This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/sIlCaCD_4BDRNR5RbqWtiio-eF0.roa
File:                     sIlCaCD_4BDRNR5RbqWtiio-eF0.roa (raw, json)
Hash identifier:          PQBWwOKM2zk4TrqswCsq5mNswJnxO+Lcbmzd/J2ySfc=
Subject key identifier:   B0:89:42:68:20:FF:E0:10:D1:35:1E:51:6E:A5:AD:8A:2A:3E:78:5D
Certificate issuer:       /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Certificate serial:       019B7D5CD6EAF60BC2838E8B77485D28DD33
Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/sIlCaCD_4BDRNR5RbqWtiio-eF0.roa
Signing time:             Fri 02 Jan 2026 06:19:54 +0000
ROA not before:           Fri 02 Jan 2026 06:19:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214093
IP address blocks:        185.160.77.0/24 maxlen: 24
                          2a01:fa84::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:d6:ea:f6:0b:c2:83:8e:8b:77:48:5d:28:dd:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
        Validity
            Not Before: Jan  2 06:19:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b089426820ffe010d1351e516ea5ad8a2a3e785d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:c7:be:bf:1e:12:a2:dd:fe:67:79:8f:c6:
                    60:e3:63:83:4a:62:53:f2:2d:c7:a3:bb:d9:ef:87:
                    86:4b:0f:8c:69:27:74:e8:46:17:60:6a:33:3f:ba:
                    a3:84:95:71:b0:53:4f:1f:8d:ae:0d:01:8e:81:e2:
                    bd:6b:0e:ed:79:fe:83:f6:02:b8:f2:b9:31:b9:04:
                    80:b6:9c:d5:2e:4e:a2:90:39:05:d2:71:7b:28:8e:
                    04:71:d6:06:03:45:ca:2b:42:52:29:b6:9e:19:ea:
                    4b:82:43:03:a0:63:58:4c:c4:52:22:92:6e:8f:3a:
                    6c:2d:57:b3:77:62:a7:cd:c9:b4:12:76:c4:69:ef:
                    53:45:b9:6b:52:38:b4:ff:1e:87:fd:11:29:cb:27:
                    5f:dc:8b:ff:c5:37:53:b1:d8:cb:46:e7:7b:af:89:
                    d8:22:cb:b1:3c:b7:12:04:ee:37:c0:8f:37:3f:a8:
                    ac:6e:ca:2a:bc:3b:84:73:4f:c0:77:8e:93:6f:ac:
                    63:67:59:5f:fa:ed:a7:55:3f:0c:ac:c7:77:37:d1:
                    1d:3d:57:45:7f:df:b1:d4:16:ba:84:56:c8:96:14:
                    3f:0c:8e:44:b7:07:bc:d5:1b:9a:2e:0a:60:ee:fd:
                    ee:c1:27:49:35:af:a0:20:7b:29:a0:bf:52:eb:0e:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:89:42:68:20:FF:E0:10:D1:35:1E:51:6E:A5:AD:8A:2A:3E:78:5D
            X509v3 Authority Key Identifier:
                keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/sIlCaCD_4BDRNR5RbqWtiio-eF0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.160.77.0/24
                IPv6:
                  2a01:fa84::/30

    Signature Algorithm: sha256WithRSAEncryption
         d1:da:4c:bc:1d:8b:09:1e:02:87:28:e0:7d:b3:0e:30:2d:12:
         cd:88:8a:cb:a3:0b:22:53:80:8a:b1:ce:f4:90:20:67:fc:f2:
         3d:85:6b:a3:fd:03:b0:8e:13:de:ac:c1:16:7a:02:ba:74:3e:
         b0:9e:8c:a3:5e:c4:61:3a:3b:2a:08:77:b7:02:bf:af:d4:77:
         01:9e:f3:0f:5e:70:b1:86:ec:d4:9f:4f:1e:a6:6e:49:e8:fd:
         e9:0a:0b:e5:90:28:02:5a:6e:71:5f:bf:d3:78:fd:f0:34:0d:
         16:75:d3:91:10:4f:20:75:0e:c5:16:93:9d:50:92:1d:57:d9:
         80:2e:8d:ed:e9:b4:ae:82:e2:95:b7:47:e1:eb:5a:1e:64:bf:
         c5:a8:31:e5:4f:77:6b:5c:ee:41:39:c9:e9:a5:ca:03:66:7c:
         b9:36:02:5f:bd:c9:01:bb:22:7b:02:ef:f6:19:f2:fe:8f:e8:
         d9:c4:a1:ba:75:f4:d7:b5:0f:59:e9:ef:37:e6:a8:99:66:4c:
         69:2b:09:ae:ed:de:1c:23:40:14:d1:74:df:74:ff:d5:b6:37:
         16:d8:9d:3a:5a:1d:51:73:fa:d2:84:9a:ec:d6:4a:f1:1e:5b:
         f9:a0:56:fb:0e:57:14:36:8c:f2:1f:ef:79:d5:7d:15:77:f9:
         8f:31:72:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:31 2026 by rpki-client