This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/1v0gzSVrdpHJ1kxvOwfKSyYCpL8.roa
File:                     1v0gzSVrdpHJ1kxvOwfKSyYCpL8.roa (raw, json)
Hash identifier:          cmDo8iK0CyxoS3TeSJaKn0b54YS7ZfZ1R+BFgSwd9T4=
Subject key identifier:   D6:FD:20:CD:25:6B:76:91:C9:D6:4C:6F:3B:07:CA:4B:26:02:A4:BF
Certificate issuer:       /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial:       019B7D5C891AD8BEF49867FC617EC41991BB
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/1v0gzSVrdpHJ1kxvOwfKSyYCpL8.roa
Signing time:             Fri 02 Jan 2026 06:19:34 +0000
ROA not before:           Fri 02 Jan 2026 06:19:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42689
IP address blocks:        188.215.80.0/24 maxlen: 24
                          188.215.81.0/24 maxlen: 24
                          188.215.82.0/24 maxlen: 24
                          188.215.83.0/24 maxlen: 24
                          188.215.85.0/24 maxlen: 24
                          188.215.86.0/24 maxlen: 24
                          188.215.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:89:1a:d8:be:f4:98:67:fc:61:7e:c4:19:91:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
        Validity
            Not Before: Jan  2 06:19:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d6fd20cd256b7691c9d64c6f3b07ca4b2602a4bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7e:74:2c:1f:b8:8f:c8:78:45:89:a7:4c:54:
                    48:ad:1a:a9:6d:d6:d2:dd:37:6a:c5:b0:e9:50:2e:
                    ab:eb:6c:68:6f:33:97:82:91:57:52:73:0a:65:2d:
                    9f:9d:b5:59:f2:bb:24:d9:47:95:51:77:38:bb:fd:
                    22:e0:a1:c0:6f:e6:55:2a:5f:de:b7:47:f9:b0:cd:
                    15:a2:17:90:cb:c1:c6:50:33:06:5a:c6:6a:b8:10:
                    ff:4e:23:ae:cb:b7:83:e8:c3:2e:83:b2:24:d1:54:
                    96:17:3b:77:83:db:fd:a1:d9:88:33:a4:a7:6e:a9:
                    cc:89:78:17:14:32:61:22:05:ea:c4:a7:c2:79:56:
                    96:2b:88:1e:a8:ac:3e:7f:e6:ba:f2:ff:72:1f:c7:
                    06:a1:69:85:4e:03:26:4a:69:bc:9c:21:f7:22:5c:
                    ee:f4:ff:ae:7a:75:38:f9:29:78:29:0f:d8:1f:66:
                    16:00:04:24:07:71:82:4f:7a:73:3b:2b:ae:b6:e8:
                    41:a4:24:a9:dc:17:5a:f4:5f:7c:c5:67:35:78:d1:
                    e4:ee:f8:ac:1c:b0:e3:97:dd:e9:07:c4:cc:c9:e0:
                    35:f9:4f:e1:a4:52:b5:d5:a5:0c:97:d7:22:e6:9a:
                    43:28:f6:c1:79:71:f3:24:78:8d:51:3e:d4:ea:c1:
                    2b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FD:20:CD:25:6B:76:91:C9:D6:4C:6F:3B:07:CA:4B:26:02:A4:BF
            X509v3 Authority Key Identifier:
                keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/1v0gzSVrdpHJ1kxvOwfKSyYCpL8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.215.80.0/22
                  188.215.85.0-188.215.87.255

    Signature Algorithm: sha256WithRSAEncryption
         26:cd:a4:ec:a5:8e:b6:f4:1c:2f:2f:c6:11:c3:15:f5:b0:40:
         de:f9:40:5c:d1:02:3c:d1:6d:fa:9d:90:56:86:cf:50:b7:b6:
         a0:54:fe:8d:7c:38:7a:89:72:0e:f3:29:3d:6b:4f:5e:dc:b1:
         82:41:85:fc:b0:cf:89:15:a9:36:15:60:ec:0b:77:c9:97:50:
         ef:00:04:1b:3a:aa:8a:1c:3c:5d:32:0d:04:d2:07:76:ea:9c:
         52:39:68:a4:4f:2c:b1:b7:0f:90:dd:4e:94:55:40:ac:02:ef:
         c0:96:e7:ea:96:6d:2f:cb:f5:dc:3d:f8:7e:ff:8b:08:0b:26:
         72:e8:e5:66:3c:b0:51:21:d7:fc:8a:bf:dc:2c:0c:12:19:18:
         30:56:4b:3d:21:40:cf:25:d5:e7:13:93:50:d7:82:8e:8f:cc:
         af:e7:8f:d1:0a:1a:1b:b1:3e:f5:5d:40:d1:8a:a4:f9:ca:db:
         a1:7f:dc:e2:b8:64:2d:4b:f5:82:35:01:90:f4:81:c8:21:1c:
         93:50:9b:10:b9:2f:6e:f7:46:98:dc:1e:74:4b:86:62:7c:cd:
         8b:a3:0e:16:ef:07:ab:b9:a0:12:bb:2d:b7:e4:fd:9a:e5:68:
         c9:32:5d:65:48:2e:0d:0d:6a:2b:2c:73:5b:4a:df:e7:31:f4:
         93:79:85:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 19 23:22:01 2026 by rpki-client