This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/j11RSuGZdP978fle7rZl9lYrLos.roa
File:                     j11RSuGZdP978fle7rZl9lYrLos.roa (raw, json)
Hash identifier:          cc6p0W3mXzrkRQrbuZH3I0FsotddQvFdCECy4+DwMbA=
Subject key identifier:   8F:5D:51:4A:E1:99:74:FF:7B:F1:F9:5E:EE:B6:65:F6:56:2B:2E:8B
Certificate issuer:       /CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
Certificate serial:       019B79109A08889965F2A4CC5317F80E298C
Authority key identifier: 63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/j11RSuGZdP978fle7rZl9lYrLos.roa
Signing time:             Thu 01 Jan 2026 10:18:09 +0000
ROA not before:           Thu 01 Jan 2026 10:18:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204439
IP address blocks:        185.248.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:9a:08:88:99:65:f2:a4:cc:53:17:f8:0e:29:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=634c53abd0dda68ca67fc8066bc165a2b32dc82b
        Validity
            Not Before: Jan  1 10:18:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8f5d514ae19974ff7bf1f95eeeb665f6562b2e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:66:4d:0c:40:eb:ee:f5:f1:c6:50:e5:42:
                    71:fb:d0:d8:f2:11:d7:26:30:ac:1a:82:43:a5:f0:
                    f8:be:16:ab:db:f1:3c:5f:04:62:12:11:64:41:c8:
                    a3:5f:22:a2:a3:92:40:de:e9:e8:99:05:03:b8:37:
                    a8:69:ae:f3:79:9f:9d:f1:b2:08:3e:6c:4e:4b:bd:
                    3a:db:9d:34:a6:d7:ad:f9:7d:b5:54:33:0f:26:d9:
                    cf:a2:50:94:41:70:17:ae:c2:43:3b:ab:43:1e:a7:
                    59:ae:33:fb:a9:f3:f8:49:f9:51:a4:b1:03:fe:57:
                    58:b4:80:8e:54:41:b7:ad:dc:3c:cf:df:19:76:b1:
                    17:1e:53:9c:0d:6d:70:40:57:6b:99:88:b6:b0:c2:
                    c8:79:cf:7b:2c:0a:25:1e:45:d0:64:0c:90:ac:18:
                    df:a4:1e:7d:99:e5:52:bf:10:0d:af:de:9a:b3:cc:
                    95:b9:3d:a8:60:4c:ce:ac:1b:50:c3:0b:b7:99:b0:
                    82:d1:3f:e6:04:a5:82:cd:d8:49:b4:16:26:ff:82:
                    5a:2a:f5:9b:f5:eb:0d:7b:fa:23:14:a8:2b:46:4b:
                    2b:03:cf:38:52:c4:a3:ba:4b:58:42:08:46:26:2b:
                    0a:42:d5:9d:72:22:bf:26:4e:80:8d:25:86:a4:f1:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5D:51:4A:E1:99:74:FF:7B:F1:F9:5E:EE:B6:65:F6:56:2B:2E:8B
            X509v3 Authority Key Identifier:
                keyid:63:4C:53:AB:D0:DD:A6:8C:A6:7F:C8:06:6B:C1:65:A2:B3:2D:C8:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0xTq9Ddpoymf8gGa8FlorMtyCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/j11RSuGZdP978fle7rZl9lYrLos.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9e96a3-ce89-442e-bc48-addefa6911b9/1/Y0xTq9Ddpoymf8gGa8FlorMtyCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:00:27:9f:30:a9:e9:f0:42:27:7b:3a:b6:58:d6:e4:e7:f4:
         22:63:0d:c3:f7:0f:22:b7:72:88:1d:c9:b8:2e:87:d1:5a:00:
         26:39:41:52:f3:07:d1:ee:55:6b:55:80:43:2b:16:9b:3b:76:
         26:2f:ce:1d:47:02:2d:35:0d:86:e0:37:e5:a9:38:cf:ee:56:
         7a:96:cf:19:81:08:d1:42:ef:6f:e0:be:f3:93:16:bd:17:41:
         59:97:22:56:37:29:91:80:b7:f6:55:e3:b0:f6:61:b1:aa:a8:
         4d:f8:4f:49:22:e5:d6:d1:75:a2:2e:6b:e1:2b:49:76:5b:b4:
         30:79:05:2b:d2:55:c2:aa:3c:ee:d5:66:6b:89:bf:3c:1d:6d:
         52:19:54:c4:49:06:96:67:31:c6:3b:8a:a2:ad:1a:e5:2c:bc:
         ae:7f:14:06:c3:db:80:82:4b:7a:68:92:b8:94:3e:e0:21:f2:
         b8:e9:fb:27:27:33:65:8a:c9:de:72:87:c8:88:8b:ea:e2:89:
         41:77:19:79:47:23:95:8e:8a:69:b8:dd:f3:54:85:c7:84:6c:
         c0:29:c8:a1:7d:6c:9d:19:ba:f5:1c:27:9b:7a:69:7d:30:15:
         df:9e:78:8e:3a:cc:af:80:c4:97:7f:f6:49:63:a9:15:b9:5f:
         25:94:74:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:48:54 2026 by rpki-client