This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/93ujOdlhvkLDrlQTo0WR0HGkUOA.roa
File:                     93ujOdlhvkLDrlQTo0WR0HGkUOA.roa (raw, json)
Hash identifier:          CSiF98tZ8HUGXFu9Nj6Ewi7SDw/vSSQkj6eyMK8B53I=
Subject key identifier:   F7:7B:A3:39:D9:61:BE:42:C3:AE:54:13:A3:45:91:D0:71:A4:50:E0
Certificate issuer:       /CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Certificate serial:       019B7EA68958A421019DF7DC5A35AF652EEA
Authority key identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/93ujOdlhvkLDrlQTo0WR0HGkUOA.roa
Signing time:             Fri 02 Jan 2026 12:20:01 +0000
ROA not before:           Fri 02 Jan 2026 12:20:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207026
IP address blocks:        185.168.104.0/22 maxlen: 22
                          185.168.104.0/23 maxlen: 23
                          185.168.104.0/24 maxlen: 24
                          185.168.105.0/24 maxlen: 24
                          185.168.106.0/23 maxlen: 23
                          185.168.106.0/24 maxlen: 24
                          185.168.107.0/24 maxlen: 24
                          2a0b:fe00::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:89:58:a4:21:01:9d:f7:dc:5a:35:af:65:2e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
        Validity
            Not Before: Jan  2 12:20:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f77ba339d961be42c3ae5413a34591d071a450e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:33:35:5e:02:af:c6:74:3f:8f:c4:a9:6c:66:
                    12:9e:bb:3b:f4:f8:b5:51:72:6e:43:c9:f7:ca:65:
                    75:c8:2b:f4:8d:c8:cf:fa:be:25:0b:1a:f4:81:fc:
                    0c:e9:3d:f9:f0:37:b3:d8:67:ac:09:30:08:75:3b:
                    69:9e:d3:ae:ce:5a:1a:5d:25:c2:63:89:d8:59:0e:
                    2e:8e:3b:66:fc:77:89:e6:c8:50:86:14:b8:a4:df:
                    3d:8a:3d:45:61:d5:dc:ac:4e:a1:03:2c:94:15:df:
                    ae:e4:78:a8:75:77:88:08:87:3f:9f:c8:2e:55:2e:
                    02:66:e1:0e:43:27:14:5e:09:65:45:e8:4e:17:c9:
                    61:9a:27:79:e2:a8:a3:31:32:c9:2e:40:6b:cd:f3:
                    96:d2:a2:aa:eb:07:be:e4:0a:1b:e3:e4:56:44:cf:
                    f0:2a:3b:56:5b:02:7f:19:fd:65:98:5a:0d:ff:19:
                    1c:b2:b4:03:70:8c:02:d5:d7:25:8d:c2:64:5a:2f:
                    0e:2e:05:db:d8:5a:4c:cf:43:36:0a:16:81:d5:13:
                    1a:1e:f5:c0:ab:28:60:0b:13:5a:64:f1:1d:b8:6c:
                    80:bc:01:5e:af:1a:4b:0a:2e:76:07:0a:3d:3e:e8:
                    78:76:ca:94:11:3d:2b:83:a1:84:48:85:ca:fd:8c:
                    a2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7B:A3:39:D9:61:BE:42:C3:AE:54:13:A3:45:91:D0:71:A4:50:E0
            X509v3 Authority Key Identifier:
                keyid:27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/93ujOdlhvkLDrlQTo0WR0HGkUOA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.168.104.0/22
                IPv6:
                  2a0b:fe00::/29

    Signature Algorithm: sha256WithRSAEncryption
         53:38:54:9d:1a:9b:29:da:10:5f:e3:71:56:18:b7:fe:74:a3:
         de:d6:40:ec:e6:47:1b:65:aa:33:e6:75:6a:4a:16:3d:76:b2:
         e2:8b:6c:3c:d3:e1:b7:cc:0f:8d:59:61:ed:4d:07:f3:61:f3:
         f2:23:c2:e1:98:cd:92:dc:8a:38:aa:33:01:f6:8b:d5:c2:56:
         3a:01:0d:12:c2:ed:1d:2c:9d:86:b5:5f:74:d8:c4:b4:b3:c8:
         eb:f5:73:aa:2a:46:f2:0a:e7:e4:f1:76:27:42:9d:f2:df:90:
         02:14:3d:90:77:72:69:30:94:6c:44:76:53:d9:ec:a1:a0:5a:
         8f:09:9d:b7:64:fa:8d:1d:96:95:9b:79:20:b1:54:4f:54:16:
         ed:b0:28:15:3d:58:a1:3d:0a:e0:8a:36:d7:f9:07:aa:89:0b:
         51:92:ab:7a:f9:19:d2:8d:71:c5:31:ac:2c:cb:41:ff:21:b1:
         81:b3:95:52:cd:e8:aa:b2:7b:ea:de:92:b9:e7:7e:d8:01:9b:
         94:5a:d1:9d:23:7f:00:63:78:52:5e:c8:1f:62:34:38:c8:30:
         b1:14:81:78:b1:5e:63:8b:3f:ce:61:f9:ef:c8:c4:d0:94:8d:
         c0:65:c6:5d:a0:db:1b:60:02:f8:c7:b8:84:0b:a1:e1:93:b7:
         61:38:a8:67
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt+polYpCEBnffcWjWvZS7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDQxNjA1ZmRlYjVkOWMzZGVhYmVlMmY1ZDdjNjY3ZDk2
ZmQ4ZTAwHhcNMjYwMTAyMTIyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzdiYTMzOWQ5NjFiZTQyYzNhZTU0MTNhMzQ1OTFkMDcxYTQ1MGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jM1XgKvxnQ/j8SpbGYSnrs79Pi1
UXJuQ8n3ymV1yCv0jcjP+r4lCxr0gfwM6T358Dez2GesCTAIdTtpntOuzloaXSXC
Y4nYWQ4ujjtm/HeJ5shQhhS4pN89ij1FYdXcrE6hAyyUFd+u5HiodXeICIc/n8gu
VS4CZuEOQycUXgllRehOF8lhmid54qijMTLJLkBrzfOW0qKq6we+5Aob4+RWRM/w
KjtWWwJ/Gf1lmFoN/xkcsrQDcIwC1dcljcJkWi8OLgXb2FpMz0M2ChaB1RMaHvXA
qyhgCxNaZPEduGyAvAFerxpLCi52Bwo9Puh4dsqUET0rg6GESIXK/YyiDwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPd7oznZYb5Cw65UE6NFkdBxpFDgMB8GA1UdIwQY
MBaAFCdEFgX9612cPeq+4vXXxmfZb9jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBRV0JmM3JYWnc5NnI3aTlkZkdaOWx2Mk9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNmRiNTQtYzA0My00NTU0LTg0OTIt
NzUyYzk1YzljZjc5LzEvOTN1ak9kbGh2a0xEcmxRVG8wV1IwSEdrVU9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zNmRiNTQtYzA0My00NTU0LTg0OTItNzUyYzk1YzljZjc5
LzEvSjBRV0JmM3JYWnc5NnI3aTlkZkdaOWx2Mk9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuahoMA0E
AgACMAcDBQMqC/4AMA0GCSqGSIb3DQEBCwUAA4IBAQBTOFSdGpsp2hBf43FWGLf+
dKPe1kDs5kcbZaoz5nVqShY9drLii2w80+G3zA+NWWHtTQfzYfPyI8LhmM2S3Io4
qjMB9ovVwlY6AQ0Swu0dLJ2GtV902MS0s8jr9XOqKkbyCufk8XYnQp3y35ACFD2Q
d3JpMJRsRHZT2eyhoFqPCZ23ZPqNHZaVm3kgsVRPVBbtsCgVPVihPQrgijbX+Qeq
iQtRkqt6+RnSjXHFMawsy0H/IbGBs5VSzeiqsnvq3pK5537YAZuUWtGdI38AY3hS
XsgfYjQ4yDCxFIF4sV5jiz/OYfnvyMTQlI3AZcZdoNsbYAL4x7iEC6Hhk7dhOKhn
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:43:57 2026 by rpki-client