This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/r49ZEDE6WWxNrXEhESIxvZobJt4.roa
File:                     r49ZEDE6WWxNrXEhESIxvZobJt4.roa (raw, json)
Hash identifier:          DK7S0gOLstB9fTfPHhimalpV0TB0R2sQM6XVh6ZJuu0=
Subject key identifier:   AF:8F:59:10:31:3A:59:6C:4D:AD:71:21:11:22:31:BD:9A:1B:26:DE
Certificate issuer:       /CN=1693737a01469c95011d697392565916045d3a20
Certificate serial:       019B7DCAC8A8603D38A142B5215E8F6A6F26
Authority key identifier: 16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/r49ZEDE6WWxNrXEhESIxvZobJt4.roa
Signing time:             Fri 02 Jan 2026 08:20:00 +0000
ROA not before:           Fri 02 Jan 2026 08:20:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204475
IP address blocks:        185.155.84.0/22 maxlen: 22
                          2a0d:ac80::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:ca:c8:a8:60:3d:38:a1:42:b5:21:5e:8f:6a:6f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1693737a01469c95011d697392565916045d3a20
        Validity
            Not Before: Jan  2 08:20:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=af8f5910313a596c4dad7121112231bd9a1b26de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:bb:4b:b3:52:9e:69:37:a6:0c:be:4e:61:
                    a0:45:a1:71:01:a6:fd:02:79:f1:cf:32:18:d4:5f:
                    40:c8:b3:5a:4e:11:68:77:4f:98:0a:fe:9d:2c:97:
                    87:22:56:5b:94:93:3a:55:da:26:04:b7:47:07:58:
                    a1:0d:99:58:df:5c:47:ff:ee:ad:a0:8f:58:7b:c3:
                    53:10:de:a7:b7:61:36:ba:5d:5c:4d:71:3d:6d:88:
                    de:be:85:e9:d4:92:02:2d:e1:f1:d0:d6:53:89:34:
                    1b:62:18:54:d6:4d:14:75:20:0d:b3:4c:b0:35:b5:
                    ec:26:30:c5:a6:af:45:dc:36:f5:77:99:10:61:c0:
                    98:59:ca:48:3e:05:97:c1:ed:79:4f:7c:7c:6b:1f:
                    09:c9:85:58:23:50:6e:0b:42:0c:d7:5c:c6:b6:b8:
                    eb:a3:78:5a:f4:c3:11:3a:ca:dd:89:3d:f7:47:d7:
                    13:38:f0:62:d5:7c:93:08:b0:45:9c:5f:21:3c:b2:
                    97:cf:91:92:a5:9f:3c:ff:51:f2:e1:1f:b8:6b:eb:
                    93:c3:61:12:ae:2d:f9:3e:e2:6a:57:7d:c0:25:77:
                    a0:c0:a1:b1:0f:06:bc:80:04:c0:3d:b6:ff:f3:06:
                    bf:c1:11:1f:73:5c:83:bf:ab:61:01:0f:f8:c1:47:
                    25:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8F:59:10:31:3A:59:6C:4D:AD:71:21:11:22:31:BD:9A:1B:26:DE
            X509v3 Authority Key Identifier:
                keyid:16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/r49ZEDE6WWxNrXEhESIxvZobJt4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.84.0/22
                IPv6:
                  2a0d:ac80::/29

    Signature Algorithm: sha256WithRSAEncryption
         86:2a:e0:4f:8b:e1:68:62:83:fa:43:70:9f:52:03:d8:2b:ea:
         6a:1d:46:59:ee:d4:ce:67:7b:2b:af:f1:c4:2b:8a:26:97:b6:
         d8:eb:da:70:df:08:cf:7b:de:d9:81:72:7b:3a:59:5d:89:cb:
         51:dc:73:c5:34:52:be:f3:81:07:ed:da:4e:8e:56:65:fa:cd:
         f6:f8:77:38:73:32:d0:ac:af:d3:d4:4f:89:3f:f5:de:c4:8e:
         89:d4:10:c4:57:e4:2d:3c:bc:e7:15:a2:43:47:c2:d7:53:05:
         c2:1f:b9:f8:e5:f6:99:0e:8c:8e:6b:b2:b5:51:82:74:8d:c1:
         eb:0b:2f:e6:0f:ee:fe:f1:04:d5:00:43:16:d2:d6:04:ec:0f:
         80:34:68:2f:bc:a3:e9:39:0e:6a:57:a6:f3:76:a3:7e:6c:7b:
         13:8d:a4:15:13:72:67:d3:d5:08:da:29:b8:0e:e0:03:f4:8f:
         11:32:3c:b2:64:f5:78:ab:cd:a2:41:e3:06:68:90:b6:fb:57:
         66:dd:7a:03:0f:b8:42:7f:0b:47:fb:38:2d:5f:dc:8a:2f:6a:
         e4:ca:77:03:f7:b0:26:09:b0:26:ad:54:e2:33:74:46:9f:c3:
         e9:3a:60:a3:21:7b:75:4d:28:89:1e:8b:96:e9:1b:22:53:27:
         5c:a4:78:4c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt9ysioYD04oUK1IV6Pam8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTM3MzdhMDE0NjljOTUwMTFkNjk3MzkyNTY1OTE2MDQ1
ZDNhMjAwHhcNMjYwMTAyMDgyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjhmNTkxMDMxM2E1OTZjNGRhZDcxMjExMTIyMzFiZDlhMWIyNmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJS7S7NSnmk3pgy+TmGgRaFxAab9
AnnxzzIY1F9AyLNaThFod0+YCv6dLJeHIlZblJM6VdomBLdHB1ihDZlY31xH/+6t
oI9Ye8NTEN6nt2E2ul1cTXE9bYjevoXp1JICLeHx0NZTiTQbYhhU1k0UdSANs0yw
NbXsJjDFpq9F3Db1d5kQYcCYWcpIPgWXwe15T3x8ax8JyYVYI1BuC0IM11zGtrjr
o3ha9MMROsrdiT33R9cTOPBi1XyTCLBFnF8hPLKXz5GSpZ88/1Hy4R+4a+uTw2ES
ri35PuJqV33AJXegwKGxDwa8gATAPbb/8wa/wREfc1yDv6thAQ/4wUcl+QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFK+PWRAxOllsTa1xIREiMb2aGybeMB8GA1UdIwQY
MBaAFBaTc3oBRpyVAR1pc5JWWRYEXTogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBOemVnRkduSlVCSFdsemtsWlpGZ1JkT2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kMWI2YjEtMjIzYS00MTBiLTk1OTYt
NWFlMzA3MzA0YjBiLzEvcjQ5WkVERTZXV3hOclhFaEVTSXh2Wm9iSnQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9kMWI2YjEtMjIzYS00MTBiLTk1OTYtNWFlMzA3MzA0YjBi
LzEvRnBOemVnRkduSlVCSFdsemtsWlpGZ1JkT2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZtUMA0E
AgACMAcDBQMqDayAMA0GCSqGSIb3DQEBCwUAA4IBAQCGKuBPi+FoYoP6Q3CfUgPY
K+pqHUZZ7tTOZ3srr/HEK4oml7bY69pw3wjPe97ZgXJ7OlldictR3HPFNFK+84EH
7dpOjlZl+s32+Hc4czLQrK/T1E+JP/XexI6J1BDEV+QtPLznFaJDR8LXUwXCH7n4
5faZDoyOa7K1UYJ0jcHrCy/mD+7+8QTVAEMW0tYE7A+ANGgvvKPpOQ5qV6bzdqN+
bHsTjaQVE3Jn09UI2im4DuAD9I8RMjyyZPV4q82iQeMGaJC2+1dm3XoDD7hCfwtH
+zgtX9yKL2rkyncD97AmCbAmrVTiM3RGn8PpOmCjIXt1TSiJHouW6RsiUydcpHhM
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:10:16 2026 by rpki-client