This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/hze4A0V92MfHhyu7x2NvKYYAUsU.roa
File:                     hze4A0V92MfHhyu7x2NvKYYAUsU.roa (raw, json)
Hash identifier:          dle1j6BffFc6fGo61Udoz+fPmbQB19nVhumxOtstYAI=
Subject key identifier:   87:37:B8:03:45:7D:D8:C7:C7:87:2B:BB:C7:63:6F:29:86:00:52:C5
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       019B7E37F3D5073ADD2F34312E86D488AA15
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/hze4A0V92MfHhyu7x2NvKYYAUsU.roa
Signing time:             Fri 02 Jan 2026 10:19:14 +0000
ROA not before:           Fri 02 Jan 2026 10:19:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     216169
IP address blocks:        185.26.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 22:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:f3:d5:07:3a:dd:2f:34:31:2e:86:d4:88:aa:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Jan  2 10:19:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8737b803457dd8c7c7872bbbc7636f29860052c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f1:94:fa:b7:24:cd:bf:db:90:7e:5c:d6:ac:
                    d2:c0:58:ea:19:64:b1:ce:db:65:aa:3d:2c:b5:17:
                    04:4a:55:f9:f1:d4:2c:94:cf:5b:70:59:e0:d3:4d:
                    7f:5a:5a:5b:02:80:5a:48:8a:80:2d:e0:bf:97:0d:
                    a0:b3:ab:cc:c2:2b:7c:38:53:64:43:dd:a8:96:76:
                    da:22:6c:b1:6b:31:29:2f:35:8f:a8:6a:4d:48:8d:
                    2a:7a:64:52:12:61:49:a7:6d:13:eb:81:a3:83:b0:
                    b4:3a:17:31:d2:71:a7:64:76:8e:b9:7a:4e:f3:42:
                    1d:9b:f8:2e:90:06:a1:5a:2c:8c:5f:1a:34:d8:73:
                    c3:f3:40:05:6c:40:77:db:db:b7:4b:cc:3f:f3:1a:
                    5f:c5:c5:14:09:00:54:26:72:93:c5:b8:2b:c9:94:
                    bd:ad:4a:d9:11:d9:ee:1c:44:47:0d:82:f5:12:41:
                    f6:48:88:d6:a3:f1:20:7f:b6:c6:57:ef:75:8d:09:
                    b8:5f:72:a7:47:0c:50:e7:3b:db:43:73:b6:c3:97:
                    49:2b:d3:59:b7:04:91:77:9e:e0:b2:26:fa:5e:80:
                    0a:d7:4d:ff:69:52:dd:95:87:86:e7:b4:b0:22:33:
                    57:78:0d:d1:3d:bc:c8:3d:e2:16:71:39:91:d8:bf:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:37:B8:03:45:7D:D8:C7:C7:87:2B:BB:C7:63:6F:29:86:00:52:C5
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/hze4A0V92MfHhyu7x2NvKYYAUsU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:96:c5:0c:a0:e7:55:9d:a6:ab:cb:d0:f3:54:c8:97:da:30:
         12:9d:85:fc:df:23:8e:54:25:b0:d1:c5:c5:65:eb:fc:ed:87:
         c9:15:8d:7e:ae:06:4d:eb:1c:ee:e8:bd:fa:c1:af:46:1a:54:
         f1:48:17:79:10:2b:7b:06:3c:80:4d:52:19:5b:e9:45:02:74:
         e9:fb:07:1f:99:70:cd:69:4c:5b:81:fc:7d:d0:e7:99:be:0d:
         57:0c:d4:3a:25:50:44:a5:73:f0:31:4d:4c:fc:35:ca:3b:10:
         78:5d:1e:c5:1b:88:ec:59:9f:a5:e2:6d:3a:bf:42:cb:bb:8a:
         d8:95:89:bd:53:bb:c0:50:f3:d6:5b:ad:79:27:2e:93:9d:4e:
         45:f4:03:b2:84:bd:12:16:00:14:f2:81:e7:a1:b5:9c:12:f1:
         67:67:76:de:29:aa:a4:12:6b:71:3a:2d:fc:23:a0:30:45:7b:
         22:0b:8d:a6:90:65:3f:f0:de:ea:6b:04:5a:ac:cf:e1:d8:fe:
         5e:43:69:d6:19:02:ee:56:4d:0f:2f:e4:27:79:f2:78:80:ee:
         1a:28:a5:de:6b:97:96:31:57:83:06:6b:cc:62:a4:46:81:1c:
         93:17:19:f3:b7:54:3a:2c:32:67:6d:76:71:35:ff:9b:f5:65:
         e3:2d:e4:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+N/PVBzrdLzQxLobUiKoVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjYwMTAyMTAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzM3YjgwMzQ1N2RkOGM3Yzc4NzJiYmJjNzYzNmYyOTg2MDA1MmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPGU+rckzb/bkH5c1qzSwFjqGWSx
zttlqj0stRcESlX58dQslM9bcFng001/WlpbAoBaSIqALeC/lw2gs6vMwit8OFNk
Q92olnbaImyxazEpLzWPqGpNSI0qemRSEmFJp20T64Gjg7C0Ohcx0nGnZHaOuXpO
80Idm/gukAahWiyMXxo02HPD80AFbEB329u3S8w/8xpfxcUUCQBUJnKTxbgryZS9
rUrZEdnuHERHDYL1EkH2SIjWo/Egf7bGV+91jQm4X3KnRwxQ5zvbQ3O2w5dJK9NZ
twSRd57gsib6XoAK103/aVLdlYeG57SwIjNXeA3RPbzIPeIWcTmR2L9T2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIc3uANFfdjHx4cru8djbymGAFLFMB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvaHplNEEwVjkyTWZIaHl1N3gyTnZLWVlBVXNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRogMA0G
CSqGSIb3DQEBCwUAA4IBAQAulsUMoOdVnaary9DzVMiX2jASnYX83yOOVCWw0cXF
Zev87YfJFY1+rgZN6xzu6L36wa9GGlTxSBd5ECt7BjyATVIZW+lFAnTp+wcfmXDN
aUxbgfx90OeZvg1XDNQ6JVBEpXPwMU1M/DXKOxB4XR7FG4jsWZ+l4m06v0LLu4rY
lYm9U7vAUPPWW615Jy6TnU5F9AOyhL0SFgAU8oHnobWcEvFnZ3beKaqkEmtxOi38
I6AwRXsiC42mkGU/8N7qawRarM/h2P5eQ2nWGQLuVk0PL+QnefJ4gO4aKKXea5eW
MVeDBmvMYqRGgRyTFxnzt1Q6LDJnbXZxNf+b9WXjLeRX
-----END CERTIFICATE-----
Generated at Wed Jan 21 07:24:30 2026 by rpki-client