This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/b2FwzXwPA4h4cgwtnyc60OtTa88.roa
File:                     b2FwzXwPA4h4cgwtnyc60OtTa88.roa (raw, json)
Hash identifier:          lkanuRYvWV1r1485k4lQhFz2YZsaICmZonIaOSauHis=
Subject key identifier:   6F:61:70:CD:7C:0F:03:88:78:72:0C:2D:9F:27:3A:D0:EB:53:6B:CF
Certificate issuer:       /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Certificate serial:       019B79EBC7DF9DE998954824FBB49A9DCC1A
Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/b2FwzXwPA4h4cgwtnyc60OtTa88.roa
Signing time:             Thu 01 Jan 2026 14:17:33 +0000
ROA not before:           Thu 01 Jan 2026 14:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        80.247.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:eb:c7:df:9d:e9:98:95:48:24:fb:b4:9a:9d:cc:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
        Validity
            Not Before: Jan  1 14:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6f6170cd7c0f038878720c2d9f273ad0eb536bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:18:f4:03:db:06:cf:a4:9e:7f:41:b4:f8:
                    da:22:9e:3c:74:83:13:4c:8e:32:33:2f:7b:eb:54:
                    4a:2c:ce:74:a5:29:9f:5f:fc:22:98:70:65:fb:01:
                    15:6f:72:b2:9e:74:66:7d:8a:6f:9c:f0:4b:36:af:
                    3e:de:38:38:cc:55:34:e8:8c:b6:26:bc:a2:5d:ed:
                    b6:13:2c:a8:2e:a8:8a:7a:8f:dd:d6:ba:cc:22:41:
                    20:38:f0:96:bf:a5:d3:6c:eb:6d:c6:71:ba:1a:39:
                    21:3f:cc:91:01:ea:92:22:19:1c:4a:97:ab:31:5a:
                    52:70:d6:b5:0d:d1:40:6a:be:a6:7b:95:66:0a:91:
                    8d:e5:02:ce:37:17:b8:41:02:84:22:97:2c:07:3c:
                    d4:32:e5:88:f6:15:b4:e0:96:6f:02:77:6c:0b:94:
                    93:52:89:46:94:e0:56:97:91:6a:58:22:b0:8d:6c:
                    62:ee:06:af:53:54:72:fb:96:24:e8:04:4a:58:bb:
                    53:45:bb:97:e1:e1:3e:cd:5d:02:83:e7:c1:f7:92:
                    17:83:ea:f7:9e:03:88:05:86:4e:df:0d:07:1a:c9:
                    61:2c:6a:d5:75:aa:37:23:ff:2f:07:ad:c6:7f:e5:
                    51:bd:a8:4d:d2:88:d4:3f:db:05:12:b0:ed:82:81:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:61:70:CD:7C:0F:03:88:78:72:0C:2D:9F:27:3A:D0:EB:53:6B:CF
            X509v3 Authority Key Identifier:
                keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/b2FwzXwPA4h4cgwtnyc60OtTa88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.247.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e6:22:1d:8f:42:4e:42:86:92:ba:ac:e4:94:2c:74:2a:07:
         f5:65:35:be:87:60:57:6d:77:93:05:6b:a5:c3:63:01:dc:66:
         6d:d4:c9:8e:d6:d6:f8:c1:04:05:6a:b3:0e:a9:0c:29:bc:5a:
         50:c9:c9:b6:a5:1e:f9:86:8e:5b:3b:10:f9:f8:51:e6:56:88:
         14:f5:3c:dc:d6:69:fc:de:8c:d3:22:ee:77:b2:14:4f:ac:ac:
         3a:d2:0f:bd:63:34:01:56:65:79:37:0b:76:f4:e4:f4:8d:ff:
         0b:bb:5c:88:c2:8b:7d:d2:88:67:3f:06:ac:1c:49:fa:4e:38:
         f6:43:a4:21:7e:a2:25:07:05:ec:72:c7:b0:ed:03:2b:d4:a4:
         46:2f:e2:90:7d:3e:34:65:e5:39:15:a5:53:16:04:d2:7e:a6:
         26:ca:0c:78:65:70:44:90:a7:34:d7:f2:e9:4e:f9:72:11:15:
         f0:33:90:3f:dd:38:95:41:3b:82:fa:ba:d6:d8:ab:4b:ee:6b:
         92:19:8f:4b:7f:fe:01:f9:c2:1d:67:6d:1f:51:62:02:6b:01:
         71:da:a5:b0:46:24:f4:4d:a1:16:dd:dc:dd:d4:a8:18:32:39:
         d5:22:1c:e9:f4:cd:29:b2:f8:32:69:f3:49:d8:d7:40:d5:97:
         a2:c1:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 15:29:18 2026 by rpki-client