This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/1KySW6Ro-K6j0ocElPKZRtuE5Ao.roa
File:                     1KySW6Ro-K6j0ocElPKZRtuE5Ao.roa (raw, json)
Hash identifier:          dWyTpT0UPgzBjyIAGYHP0a0Cm+BwtjLbW4C9xN5de58=
Subject key identifier:   D4:AC:92:5B:A4:68:F8:AE:A3:D2:87:04:94:F2:99:46:DB:84:E4:0A
Certificate issuer:       /CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Certificate serial:       019B7CEDB5FB405BA76B5D09D63F89E7F1C6
Authority key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/1KySW6Ro-K6j0ocElPKZRtuE5Ao.roa
Signing time:             Fri 02 Jan 2026 04:18:31 +0000
ROA not before:           Fri 02 Jan 2026 04:18:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     64396
IP address blocks:        185.167.80.0/22 maxlen: 24
                          2a0b:5200::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:b5:fb:40:5b:a7:6b:5d:09:d6:3f:89:e7:f1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
        Validity
            Not Before: Jan  2 04:18:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d4ac925ba468f8aea3d2870494f29946db84e40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e2:0f:f1:15:74:e5:9f:d8:3b:ab:d7:e8:f2:
                    47:df:2a:b3:62:ff:94:b9:12:59:81:d6:42:5a:78:
                    f5:73:0d:d7:2b:7c:c3:53:a6:a8:01:7e:d8:cd:15:
                    81:d5:5b:54:08:49:d9:ab:7d:1f:a6:89:05:da:0a:
                    f9:9e:64:e8:2b:eb:50:ee:e6:7a:fa:c7:e7:ab:e8:
                    f9:ab:1b:3e:0c:5a:e6:d3:86:70:14:fc:45:84:df:
                    66:50:65:76:36:71:42:4e:4e:6f:59:ec:45:98:9c:
                    aa:db:0b:b9:bc:48:11:5d:e9:87:f7:0f:86:cd:59:
                    c5:6f:d7:85:4d:53:09:be:30:37:5c:38:ed:ba:c3:
                    99:d3:37:06:67:6c:f0:bd:a6:15:3c:24:06:dd:ba:
                    ed:47:f7:b6:50:c7:9c:4e:77:42:28:f5:f1:d3:eb:
                    d2:42:3e:fc:b7:2a:35:55:38:4e:e3:25:5e:32:03:
                    95:df:ac:74:90:35:7d:ba:66:c0:70:84:64:1d:7e:
                    9c:f6:9e:25:20:7c:88:1c:3e:2d:80:0b:03:b8:0a:
                    1d:6c:d6:fe:cb:f2:dd:51:19:3d:39:fa:93:4b:95:
                    3f:79:4c:ee:b6:77:80:60:dc:6d:c9:25:73:56:4b:
                    47:da:2e:7f:b7:09:f4:a7:f9:2f:76:c0:27:bc:4e:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AC:92:5B:A4:68:F8:AE:A3:D2:87:04:94:F2:99:46:DB:84:E4:0A
            X509v3 Authority Key Identifier:
                keyid:26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/1KySW6Ro-K6j0ocElPKZRtuE5Ao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.80.0/22
                IPv6:
                  2a0b:5200::/29

    Signature Algorithm: sha256WithRSAEncryption
         73:14:59:7e:35:1c:0f:35:40:65:5c:d8:ab:e6:39:5e:a0:53:
         3f:3c:0e:30:2f:e9:40:0d:df:85:9d:d8:e8:03:9d:29:1d:fe:
         61:65:2c:d1:38:cc:62:78:91:4c:31:03:d9:39:69:58:2c:28:
         1a:68:ca:cd:10:23:d3:ff:f3:3c:36:b4:3f:a1:ba:fa:8d:19:
         d0:e0:1f:ca:ba:3f:9c:1e:3c:11:c1:7b:67:5a:72:e6:06:94:
         2e:b9:c9:5e:cc:2b:7f:7e:20:e5:39:9d:21:5c:2b:74:c1:f7:
         39:d6:56:f2:c1:d9:1e:e2:a3:5d:22:fa:97:2c:99:26:65:35:
         d8:08:57:e3:be:79:b6:bc:48:82:b4:70:fb:98:ba:5a:c5:e7:
         ff:6b:8e:ed:2b:c6:81:35:ff:91:31:12:81:6d:8d:47:60:19:
         f1:e7:56:ab:c9:fa:17:39:86:13:82:16:c3:0b:08:84:65:33:
         79:a3:69:22:84:57:f1:2b:1b:26:09:08:40:04:79:c0:64:4f:
         36:d1:e9:02:07:43:57:84:10:df:be:76:6c:05:4b:3f:da:2d:
         7d:c5:75:3a:f9:7b:64:8f:dd:e1:82:19:c3:a7:51:5b:3f:1b:
         69:63:bc:a3:d1:10:3a:0e:f1:73:a6:12:04:d6:0e:f1:94:e7:
         6c:05:bb:2e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt87bX7QFuna10J1j+J5/HGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OThhNTc1NGRlZTllZWY2ZjIyNDU2MmNiODIzOWFjOGJk
YjA1YjgwHhcNMjYwMTAyMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGFjOTI1YmE0NjhmOGFlYTNkMjg3MDQ5NGYyOTk0NmRiODRlNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uIP8RV05Z/YO6vX6PJH3yqzYv+U
uRJZgdZCWnj1cw3XK3zDU6aoAX7YzRWB1VtUCEnZq30fpokF2gr5nmToK+tQ7uZ6
+sfnq+j5qxs+DFrm04ZwFPxFhN9mUGV2NnFCTk5vWexFmJyq2wu5vEgRXemH9w+G
zVnFb9eFTVMJvjA3XDjtusOZ0zcGZ2zwvaYVPCQG3brtR/e2UMecTndCKPXx0+vS
Qj78tyo1VThO4yVeMgOV36x0kDV9umbAcIRkHX6c9p4lIHyIHD4tgAsDuAodbNb+
y/LdURk9OfqTS5U/eUzutneAYNxtySVzVktH2i5/twn0p/kvdsAnvE6V5wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNSsklukaPiuo9KHBJTymUbbhOQKMB8GA1UdIwQY
MBaAFCaYpXVN7p7vbyJFYsuCOayL2wW4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnBpbGRVM3VudTl2SWtWaXk0STVySXZiQmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YjhiNmYtZTQ0Yy00OWNiLThjOTMt
MGYwODU1OWQ3ZDE4LzEvMUt5U1c2Um8tSzZqMG9jRWxQS1pSdHVFNUFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83YjhiNmYtZTQ0Yy00OWNiLThjOTMtMGYwODU1OWQ3ZDE4
LzEvSnBpbGRVM3VudTl2SWtWaXk0STVySXZiQmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuadQMA0E
AgACMAcDBQMqC1IAMA0GCSqGSIb3DQEBCwUAA4IBAQBzFFl+NRwPNUBlXNir5jle
oFM/PA4wL+lADd+FndjoA50pHf5hZSzROMxieJFMMQPZOWlYLCgaaMrNECPT//M8
NrQ/obr6jRnQ4B/Kuj+cHjwRwXtnWnLmBpQuuclezCt/fiDlOZ0hXCt0wfc51lby
wdke4qNdIvqXLJkmZTXYCFfjvnm2vEiCtHD7mLpaxef/a47tK8aBNf+RMRKBbY1H
YBnx51aryfoXOYYTghbDCwiEZTN5o2kihFfxKxsmCQhABHnAZE820ekCB0NXhBDf
vnZsBUs/2i19xXU6+Xtkj93hghnDp1FbPxtpY7yj0RA6DvFzphIE1g7xlOdsBbsu
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:35:38 2026 by rpki-client