This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/wD8_-hEjASCZZpotXoShnTDKTeU.roa
File:                     wD8_-hEjASCZZpotXoShnTDKTeU.roa (raw, json)
Hash identifier:          eQRgbUsop5I6bDoMNdewwPQSLHLClo0n6vUjAG9/Tq4=
Subject key identifier:   C0:3F:3F:FA:11:23:01:20:99:66:9A:2D:5E:84:A1:9D:30:CA:4D:E5
Certificate issuer:       /CN=caacc4febb487996d4ee01d53b11f84203ca8367
Certificate serial:       019B7A5A6FFD03ED7CB4BD2FF41539CA35C6
Authority key identifier: CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/wD8_-hEjASCZZpotXoShnTDKTeU.roa
Signing time:             Thu 01 Jan 2026 16:18:25 +0000
ROA not before:           Thu 01 Jan 2026 16:18:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35546
IP address blocks:        80.241.144.0/21 maxlen: 21
                          80.241.144.0/24 maxlen: 24
                          80.241.145.0/24 maxlen: 24
                          80.241.146.0/24 maxlen: 24
                          80.241.147.0/24 maxlen: 24
                          80.241.153.0/24 maxlen: 24
                          80.241.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:6f:fd:03:ed:7c:b4:bd:2f:f4:15:39:ca:35:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caacc4febb487996d4ee01d53b11f84203ca8367
        Validity
            Not Before: Jan  1 16:18:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c03f3ffa1123012099669a2d5e84a19d30ca4de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3e:b3:bf:2b:c9:6a:9f:e9:a3:1e:1a:0b:96:
                    64:c6:22:30:4b:1b:47:00:74:21:ff:14:09:08:e5:
                    74:cb:6f:a4:f1:bf:e0:83:e0:36:46:5c:47:fd:57:
                    81:67:14:6a:93:15:2f:b1:71:bf:42:9e:17:a9:a1:
                    8d:2b:0b:15:57:77:c8:97:c6:f7:6b:37:d1:3c:5f:
                    ce:c5:e2:4e:b8:a4:bc:47:85:de:3d:99:38:f6:f9:
                    06:bd:28:6e:3e:25:42:e6:3b:ca:de:12:57:0c:6e:
                    1f:dc:ff:4e:a2:1c:de:90:7c:ef:e9:ed:18:f7:17:
                    8c:42:1d:40:56:e7:21:34:d1:dc:78:ea:1e:94:51:
                    91:6b:e0:85:b7:fe:3e:60:a8:76:97:f7:11:b5:3b:
                    6c:c2:b5:25:58:cc:18:6e:a0:b5:3d:bb:d9:e1:e2:
                    a7:7f:f8:e5:2c:4e:2d:1d:c6:84:cf:19:4f:09:b3:
                    ef:c8:ba:c9:e6:dd:8d:d7:c0:61:16:1f:be:06:9f:
                    9e:34:52:50:be:99:98:fc:49:15:8f:d6:c1:1e:1e:
                    8c:28:6e:71:51:3f:42:40:c6:70:bb:56:db:93:a3:
                    bd:e7:eb:96:c3:6e:7a:0a:1f:56:af:e3:3c:73:1f:
                    22:47:13:a5:e2:f5:d1:16:05:dd:57:21:92:3e:64:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3F:3F:FA:11:23:01:20:99:66:9A:2D:5E:84:A1:9D:30:CA:4D:E5
            X509v3 Authority Key Identifier:
                keyid:CA:AC:C4:FE:BB:48:79:96:D4:EE:01:D5:3B:11:F8:42:03:CA:83:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqzE_rtIeZbU7gHVOxH4QgPKg2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/wD8_-hEjASCZZpotXoShnTDKTeU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/71b2ab-157e-4820-a58b-a7edc4c99947/1/yqzE_rtIeZbU7gHVOxH4QgPKg2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.241.144.0/21
                  80.241.153.0-80.241.154.255

    Signature Algorithm: sha256WithRSAEncryption
         7d:14:91:9f:c7:46:6d:f9:03:f3:07:42:36:14:e3:9a:2e:4c:
         64:9e:b1:87:b6:8b:7d:06:c9:43:0e:b2:a3:89:5d:22:8c:0e:
         cb:da:78:14:d1:55:9a:84:33:ed:a1:fd:4c:08:68:6a:87:a9:
         cb:ff:4c:ac:4d:e7:72:4b:07:aa:00:10:20:58:26:89:cc:38:
         a3:b5:d7:06:c8:4e:24:b5:b1:a6:fb:9e:1e:25:13:ce:b2:69:
         24:68:0d:8b:a3:ee:11:bd:88:99:44:ff:1a:45:ea:86:c6:e8:
         a9:0d:dd:7b:0b:ad:af:7d:c0:e7:f8:65:e0:65:b9:ac:04:c5:
         eb:a5:fa:cc:f3:4d:41:94:88:7a:3e:a9:1c:ee:57:6e:bd:c4:
         79:91:62:80:8f:46:8e:c7:ba:af:2e:2a:be:0c:b9:15:51:e5:
         70:ab:2a:1f:63:7c:f5:73:e1:ef:f9:dd:a6:5c:83:e3:be:39:
         d0:02:6c:bf:45:6f:86:d9:f4:83:a8:c7:28:9a:98:16:01:46:
         72:c2:e6:fd:d4:8b:2e:88:f8:93:d5:37:6a:f0:26:aa:1c:a2:
         0f:f9:af:73:90:50:b2:4a:91:8e:a6:14:91:ff:1e:5b:56:c6:
         7f:ce:e9:89:48:17:6b:8e:63:45:e2:da:47:e0:cf:2e:aa:35:
         e0:8c:e6:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:24 2026 by rpki-client