This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/taxylqt92XTRMNCLEumj-gGuc9E.roa
File:                     taxylqt92XTRMNCLEumj-gGuc9E.roa (raw, json)
Hash identifier:          0T0KeKHGFppSjei5UxW0JsFkblLexOctRs4/cKSBPqQ=
Subject key identifier:   B5:AC:72:96:AB:7D:D9:74:D1:30:D0:8B:12:E9:A3:FA:01:AE:73:D1
Certificate issuer:       /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial:       019B7BA503EFA5DC80B6F95481F43E0EA371
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/taxylqt92XTRMNCLEumj-gGuc9E.roa
Signing time:             Thu 01 Jan 2026 22:19:30 +0000
ROA not before:           Thu 01 Jan 2026 22:19:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     41960
IP address blocks:        80.73.246.0/24 maxlen: 24
                          185.73.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a5:03:ef:a5:dc:80:b6:f9:54:81:f4:3e:0e:a3:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
        Validity
            Not Before: Jan  1 22:19:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b5ac7296ab7dd974d130d08b12e9a3fa01ae73d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:da:98:a0:9c:dc:27:bd:89:65:f6:d8:b4:
                    56:7f:6a:b2:b2:7a:ec:6a:86:8e:47:b9:44:9c:46:
                    f7:2d:4b:7f:ea:bc:b3:0c:bd:a8:38:27:61:7b:9f:
                    5f:d0:9a:f3:ca:51:a8:49:46:0b:d6:79:0d:bb:dd:
                    e4:ce:ae:0d:89:84:8f:41:32:3d:ad:08:10:ec:de:
                    69:2d:64:8b:9d:0d:b9:0f:43:01:44:e3:a0:2c:a1:
                    9f:ac:c6:e3:e0:4c:e1:d0:f3:09:66:44:8f:12:d9:
                    a1:be:42:69:e6:43:73:0b:21:dd:2c:4d:6e:23:04:
                    b9:3b:18:7e:02:6d:d1:8d:39:69:26:fd:e7:c1:6b:
                    3e:e8:f7:65:c1:f0:cc:74:be:b6:92:14:0f:04:b7:
                    ca:ed:1a:c7:22:15:83:75:41:5d:f6:22:02:fc:d5:
                    17:83:c7:f9:1f:24:08:2f:50:e8:a7:bb:e7:0a:1a:
                    3c:25:31:39:a6:95:ec:93:6d:7b:3d:9e:67:3d:45:
                    aa:e9:da:6b:f6:3b:0e:33:ab:49:d9:f5:29:c5:8c:
                    7a:d7:69:ca:c7:59:f3:9b:58:4d:e9:8e:75:41:a1:
                    33:f2:a1:55:0a:ce:28:e6:b6:b8:8e:b1:8b:e6:00:
                    7c:3a:8b:75:97:45:4b:d7:75:78:da:e4:91:ba:36:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AC:72:96:AB:7D:D9:74:D1:30:D0:8B:12:E9:A3:FA:01:AE:73:D1
            X509v3 Authority Key Identifier:
                keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/taxylqt92XTRMNCLEumj-gGuc9E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.246.0/24
                  185.73.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:79:27:31:4f:ff:9e:87:57:71:24:43:dc:f7:a7:f8:81:21:
         fd:3f:ee:49:87:5b:61:59:ac:9c:8f:a2:5b:4b:0f:7c:52:33:
         83:7d:ff:8a:e5:2c:02:13:91:7c:9e:2f:ec:96:bd:3f:ec:aa:
         c0:61:fa:ca:61:92:c8:31:6f:37:6f:35:0f:b4:7c:b8:40:07:
         5c:9b:d7:79:2a:d9:f2:3f:1c:2e:47:bd:2b:e8:0e:97:9f:dc:
         39:ac:7a:7f:66:00:2a:fc:62:51:21:fd:f6:b1:97:c4:ea:a9:
         5d:d9:2b:06:c9:6a:2d:1d:9b:1a:7a:8f:c6:7a:09:b7:b5:f9:
         f5:0c:e3:f3:4d:db:95:5d:0b:29:8c:6b:31:13:6d:81:70:d4:
         42:e7:bf:54:c2:15:ae:a8:54:43:83:c3:88:63:93:10:05:2b:
         ae:8c:88:dc:0b:91:ae:7d:0e:b4:d9:75:33:3b:ab:ae:03:04:
         3b:f9:48:12:94:e6:58:52:43:90:ec:f1:e2:13:5b:4f:b5:d2:
         ff:75:6d:66:69:85:10:f3:b4:7e:99:2d:bc:cc:d5:a7:83:bc:
         e6:94:5a:22:1b:95:3b:ed:15:35:8b:9a:23:d1:ac:a1:6e:44:
         5a:b4:72:a2:f3:4b:8d:98:d3:36:cf:94:d2:5e:c5:36:34:d8:
         12:3a:4b:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt7pQPvpdyAtvlUgfQ+DqNxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGMyNjE3YTM3MmU0NjZlOThkNDI1MzJkZDBiZDhlNWNk
ZDk5M2QwHhcNMjYwMTAxMjIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWFjNzI5NmFiN2RkOTc0ZDEzMGQwOGIxMmU5YTNmYTAxYWU3M2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv/amKCc3Ce9iWX22LRWf2qysnrs
aoaOR7lEnEb3LUt/6ryzDL2oOCdhe59f0JrzylGoSUYL1nkNu93kzq4NiYSPQTI9
rQgQ7N5pLWSLnQ25D0MBROOgLKGfrMbj4Ezh0PMJZkSPEtmhvkJp5kNzCyHdLE1u
IwS5Oxh+Am3RjTlpJv3nwWs+6PdlwfDMdL62khQPBLfK7RrHIhWDdUFd9iIC/NUX
g8f5HyQIL1Dop7vnCho8JTE5ppXsk217PZ5nPUWq6dpr9jsOM6tJ2fUpxYx612nK
x1nzm1hN6Y51QaEz8qFVCs4o5ra4jrGL5gB8Oot1l0VL13V42uSRujYLcQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLWscparfdl00TDQixLpo/oBrnPRMB8GA1UdIwQY
MBaAFDdMJhejcuRm6Y1CUy3QvY5c3Zk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjB3bUY2Tnk1R2JwalVKVExkQzlqbHpkbVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zODExMjUtMDI0OC00ZWJjLWE3NGQt
YjhkYWQ2ZTVjM2JmLzEvdGF4eWxxdDkyWFRSTU5DTEV1bWotZ0d1YzlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8zODExMjUtMDI0OC00ZWJjLWE3NGQtYjhkYWQ2ZTVjM2Jm
LzEvTjB3bUY2Tnk1R2JwalVKVExkQzlqbHpkbVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEn2AwQA
uUlfMA0GCSqGSIb3DQEBCwUAA4IBAQBIeScxT/+eh1dxJEPc96f4gSH9P+5Jh1th
Waycj6JbSw98UjODff+K5SwCE5F8ni/slr0/7KrAYfrKYZLIMW83bzUPtHy4QAdc
m9d5KtnyPxwuR70r6A6Xn9w5rHp/ZgAq/GJRIf32sZfE6qld2SsGyWotHZsaeo/G
egm3tfn1DOPzTduVXQspjGsxE22BcNRC579UwhWuqFRDg8OIY5MQBSuujIjcC5Gu
fQ602XUzO6uuAwQ7+UgSlOZYUkOQ7PHiE1tPtdL/dW1maYUQ87R+mS28zNWng7zm
lFoiG5U77RU1i5oj0ayhbkRatHKi80uNmNM2z5TSXsU2NNgSOkuq
-----END CERTIFICATE-----
Generated at Mon Jan 26 23:46:46 2026 by rpki-client