This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/1-_QB6kqNuq0Epgoo3t_2w_j1XMc.roa
File:                     1-_QB6kqNuq0Epgoo3t_2w_j1XMc.roa (raw, json)
Hash identifier:          ZjDRguZyQdRbgGDx2inGal0RnrWBMwUNKvj3z1ggLfA=
Subject key identifier:   FB:F4:01:EA:4A:8D:BA:AD:04:A6:0A:28:DE:DF:F6:C3:F8:F5:5C:C7
Certificate issuer:       /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial:       019B77C6776AF8D2E1BB4C4A5E9F68443E65
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/1-_QB6kqNuq0Epgoo3t_2w_j1XMc.roa
Signing time:             Thu 01 Jan 2026 04:17:33 +0000
ROA not before:           Thu 01 Jan 2026 04:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43754
IP address blocks:        185.132.80.0/22 maxlen: 22
                          185.132.80.0/23 maxlen: 23
                          185.132.80.0/24 maxlen: 24
                          185.132.81.0/24 maxlen: 24
                          185.132.82.0/23 maxlen: 23
                          185.132.82.0/24 maxlen: 24
                          185.132.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:77:6a:f8:d2:e1:bb:4c:4a:5e:9f:68:44:3e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
        Validity
            Not Before: Jan  1 04:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fbf401ea4a8dbaad04a60a28dedff6c3f8f55cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5a:8f:de:df:61:25:f9:ad:fe:b4:44:84:e7:
                    2d:00:f0:04:99:5d:01:98:e2:38:40:64:b8:5a:99:
                    2c:71:4a:8e:49:06:d6:20:16:17:8c:9b:2e:0a:df:
                    35:01:b3:1c:2d:eb:b3:eb:0d:d4:ce:32:b4:22:d0:
                    ab:dd:19:a6:34:5e:60:25:7a:e9:9b:ad:c3:ea:39:
                    aa:7b:df:cd:d4:ae:a5:f0:a4:98:4c:81:40:1b:5d:
                    24:69:27:37:66:bd:73:8a:ee:78:c2:55:86:9c:d6:
                    0e:be:90:6f:2b:52:61:cd:b6:85:63:c8:0c:ef:55:
                    0b:81:35:7e:84:27:6a:14:5e:77:15:2a:f6:81:d4:
                    d7:42:03:7e:62:70:a5:52:4e:3d:7a:43:3d:54:b7:
                    3e:62:3f:7a:f7:81:7a:81:23:40:66:1c:7c:6d:53:
                    9b:93:09:9a:10:bb:4e:30:50:57:d3:5a:6b:03:04:
                    50:5a:fa:47:1d:fc:8c:95:46:01:f0:64:94:26:a0:
                    93:bc:2e:99:3c:f7:19:8a:82:85:73:a8:71:11:60:
                    1b:f4:d1:bf:8c:69:79:c7:db:1a:1f:00:e0:bf:56:
                    45:3e:68:45:a5:69:c6:a8:b2:27:8b:62:db:f4:df:
                    36:9e:40:23:b3:b7:67:bd:1d:47:75:ff:e6:de:35:
                    20:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F4:01:EA:4A:8D:BA:AD:04:A6:0A:28:DE:DF:F6:C3:F8:F5:5C:C7
            X509v3 Authority Key Identifier:
                keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/1-_QB6kqNuq0Epgoo3t_2w_j1XMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.132.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:59:eb:c1:ff:3c:85:a1:27:68:23:4b:98:23:bb:ae:8e:09:
         8a:46:74:c1:d6:67:5c:ef:24:b5:a2:17:4d:5c:a5:65:31:41:
         e0:01:ef:41:91:35:9b:e9:71:13:7a:6c:10:b1:3c:a4:f8:a0:
         ff:27:66:42:a8:4e:0f:48:8b:ad:4a:f6:f3:a6:12:fc:b3:be:
         72:35:e9:90:9e:57:b3:9d:c0:5e:16:3d:40:52:11:b5:6d:0f:
         d2:74:24:01:91:a6:90:27:6e:d3:54:3a:10:ba:65:8d:b1:57:
         00:ed:fa:d3:bc:67:ed:c8:9e:5d:49:e0:d4:de:8b:8a:7e:92:
         4e:cb:2a:71:5e:10:20:f9:97:0d:c8:0e:f9:2a:f5:9e:65:1f:
         0f:b8:55:e6:6d:d2:57:c9:3c:52:a6:88:1b:66:e2:a8:ad:a5:
         55:f8:a8:85:49:03:26:79:2e:55:97:58:50:c3:4c:23:44:1c:
         76:8e:ff:83:ce:04:d5:b2:56:e8:af:56:cf:2c:6f:ce:fb:c9:
         4f:23:01:49:3a:ca:14:9b:f5:b6:b5:50:96:df:48:10:77:e4:
         c4:a3:fd:55:cf:37:03:d4:23:1c:04:a1:e5:8e:db:e4:f6:6c:
         52:e6:7b:90:21:31:f7:65:32:c8:4f:d2:4a:c6:c7:15:50:58:
         1c:0c:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:00:56 2026 by rpki-client