77:89:ff:7d:09:ef:8f:0d:c2:
         d6:74:cd:e3:c0:90:92:72:52:5f:e0:5d:a6:5f:7a:44:18:c7:
         69:f3:3b:46:02:e4:cc:ff:a3:a4:ac:1f:7e:b1:9c:9a:fd:7a:
         c7:5d:00:e3:63:44:24:33:82:c8:6d:03:86:8c:85:74:7b:28:
         a9:66:cf:05:fc:67:ed:6c:5a:87:56:15:8e:ea:d4:06:3a:82:
         b5:3c:bf:e2:9b:18:43:7c:de:a8:17:24:76:a0:85:df:6a:8e:
         d1:3c:c1:35:79:27:a5:dc:5c:63:50:75:de:89:ce:e2:f1:ce:
         96:c4:a9:1e:78:40:3a:08:e8:5a:5c:45:b1:46:57:9d:a6:d4:
         2c:6b:5b:fb:81:76:0d:89:53:4e:69:9d:b8:9f:cc:66:36:c0:
         ef:10:27:d3:b6:ea:d7:91:a7:42:e4:ab:61:ab:42:74:b5:f6:
         c3:ff:b2:66:f4:74:cf:02:fe:f1:0b:8f:d2:a2:8d:80:3a:98:
         fa:dc:cd:97:bc:06:d4:90:a8:78:7d:17:a1:c8:34:5b:ce:83:
         45:34:23:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6x72k+Tjh4+YM5lZ2/E/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhM2VjMDUzNzI0MmY0NGNlN2Q1OTMzZTliMzIyMDRiM2Y4
NWU5OWYwHhcNMjYwMTAxMTgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGNjYWQ1ZDM5MWE5NjBjYTU2YmE4NDkxNjNlMWUyOTdhYTNjZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRbuOmsI1/ndD7wSIBmTVR2TS18o
9Kda5KFX+XYTxLkoVdlCiED/a5OdLliZti3qRPSBlaUG6X/ZvjUM6ne0KN+9iHSC
HZCHDx/g97YuzE7fIeeDRSU/zyay7B2Dhx/s98D5jvxpM4bPtHa3zg9OD+BGfIar
h1NGEboqkrl5jEC7jKpnTwhoRXLceVTMlMmRmHv55mnfCDq9sbl8LvOqAql4BeKg
5CdfbI3oni6kLXq/auq8yqbIJ6is2pFPITa6cBYYYVPT5umezdMhHQmgwXlLujvr
pVvki6nJQawMk56GOHiEq+gVmq2w+oRRMxibV2em7wX7NVsz0bJZAruDPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBTMrV05GpYMpWuoSRY+Hil6o83+MB8GA1UdIwQY
MBaAFIo+wFNyQvRM59WTPpsyIEs/hemfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWo3QVUzSkM5RXpuMVpNLW16SWdTei1GNlo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZWIwMDItZDI2YS00NmQ2LTlkODct
ODQwOTMwNjFlOWZmLzEvRk15dFhUa2FsZ3lsYTZoSkZqNGVLWHFqemY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85ZWIwMDItZDI2YS00NmQ2LTlkODctODQwOTMwNjFlOWZm
LzEvaWo3QVUzSkM5RXpuMVpNLW16SWdTei1GNlo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuW5jMA0G
CSqGSIb3DQEBCwUAA4IBAQA0rY1G/HxYY8JPBrsLc700Oq2oTTyKoLtzubSeSK+5
IX/YQJWPxfD44SBjHLB3if99Ce+PDcLWdM3jwJCSclJf4F2mX3pEGMdp8ztGAuTM
/6OkrB9+sZya/XrHXQDjY0QkM4LIbQOGjIV0eyipZs8F/GftbFqHVhWO6tQGOoK1
PL/imxhDfN6oFyR2oIXfao7RPME1eSel3FxjUHXeic7i8c6WxKkeeEA6COhaXEWx
RledptQsa1v7gXYNiVNOaZ24n8xmNsDvECfTturXkadC5Kthq0J0tfbD/7Jm9HTP
Av7xC4/Soo2AOpj63M2XvAbUkKh4fRehyDRbzoNFNCPC
-----END CERTIFICATE-----
Generated at Tue Jan 20 08:02:39 2026 by rpki-client