This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/iMeZ55xXTRUF-UqrzJOcRWqLnr0.roa
File:                     iMeZ55xXTRUF-UqrzJOcRWqLnr0.roa (raw, json)
Hash identifier:          FHh78hLB/Sn5QhGNBTKNLCJHqJsr7A56qqlnpn0+FT8=
Subject key identifier:   88:C7:99:E7:9C:57:4D:15:05:F9:4A:AB:CC:93:9C:45:6A:8B:9E:BD
Certificate issuer:       /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial:       019B7A5A652046A4540A7713F7D2315845CD
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/iMeZ55xXTRUF-UqrzJOcRWqLnr0.roa
Signing time:             Thu 01 Jan 2026 16:18:22 +0000
ROA not before:           Thu 01 Jan 2026 16:18:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59560
IP address blocks:        176.116.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:65:20:46:a4:54:0a:77:13:f7:d2:31:58:45:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
        Validity
            Not Before: Jan  1 16:18:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=88c799e79c574d1505f94aabcc939c456a8b9ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:67:8a:dd:02:6d:70:b7:9f:74:3d:7e:11:
                    2b:ba:0b:8f:82:52:64:08:fc:80:01:57:9b:31:49:
                    20:5b:fe:de:16:f8:aa:52:5b:11:26:bc:71:c9:5f:
                    03:a2:61:a4:ba:8f:db:01:40:9d:e8:f6:7b:62:17:
                    a2:c9:ad:8b:a0:0f:7a:6f:b7:03:d5:38:ad:8d:89:
                    72:bc:b7:03:7c:fb:9a:cc:ac:28:ce:88:67:94:40:
                    73:7e:c8:8d:21:f9:f0:de:63:99:3d:7f:26:a0:cc:
                    6d:56:0f:48:fc:53:8e:e3:9b:b4:64:90:9f:6f:0b:
                    1b:39:9f:8b:1b:b1:df:19:20:11:e0:7c:e1:21:d7:
                    9a:06:61:a5:07:88:8c:8a:48:14:83:ab:10:82:81:
                    b6:e1:c3:7b:df:76:9a:f0:14:7e:13:1f:79:0e:7f:
                    dd:ae:ec:0a:a5:33:aa:31:e5:f5:86:80:80:3a:0d:
                    03:17:5f:e5:61:ba:26:c8:8f:61:9d:ef:96:9e:56:
                    8b:97:c4:98:ad:14:6a:4e:65:3f:1c:2f:61:6e:99:
                    c1:9c:7a:ac:54:98:cb:85:0c:e0:d2:9c:10:0a:29:
                    9d:4d:9a:5e:7b:b0:53:17:42:06:5d:db:2c:18:af:
                    55:4d:cc:b5:3c:73:48:66:2c:3c:10:b8:18:22:c5:
                    98:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C7:99:E7:9C:57:4D:15:05:F9:4A:AB:CC:93:9C:45:6A:8B:9E:BD
            X509v3 Authority Key Identifier:
                keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/iMeZ55xXTRUF-UqrzJOcRWqLnr0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.116.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:75:d4:f4:be:1b:fd:a1:ad:e2:05:a0:b8:c9:24:10:36:ca:
         7b:ff:c1:fd:0d:96:9c:42:65:5b:d6:f6:6c:79:7c:2f:d6:4d:
         28:86:86:56:f5:3a:00:c2:fa:48:62:7c:fd:c5:88:f1:95:c6:
         28:50:57:8e:64:4d:f7:70:37:b9:c9:bd:5f:b0:e6:28:cd:2c:
         e8:e1:5a:d1:6f:af:15:31:9c:00:1d:82:80:a6:b8:4e:e5:58:
         fb:17:96:48:ee:35:15:07:32:45:78:50:2c:fe:7d:c4:74:94:
         ce:ba:bb:fa:28:06:f3:98:20:dd:55:72:92:ed:a5:31:9b:5d:
         b9:83:18:c2:1a:71:1b:5b:6b:15:26:4d:bb:54:7c:1d:6f:fc:
         05:d5:b6:cf:5f:ee:ee:bd:57:98:d9:8c:e1:8b:55:3e:38:23:
         fc:fb:9c:4a:89:8f:e2:34:4a:11:e8:f7:ec:74:db:be:19:17:
         27:aa:cb:2c:37:8a:2c:09:3b:e4:ed:f4:e7:da:67:63:7a:cb:
         42:54:fc:c1:8e:85:b3:68:9d:32:77:5e:fc:fc:65:3d:33:4a:
         bb:fc:c1:e6:57:a7:3e:e3:ad:56:82:aa:df:7c:44:58:f9:2e:
         c9:cb:50:d6:21:09:b0:6b:12:d3:41:78:45:0f:0e:ef:40:eb:
         dd:a7:12:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6WmUgRqRUCncT99IxWEXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2YyODI4MjFkYTU3NWY2ODkxNzY0N2NmM2UxODk4Zjlk
MGE2MmEwHhcNMjYwMTAxMTYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGM3OTllNzljNTc0ZDE1MDVmOTRhYWJjYzkzOWM0NTZhOGI5ZWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn1nit0CbXC3n3Q9fhEruguPglJk
CPyAAVebMUkgW/7eFviqUlsRJrxxyV8DomGkuo/bAUCd6PZ7Yheiya2LoA96b7cD
1TitjYlyvLcDfPuazKwozohnlEBzfsiNIfnw3mOZPX8moMxtVg9I/FOO45u0ZJCf
bwsbOZ+LG7HfGSAR4HzhIdeaBmGlB4iMikgUg6sQgoG24cN733aa8BR+Ex95Dn/d
ruwKpTOqMeX1hoCAOg0DF1/lYbomyI9hne+WnlaLl8SYrRRqTmU/HC9hbpnBnHqs
VJjLhQzg0pwQCimdTZpee7BTF0IGXdssGK9VTcy1PHNIZiw8ELgYIsWYqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIjHmeecV00VBflKq8yTnEVqi569MB8GA1UdIwQY
MBaAFP7PKCgh2ldfaJF2R88+GJj50KYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yODg2MjgtMjAzOS00MDg1LWEwMDYt
MDYwY2Q5YzkyZjI2LzEvaU1lWjU1eFhUUlVGLVVxcnpKT2NSV3FMbnIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yODg2MjgtMjAzOS00MDg1LWEwMDYtMDYwY2Q5YzkyZjI2
LzEvX3M4b0tDSGFWMTlva1haSHp6NFltUG5RcGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHSRMA0G
CSqGSIb3DQEBCwUAA4IBAQBiddT0vhv9oa3iBaC4ySQQNsp7/8H9DZacQmVb1vZs
eXwv1k0ohoZW9ToAwvpIYnz9xYjxlcYoUFeOZE33cDe5yb1fsOYozSzo4VrRb68V
MZwAHYKAprhO5Vj7F5ZI7jUVBzJFeFAs/n3EdJTOurv6KAbzmCDdVXKS7aUxm125
gxjCGnEbW2sVJk27VHwdb/wF1bbPX+7uvVeY2Yzhi1U+OCP8+5xKiY/iNEoR6Pfs
dNu+GRcnqsssN4osCTvk7fTn2mdjestCVPzBjoWzaJ0yd178/GU9M0q7/MHmV6c+
461WgqrffERY+S7Jy1DWIQmwaxLTQXhFDw7vQOvdpxIs
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:51:43 2026 by rpki-client