This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/8eV-81_uKeNIQWi-RnISNeIm1sI.roa
File:                     8eV-81_uKeNIQWi-RnISNeIm1sI.roa (raw, json)
Hash identifier:          bt3ZIycIoVzzyCmbp0HGbKzeee+aV/KSNimrY/6lCo4=
Subject key identifier:   F1:E5:7E:F3:5F:EE:29:E3:48:41:68:BE:46:72:12:35:E2:26:D6:C2
Certificate issuer:       /CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
Certificate serial:       019B7B35D212BFEB09BE2E0A1FEA94853F04
Authority key identifier: DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/8eV-81_uKeNIQWi-RnISNeIm1sI.roa
Signing time:             Thu 01 Jan 2026 20:18:03 +0000
ROA not before:           Thu 01 Jan 2026 20:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51462
IP address blocks:        193.105.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:d2:12:bf:eb:09:be:2e:0a:1f:ea:94:85:3f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df4818bd0ab3bdff3b13ffa0a0b49699fe0d65d8
        Validity
            Not Before: Jan  1 20:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f1e57ef35fee29e3484168be46721235e226d6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:28:9e:c8:b7:d2:46:b0:46:2e:1b:a8:c7:39:
                    83:3f:76:de:6e:ab:3a:3a:70:38:56:5f:35:8e:f4:
                    c5:ae:95:47:38:37:69:41:87:6b:dc:6c:6e:2d:ee:
                    08:e7:d7:e3:aa:50:e6:ab:f9:33:38:08:bb:b0:1b:
                    58:be:f7:af:47:0b:e8:ac:29:b0:cd:d7:1b:9a:0a:
                    29:33:36:62:c4:97:df:40:d0:7f:88:ed:f7:f2:68:
                    98:06:31:37:69:12:ee:27:d7:71:95:54:fb:d6:7d:
                    89:ea:70:9e:99:30:23:bd:fa:df:f3:70:4c:c3:41:
                    21:c7:4f:46:f8:d0:32:7c:a3:84:f0:f8:b3:cd:e9:
                    06:12:2c:01:93:e0:29:9a:40:1c:d4:80:76:2a:01:
                    bc:d2:62:6e:e7:e4:4c:ed:2d:db:03:9c:71:cf:69:
                    a0:c9:49:d0:f3:8f:91:c4:ae:2b:4f:97:14:27:46:
                    1e:fc:08:74:9f:14:3e:eb:d4:ee:f9:fe:ec:eb:df:
                    8e:79:99:10:10:33:e8:5b:b0:97:e1:2b:42:58:7e:
                    60:bb:5f:c6:87:9f:e6:08:90:27:4e:05:ec:68:d3:
                    3d:8e:be:98:fd:2d:fa:84:3b:a3:0f:33:ce:5e:c5:
                    6d:31:2e:64:ba:00:89:6c:56:89:f7:cb:61:b3:18:
                    36:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E5:7E:F3:5F:EE:29:E3:48:41:68:BE:46:72:12:35:E2:26:D6:C2
            X509v3 Authority Key Identifier:
                keyid:DF:48:18:BD:0A:B3:BD:FF:3B:13:FF:A0:A0:B4:96:99:FE:0D:65:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30gYvQqzvf87E_-goLSWmf4NZdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/8eV-81_uKeNIQWi-RnISNeIm1sI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/208c59-e45c-42c6-9e37-94cac18bb916/1/30gYvQqzvf87E_-goLSWmf4NZdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:85:f8:cd:68:30:5b:2c:3f:94:90:02:da:ec:da:70:aa:23:
         83:b9:35:32:30:18:31:b8:f4:da:35:9a:35:79:7c:10:0e:a0:
         96:71:4e:f4:41:c8:0f:c2:a1:f3:bb:e4:ae:72:4c:ab:56:17:
         40:e6:d3:b3:5a:03:33:b1:80:e5:b8:89:2b:86:a8:0e:19:57:
         a1:79:44:53:f5:1f:4a:33:41:df:12:ee:1e:eb:24:ed:36:cb:
         5e:20:e2:80:3e:6b:69:09:ae:3f:58:c4:b3:76:3a:fa:ca:bd:
         eb:df:10:55:3d:cf:88:17:51:f1:d0:a6:2a:be:cd:9b:6a:c2:
         94:5a:77:65:92:fb:c1:15:54:fa:69:c9:c5:55:85:8c:ba:56:
         42:12:9e:54:12:c7:87:52:6d:65:89:61:e1:03:cc:43:12:08:
         f3:87:2e:02:e2:d5:a5:54:91:eb:7b:33:3f:3e:e6:dc:d3:c5:
         e7:4f:da:25:ca:99:b7:37:42:12:c9:c9:ba:05:b4:c6:59:9c:
         b0:bc:6b:c9:bc:b6:93:07:f8:1a:8f:12:b0:ab:fa:3c:a3:cb:
         a5:cf:21:54:55:05:4b:2e:49:cf:43:01:0c:b8:a3:3f:1d:f2:
         06:87:e4:7f:70:41:03:a7:2c:28:a0:59:96:df:1f:21:69:36:
         40:c9:42:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:23:41 2026 by rpki-client