This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/B_o18Q1mcAJkHhAAMFVZfU2vw1Q.roa
File:                     B_o18Q1mcAJkHhAAMFVZfU2vw1Q.roa (raw, json)
Hash identifier:          m70cXFfVitOu3jwQoQA0iSLJpKNxlx2Ov/nnHKpbgsA=
Subject key identifier:   07:FA:35:F1:0D:66:70:02:64:1E:10:00:30:55:59:7D:4D:AF:C3:54
Certificate issuer:       /CN=1bb29b3f158fa80710c12a58b69fb926098d5129
Certificate serial:       019B7910CF2723B420BB3D2F9FF7DC9A3551
Authority key identifier: 1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/B_o18Q1mcAJkHhAAMFVZfU2vw1Q.roa
Signing time:             Thu 01 Jan 2026 10:18:23 +0000
ROA not before:           Thu 01 Jan 2026 10:18:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47782
IP address blocks:        91.205.48.0/22 maxlen: 22
                          91.205.48.0/24 maxlen: 24
                          91.205.49.0/24 maxlen: 24
                          91.205.50.0/24 maxlen: 24
                          91.205.51.0/24 maxlen: 24
                          95.215.244.0/22 maxlen: 22
                          95.215.244.0/24 maxlen: 24
                          95.215.245.0/24 maxlen: 24
                          95.215.246.0/24 maxlen: 24
                          95.215.247.0/24 maxlen: 24
                          178.216.208.0/21 maxlen: 21
                          178.216.208.0/24 maxlen: 24
                          178.216.209.0/24 maxlen: 24
                          178.216.210.0/24 maxlen: 24
                          178.216.211.0/24 maxlen: 24
                          178.216.212.0/24 maxlen: 24
                          178.216.213.0/24 maxlen: 24
                          178.216.214.0/24 maxlen: 24
                          178.216.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:cf:27:23:b4:20:bb:3d:2f:9f:f7:dc:9a:35:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb29b3f158fa80710c12a58b69fb926098d5129
        Validity
            Not Before: Jan  1 10:18:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=07fa35f10d667002641e10003055597d4dafc354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:b9:98:db:a2:1e:c0:2a:73:9a:35:0d:2c:
                    ee:1a:0f:64:a7:20:1b:cc:0f:79:cc:3d:68:fe:0a:
                    73:03:bd:b0:78:49:98:92:df:cc:1c:8b:8d:a1:20:
                    32:5d:48:5a:91:75:76:69:17:d6:9f:d4:c1:ac:8c:
                    9c:98:76:f3:7d:6f:98:6f:c3:29:4c:ba:0c:42:59:
                    c9:a6:cf:f8:b6:4d:56:7b:31:55:f9:0f:36:2b:e8:
                    ae:b4:55:4f:a7:3a:bb:7e:03:00:53:40:54:94:d8:
                    2b:0c:15:a5:c5:c2:2c:21:1f:d4:14:52:7d:09:6c:
                    f3:5b:eb:7d:ea:29:42:d9:be:d7:bb:d3:21:b1:2e:
                    b6:03:70:39:d5:7a:bb:88:c1:77:8a:d5:2e:fc:06:
                    1d:e3:d7:d4:39:28:48:49:25:cf:93:07:04:b7:e8:
                    aa:b5:f0:08:20:cc:ac:bf:b0:c3:65:7d:2f:4d:84:
                    ca:00:0e:80:66:d1:e0:42:86:08:23:51:45:2b:ca:
                    6f:e0:bc:7f:85:bc:db:84:a4:86:14:c4:d6:81:f2:
                    11:12:33:5b:8e:b1:86:27:34:88:3a:9d:3b:c3:27:
                    d5:63:93:4f:78:de:86:94:2a:8f:21:19:03:d7:38:
                    cf:d8:dc:b6:c1:eb:28:04:8a:14:95:59:45:b0:7a:
                    94:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FA:35:F1:0D:66:70:02:64:1E:10:00:30:55:59:7D:4D:AF:C3:54
            X509v3 Authority Key Identifier:
                keyid:1B:B2:9B:3F:15:8F:A8:07:10:C1:2A:58:B6:9F:B9:26:09:8D:51:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7KbPxWPqAcQwSpYtp-5JgmNUSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/B_o18Q1mcAJkHhAAMFVZfU2vw1Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/573f0b-5325-41d3-b9ff-8f7d56b7b417/1/G7KbPxWPqAcQwSpYtp-5JgmNUSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.48.0/22
                  95.215.244.0/22
                  178.216.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:24:a7:63:df:50:50:2f:d4:b8:ab:a6:f3:74:38:00:7f:d9:
         96:a7:bb:e9:2f:c0:67:77:b9:0d:33:17:e8:87:38:54:1a:c1:
         68:9d:82:71:eb:e1:7d:ad:1c:34:f4:44:64:12:16:f8:50:7e:
         59:9b:ea:d4:11:54:88:06:10:8a:a3:08:0a:63:41:88:4e:38:
         5b:21:f2:d9:72:b2:64:46:a6:0a:a2:7c:14:72:b6:4a:fb:38:
         89:c8:b3:60:f2:3c:9b:4a:88:cf:e9:66:ba:6e:0a:4d:54:8d:
         53:b4:88:40:d4:37:37:89:dd:f1:86:89:32:7f:2a:a7:84:0d:
         ea:d3:6e:6f:2e:ee:5e:e0:62:05:15:f9:61:3c:15:54:76:8d:
         50:52:97:c7:4a:88:19:bc:5c:d1:d0:d4:13:18:70:ac:7b:b6:
         87:ad:f7:66:52:76:63:3f:cb:d7:42:a6:c8:b8:16:db:e4:38:
         fb:c4:5b:c3:96:04:d9:0a:a8:17:02:dc:f1:fb:bc:e8:05:3f:
         86:f8:f4:13:e9:a0:e4:ab:fe:41:af:e2:f0:b3:5c:9a:0a:73:
         d4:61:1e:73:56:b0:71:dc:f7:21:20:9b:c7:c5:71:6e:ac:5d:
         a5:87:40:03:fe:68:3e:eb:ea:53:71:81:53:1f:34:5e:b4:6d:
         87:85:a2:8e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZt5EM8nI7Qguz0vn/fcmjVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYjI5YjNmMTU4ZmE4MDcxMGMxMmE1OGI2OWZiOTI2MDk4
ZDUxMjkwHhcNMjYwMTAxMTAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2ZhMzVmMTBkNjY3MDAyNjQxZTEwMDAzMDU1NTk3ZDRkYWZjMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVu5mNuiHsAqc5o1DSzuGg9kpyAb
zA95zD1o/gpzA72weEmYkt/MHIuNoSAyXUhakXV2aRfWn9TBrIycmHbzfW+Yb8Mp
TLoMQlnJps/4tk1WezFV+Q82K+iutFVPpzq7fgMAU0BUlNgrDBWlxcIsIR/UFFJ9
CWzzW+t96ilC2b7Xu9MhsS62A3A51Xq7iMF3itUu/AYd49fUOShISSXPkwcEt+iq
tfAIIMysv7DDZX0vTYTKAA6AZtHgQoYII1FFK8pv4Lx/hbzbhKSGFMTWgfIREjNb
jrGGJzSIOp07wyfVY5NPeN6GlCqPIRkD1zjP2Ny2wesoBIoUlVlFsHqU9wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAf6NfENZnACZB4QADBVWX1Nr8NUMB8GA1UdIwQY
MBaAFBuymz8Vj6gHEMEqWLafuSYJjVEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzdLYlB4V1BxQWNRd1NwWXRwLTVKZ21OVVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi81NzNmMGItNTMyNS00MWQzLWI5ZmYt
OGY3ZDU2YjdiNDE3LzEvQl9vMThRMW1jQUprSGhBQU1GVlpmVTJ2dzFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi81NzNmMGItNTMyNS00MWQzLWI5ZmYtOGY3ZDU2YjdiNDE3
LzEvRzdLYlB4V1BxQWNRd1NwWXRwLTVKZ21OVVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW80wAwQC
X9f0AwQDstjQMA0GCSqGSIb3DQEBCwUAA4IBAQAnJKdj31BQL9S4q6bzdDgAf9mW
p7vpL8Bnd7kNMxfohzhUGsFonYJx6+F9rRw09ERkEhb4UH5Zm+rUEVSIBhCKowgK
Y0GITjhbIfLZcrJkRqYKonwUcrZK+ziJyLNg8jybSojP6Wa6bgpNVI1TtIhA1Dc3
id3xhokyfyqnhA3q025vLu5e4GIFFflhPBVUdo1QUpfHSogZvFzR0NQTGHCse7aH
rfdmUnZjP8vXQqbIuBbb5Dj7xFvDlgTZCqgXAtzx+7zoBT+G+PQT6aDkq/5Br+Lw
s1yaCnPUYR5zVrBx3PchIJvHxXFurF2lh0AD/mg+6+pTcYFTHzRetG2HhaKO
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:35 2026 by rpki-client