This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8m9QB0xxAdt_pSiqIqhqIa4gs74.roa
File:                     8m9QB0xxAdt_pSiqIqhqIa4gs74.roa (raw, json)
Hash identifier:          v+nE2XaufnNZvnaDV9lRk6ql9G4VsMoO6PsRrFqD1OI=
Subject key identifier:   F2:6F:50:07:4C:71:01:DB:7F:A5:28:AA:22:A8:6A:21:AE:20:B3:BE
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       019B7CEE44AE2D75ABB3B00169132687F911
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8m9QB0xxAdt_pSiqIqhqIa4gs74.roa
Signing time:             Fri 02 Jan 2026 04:19:08 +0000
ROA not before:           Fri 02 Jan 2026 04:19:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     400909
IP address blocks:        82.163.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:44:ae:2d:75:ab:b3:b0:01:69:13:26:87:f9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Jan  2 04:19:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f26f50074c7101db7fa528aa22a86a21ae20b3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:01:22:a8:ea:fa:f5:ed:1a:17:b6:76:06:
                    fb:62:d1:67:15:fd:51:49:2d:74:3b:4f:21:60:c8:
                    e5:74:87:02:5f:23:c1:99:5d:81:ee:1f:a4:7c:83:
                    f6:3e:b1:36:fc:b9:44:d6:fc:90:be:18:51:bb:ae:
                    ae:4f:d9:cf:83:1d:e1:60:f3:aa:de:28:f6:e9:a8:
                    06:65:dc:a0:5f:89:df:bb:b6:3d:b9:29:10:e2:1f:
                    6a:8b:eb:9c:20:81:df:24:a5:1c:d4:86:d0:81:7a:
                    79:87:7c:76:48:d2:a3:ae:43:02:89:ad:51:de:55:
                    03:76:23:e8:89:42:1a:29:4b:d8:62:97:64:8e:70:
                    08:ef:3b:8f:26:bc:f0:7c:57:d3:27:96:fa:40:08:
                    32:a5:66:26:78:18:0d:6e:0b:e9:57:8a:61:b5:9c:
                    9d:52:76:c5:6a:da:8f:93:4f:41:5f:c4:90:25:d2:
                    08:96:0c:ee:92:c9:1b:ce:95:c9:ce:dd:a0:fd:8b:
                    37:8e:2f:3f:28:5d:2f:9e:30:ea:d1:41:d6:e3:ca:
                    26:25:92:4f:18:8f:15:d6:51:04:d4:a2:c4:71:73:
                    1f:10:db:c1:6f:b3:c8:c5:77:fc:d9:86:65:ac:55:
                    f2:9a:c5:f9:12:82:dd:05:e3:1c:60:1d:e2:6b:07:
                    df:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6F:50:07:4C:71:01:DB:7F:A5:28:AA:22:A8:6A:21:AE:20:B3:BE
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/8m9QB0xxAdt_pSiqIqhqIa4gs74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.163.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:f1:87:6c:ec:61:83:15:5f:8e:65:8d:11:b4:ae:0d:aa:2e:
         e1:9e:8b:0e:5b:a0:0f:56:28:a7:8e:69:c0:93:45:47:ca:dc:
         6a:2d:18:dc:da:60:95:eb:5a:60:dc:f6:79:e3:71:6e:3c:19:
         bf:07:a7:95:1b:f2:43:d4:b9:6c:e0:25:24:e8:ba:77:53:ee:
         c3:20:0a:7d:ca:9b:1a:96:f3:97:a4:cd:6c:97:2a:8b:c7:7d:
         ba:7b:07:a1:af:c9:6d:98:38:3f:ea:5f:f8:42:3f:22:40:6d:
         cc:ec:4e:04:d0:81:d2:ee:e8:32:58:b9:50:df:41:51:84:54:
         bd:15:89:46:a9:8c:c0:5b:db:8f:df:c1:b0:09:4b:6a:34:ca:
         c8:f2:2a:6a:f3:b9:93:cc:60:77:cc:46:dd:42:48:99:50:5c:
         9f:4e:24:50:10:fb:18:42:40:f3:aa:2d:09:ff:13:c8:b7:1c:
         61:68:40:23:fb:77:03:fb:5c:85:4b:a4:bb:04:f0:dc:eb:61:
         9c:88:92:8e:c5:4d:12:55:ad:ff:98:fd:a1:f8:c6:a7:6c:cc:
         c1:bc:69:6b:18:4c:a5:17:8d:d6:9d:29:51:32:c4:fb:c5:be:
         e5:5f:7d:5e:f6:6a:94:25:33:77:53:d2:85:c5:3f:a1:c1:13:
         90:47:cb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:36:30 2026 by rpki-client