This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8AlttPefGQBL8VaIXpZB3vyQ5Gk.roa
File:                     8AlttPefGQBL8VaIXpZB3vyQ5Gk.roa (raw, json)
Hash identifier:          eZRLPy3GAEqwIecDv/UI8Q58qNhip8+NNLWRYJG/8V0=
Subject key identifier:   F0:09:6D:B4:F7:9F:19:00:4B:F1:56:88:5E:96:41:DE:FC:90:E4:69
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019B7C1329D0D09A8A7A14F291348E303138
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8AlttPefGQBL8VaIXpZB3vyQ5Gk.roa
Signing time:             Fri 02 Jan 2026 00:19:49 +0000
ROA not before:           Fri 02 Jan 2026 00:19:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60711
IP address blocks:        185.226.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:29:d0:d0:9a:8a:7a:14:f2:91:34:8e:30:31:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  2 00:19:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f0096db4f79f19004bf156885e9641defc90e469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:8e:0a:b2:71:fe:92:93:2a:74:8c:36:a0:
                    a8:4b:32:8c:6b:49:d5:82:cd:cb:bd:3e:45:4d:cc:
                    be:a2:25:7a:53:51:f5:db:0b:84:bd:30:d6:04:da:
                    f3:6a:dd:b1:b3:b4:9f:b3:c3:e3:af:ff:35:22:bd:
                    b7:1b:59:d9:3e:b9:8a:6f:f7:b8:00:c2:8d:82:2d:
                    68:3b:27:27:7a:af:ea:fb:2d:1b:de:1c:97:e9:03:
                    63:76:05:d8:3a:04:8e:f7:dd:c1:ca:6d:12:ad:ed:
                    f9:b5:86:55:d8:12:d4:69:11:c0:5b:39:24:d4:45:
                    8d:9c:59:a8:2a:e3:a0:e1:50:fb:5d:52:76:51:5a:
                    ab:53:f4:29:b9:7d:2e:da:22:f4:0a:99:ad:f2:fa:
                    1f:f2:3b:0e:8e:1a:ed:c4:06:c2:d8:6a:a0:e6:1a:
                    a6:23:30:71:e6:7e:76:ad:91:2b:e3:03:3c:b0:fc:
                    a8:0c:57:51:55:24:36:2b:a3:f9:83:91:a7:55:ae:
                    0e:dd:b8:8a:ba:1b:9f:93:5f:b7:74:91:11:22:42:
                    d9:31:7c:81:f6:f1:34:22:c9:20:2d:b6:77:9d:6a:
                    ba:3d:45:2d:6d:88:87:ad:6d:69:15:8b:4d:89:c9:
                    4a:a3:f4:64:26:a5:60:8a:60:91:84:a8:d3:6c:33:
                    7f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:09:6D:B4:F7:9F:19:00:4B:F1:56:88:5E:96:41:DE:FC:90:E4:69
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/8AlttPefGQBL8VaIXpZB3vyQ5Gk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.226.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:f1:98:e6:d8:1a:85:d2:5c:f2:16:14:80:45:78:88:6f:71:
         ec:e2:c8:ab:44:76:af:a3:9a:3a:22:db:21:32:26:42:a5:31:
         4b:c3:34:22:fd:66:d3:ef:3e:b0:6f:25:04:7f:98:4a:ef:ac:
         80:75:88:33:78:b4:95:42:3b:87:f9:a7:78:e8:c1:2b:e1:0a:
         fa:de:68:43:0d:d9:17:16:ed:7d:d2:4b:b8:ff:3a:af:68:9d:
         8a:22:5e:d5:f2:b1:f4:a5:1d:67:7a:5c:0d:39:06:b5:1f:a2:
         10:31:5a:25:14:fd:7c:55:6a:81:3c:30:7e:3a:10:5f:4e:5c:
         ce:3f:5e:f1:64:c2:bc:58:54:0c:41:da:7a:de:da:a0:37:f2:
         91:d6:0c:9e:97:e3:53:bf:f0:dc:6f:73:57:d8:17:52:cc:e7:
         fe:3b:dd:a7:31:e2:cd:8c:b0:32:86:b6:6b:8d:71:fd:cd:1a:
         c7:22:c4:47:04:92:be:ca:47:73:a2:b3:ba:e1:ae:19:4c:c9:
         2a:ee:35:2d:ee:e5:b7:99:91:c3:87:5d:00:4d:56:53:e9:e0:
         c3:06:59:eb:1d:8a:2a:39:56:c0:a3:4c:9e:f7:80:6f:ea:90:
         62:f5:09:1e:82:ee:3d:88:19:d8:f3:3b:a2:83:77:77:d2:68:
         c3:a9:b5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:35:34 2026 by rpki-client