This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/80iCgpPXOpxj2QuyhWAAhLXssPg.roa
File:                     80iCgpPXOpxj2QuyhWAAhLXssPg.roa (raw, json)
Hash identifier:          R9I/2lsnefslGYRmmPeJiUGqHF+AhkybIV+mxlt9CnQ=
Subject key identifier:   F3:48:82:82:93:D7:3A:9C:63:D9:0B:B2:85:60:00:84:B5:EC:B0:F8
Certificate issuer:       /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial:       019C232A0E0FD0474DA521F2BFCB067D8632
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/80iCgpPXOpxj2QuyhWAAhLXssPg.roa
Signing time:             Tue 03 Feb 2026 11:01:24 +0000
ROA not before:           Tue 03 Feb 2026 11:01:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205719
IP address blocks:        88.210.62.0/24 maxlen: 24
                          216.162.45.0/24 maxlen: 24
                          2a14:a087:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 14:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:23:2a:0e:0f:d0:47:4d:a5:21:f2:bf:cb:06:7d:86:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
        Validity
            Not Before: Feb  3 11:01:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f348828293d73a9c63d90bb285600084b5ecb0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:25:9c:41:3b:53:1b:cd:f7:98:f1:7d:b6:22:
                    b0:8c:43:31:3e:8c:a1:df:7e:78:f1:1a:e0:a4:2a:
                    9c:93:48:dd:03:31:55:49:5d:3d:48:20:35:6f:ef:
                    e0:82:55:89:8c:20:a5:66:e8:f2:d9:8f:57:d8:aa:
                    30:b6:1f:d0:bd:9d:44:e1:87:0c:d2:33:2c:82:0d:
                    d9:40:f3:9d:45:f6:b8:2a:a4:e1:c7:52:0e:7c:3f:
                    0f:b0:48:b3:42:ca:10:27:a0:51:f8:b2:0f:43:c3:
                    7a:4e:18:d6:55:7e:07:07:28:db:09:76:07:84:c8:
                    69:e9:8b:97:23:f3:73:d2:72:dd:d5:0c:5a:c9:c1:
                    a9:b4:9f:e2:f9:a2:a4:7d:a2:79:9b:17:a5:0b:60:
                    d7:ac:a1:87:f5:52:37:e2:ba:54:4e:0c:29:3d:c5:
                    ed:79:df:8f:38:d1:15:6b:ab:f2:21:83:16:1b:6c:
                    3d:c5:9c:53:a7:f9:8f:2d:b5:e7:be:6f:1d:f7:c7:
                    af:ea:78:e0:41:0d:05:68:26:67:82:83:74:e6:cd:
                    07:4c:e3:e3:90:6f:e6:58:fa:4d:1e:57:06:d9:2b:
                    7a:ab:da:33:e5:ed:6f:d0:46:97:7b:02:58:be:94:
                    28:8e:6e:13:e3:4b:57:5f:5f:52:09:a6:3f:79:7c:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:48:82:82:93:D7:3A:9C:63:D9:0B:B2:85:60:00:84:B5:EC:B0:F8
            X509v3 Authority Key Identifier:
                keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/80iCgpPXOpxj2QuyhWAAhLXssPg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.210.62.0/24
                  216.162.45.0/24
                IPv6:
                  2a14:a087:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:d7:c2:f5:cf:37:df:7c:5e:fe:a5:b4:9f:64:d9:05:e2:f6:
         59:a0:b4:e2:fc:1b:b7:55:3a:51:11:0e:64:e8:d4:50:cb:9d:
         b4:a4:b0:99:fd:99:a8:0d:62:51:cc:6f:90:c5:5e:4a:f6:c3:
         e4:2f:f7:d4:5a:7d:96:e4:f6:01:c1:6a:07:cb:5b:d2:4c:72:
         ec:a2:f0:81:9e:3d:24:b1:a2:f0:b5:c9:2a:a6:93:72:20:d6:
         d7:68:32:ec:0f:9c:8a:2e:8c:77:83:c1:ea:63:72:f9:fc:d7:
         3e:37:97:74:6a:4b:06:63:f4:b4:f2:29:2c:ed:62:97:42:52:
         8e:fd:e7:30:8b:f1:40:92:88:d9:b8:6a:f6:d5:a6:09:35:c4:
         dc:0b:8a:5e:6e:38:aa:56:84:77:45:2a:e5:a2:44:3d:6a:fe:
         ab:7d:57:0f:a7:e9:be:0a:97:ed:d1:c5:30:c0:5e:3a:17:aa:
         2d:0a:2d:cf:ad:e2:b8:2f:1e:db:a9:2d:fd:63:9d:f0:5d:a4:
         4c:65:d5:4c:22:79:41:27:06:11:3c:0c:68:ed:b2:28:91:81:
         61:12:a7:03:e6:ce:f7:49:23:f7:6f:11:38:69:9d:d2:8d:e5:
         89:55:06:8a:00:41:bf:51:2c:eb:b1:62:3e:0d:ee:3f:4b:d0:
         c0:2f:f3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 23:35:07 2026 by rpki-client