This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/_R9reWa8MF6i_0GtsC9MqO5XdM0.roa
File:                     _R9reWa8MF6i_0GtsC9MqO5XdM0.roa (raw, json)
Hash identifier:          RpCmFg94gtFIxSyeDWhJqoErRSnSfBXY9f+R3zExZ1k=
Subject key identifier:   FD:1F:6B:79:66:BC:30:5E:A2:FF:41:AD:B0:2F:4C:A8:EE:57:74:CD
Certificate issuer:       /CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
Certificate serial:       019B7AC7B4E2568E58CEB98248C1868F9FE2
Authority key identifier: AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/_R9reWa8MF6i_0GtsC9MqO5XdM0.roa
Signing time:             Thu 01 Jan 2026 18:17:46 +0000
ROA not before:           Thu 01 Jan 2026 18:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35525
IP address blocks:        185.164.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:b4:e2:56:8e:58:ce:b9:82:48:c1:86:8f:9f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
        Validity
            Not Before: Jan  1 18:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fd1f6b7966bc305ea2ff41adb02f4ca8ee5774cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:33:c1:37:1a:01:cc:fb:52:8d:2f:96:db:
                    a7:01:e0:f6:11:65:26:46:83:9f:4e:93:3f:84:9a:
                    13:53:e7:75:a6:8d:26:b0:c1:5b:04:bc:a8:5e:e9:
                    88:94:ca:a1:05:df:c8:5e:9a:04:a9:4c:50:7d:69:
                    35:0e:57:38:f2:a9:be:23:f2:4c:14:5f:6b:1d:f6:
                    74:8f:60:af:17:e2:d3:9d:49:fe:e9:d4:ff:8d:03:
                    e0:32:26:9f:10:f5:dd:e5:6a:ee:2d:2e:28:31:8e:
                    82:cd:5b:fe:d0:43:55:87:4b:b7:d2:61:5b:a6:6a:
                    ac:97:16:c5:4b:30:d4:d5:d0:58:22:67:84:b2:6b:
                    08:35:84:a9:19:cf:b1:fc:8f:13:1f:d6:2e:ea:0c:
                    9e:a9:69:b0:7c:3a:83:66:be:56:38:26:09:d2:52:
                    46:97:af:d8:6c:8b:d1:cb:5c:50:39:c0:7c:13:92:
                    f8:58:c7:b3:50:ee:3a:af:f8:c3:1a:06:78:97:97:
                    05:75:50:96:84:e5:c2:c7:f3:d8:40:5e:ca:64:10:
                    0e:23:36:06:a6:75:54:c7:07:dc:3e:c9:98:67:d3:
                    fb:c9:78:24:6c:f7:b3:f1:20:57:92:66:0c:77:c9:
                    7e:a7:04:87:4e:ee:b3:eb:0a:f0:92:3b:c6:fb:38:
                    62:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1F:6B:79:66:BC:30:5E:A2:FF:41:AD:B0:2F:4C:A8:EE:57:74:CD
            X509v3 Authority Key Identifier:
                keyid:AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/_R9reWa8MF6i_0GtsC9MqO5XdM0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.164.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:97:9f:60:b2:6e:f3:d7:1a:c2:1e:89:e1:1d:37:34:26:6a:
         5e:55:ea:ba:2c:8d:3c:86:11:f4:15:cd:c5:66:61:23:d0:c7:
         60:b2:ed:3e:8a:2c:e6:e2:d3:66:33:27:20:f9:ac:72:b6:36:
         dc:cf:bc:4f:0f:55:75:8c:0a:94:9f:85:e2:f1:27:61:0e:b5:
         c2:cd:4b:02:e4:02:cd:12:d6:fb:14:56:db:3e:5a:42:5c:d5:
         9a:d2:88:73:4f:64:91:e8:2f:c7:e5:d6:9f:92:6d:92:26:c8:
         bd:82:84:1d:0c:af:3a:d9:20:ab:53:f7:d0:59:f9:fc:6a:59:
         67:e3:3d:31:d0:85:34:65:8f:1c:92:74:ce:36:85:61:04:9c:
         42:e4:92:5b:b4:59:ce:b8:e9:26:1b:34:1c:d0:e9:d6:5f:fa:
         d0:32:75:cc:b7:fd:ed:ae:3d:72:93:5a:9f:fb:4b:82:8b:66:
         0b:ac:ea:c2:94:03:a3:f4:3e:ef:9a:43:16:01:1e:7b:ed:59:
         f6:7d:be:ff:a3:b7:4f:67:97:55:1c:c8:af:b6:1b:f5:07:ff:
         ea:80:97:8e:03:fb:6b:15:70:b4:c9:e0:c2:b7:20:2d:b0:c7:
         1d:d6:09:24:17:70:b4:16:8c:84:7f:d3:fa:54:d8:e7:2b:b9:
         da:e7:40:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:28 2026 by rpki-client