This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/r50bqW5SnPNE9WQYYRLDyXwjtZc.roa
File:                     r50bqW5SnPNE9WQYYRLDyXwjtZc.roa (raw, json)
Hash identifier:          up7vGtBh2DqMmPO7x5Q3VURAhNEUmEQqjy49vJmJas0=
Subject key identifier:   AF:9D:1B:A9:6E:52:9C:F3:44:F5:64:18:61:12:C3:C9:7C:23:B5:97
Certificate issuer:       /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial:       019BA2785FAE23D12ACE5032478D3A222A2F
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/r50bqW5SnPNE9WQYYRLDyXwjtZc.roa
Signing time:             Fri 09 Jan 2026 11:15:56 +0000
ROA not before:           Fri 09 Jan 2026 11:15:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62425
IP address blocks:        185.229.12.0/24 maxlen: 24
                          185.231.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a2:78:5f:ae:23:d1:2a:ce:50:32:47:8d:3a:22:2a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
        Validity
            Not Before: Jan  9 11:15:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=af9d1ba96e529cf344f564186112c3c97c23b597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:53:11:fa:1c:f1:92:3b:83:a4:3e:07:1e:bc:
                    1a:05:0a:58:01:ce:21:48:d3:a5:a8:95:1e:d0:bb:
                    73:07:30:70:ae:af:cd:1b:1b:ff:a3:16:74:54:a7:
                    47:d2:96:65:93:36:9d:55:38:3d:39:bb:f8:3d:bc:
                    36:86:00:60:66:e9:33:9e:34:5e:42:47:3f:a0:97:
                    d4:f9:6f:4c:91:68:17:ed:f6:f3:28:c9:26:a5:11:
                    0b:bf:12:e3:b6:8e:37:c1:c0:23:d1:82:ec:19:57:
                    0c:60:50:da:ed:7c:5c:9d:2a:4f:38:7e:0f:71:93:
                    c9:33:95:c4:e1:2c:8d:34:35:96:19:1d:a2:61:4b:
                    8d:c7:5a:c6:44:f3:f5:e7:8c:7a:f9:f3:13:b7:01:
                    9f:02:b0:1e:98:98:5d:da:db:bd:45:0d:55:cb:d5:
                    15:bd:20:86:4c:03:d1:34:64:08:09:ce:57:32:db:
                    7c:46:a6:35:4f:a0:7d:55:01:d9:c4:6d:66:38:14:
                    87:db:da:df:9b:c3:fd:83:2f:63:39:5e:9b:ef:e0:
                    9e:0d:60:f3:da:28:6a:6e:8c:c1:8f:1c:1c:03:40:
                    ae:c4:e8:4f:cd:f5:10:05:7b:6c:28:64:7e:0c:38:
                    3b:87:6f:ba:77:9e:c2:02:c3:42:fa:14:1b:57:f1:
                    c8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9D:1B:A9:6E:52:9C:F3:44:F5:64:18:61:12:C3:C9:7C:23:B5:97
            X509v3 Authority Key Identifier:
                keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/r50bqW5SnPNE9WQYYRLDyXwjtZc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.229.12.0/24
                  185.231.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:99:a4:f3:9d:4b:c9:4d:ea:7b:50:fa:15:8f:93:9e:42:c5:
         ef:52:17:15:7a:48:55:20:99:aa:f3:6b:d6:c9:8d:02:6c:52:
         40:c2:20:2d:25:0a:64:54:0a:43:5f:26:b0:23:06:05:bb:ff:
         31:9a:c9:62:90:59:95:dc:53:9d:97:50:73:16:b4:27:c6:6b:
         e3:d4:f7:a0:3c:c6:28:c4:56:2c:5e:8b:f5:a3:b3:bb:5c:05:
         8c:af:fa:0e:56:ff:46:59:3b:ca:07:5a:31:03:45:88:64:21:
         a7:a5:6f:31:8b:0c:a1:bb:c3:31:c3:11:b8:b4:90:60:31:56:
         fb:25:94:96:bd:01:7d:b7:69:63:15:fa:a0:55:48:ee:e8:8f:
         e3:83:52:d6:af:48:90:db:b2:54:2f:e6:27:77:62:fc:49:2c:
         60:5b:e8:49:0b:a5:e0:1d:dc:1c:21:76:4b:d2:16:78:7e:cb:
         66:b9:47:f0:cf:e1:bb:e4:d8:7f:85:5d:14:ee:4e:59:e5:6b:
         29:1b:a1:be:99:30:ac:b7:cb:02:ed:e7:f8:75:a4:95:64:0f:
         e8:fd:4a:18:a4:a7:9d:6f:3e:0c:f9:02:dd:9b:3b:2c:44:22:
         94:e2:0c:89:13:8f:13:26:05:b9:63:27:3b:39:60:87:f5:8b:
         0e:8c:cc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:49:51 2026 by rpki-client