This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vZ0JnbGkQygU2Y8CCpTr9icgrU4.roa
File:                     vZ0JnbGkQygU2Y8CCpTr9icgrU4.roa (raw, json)
Hash identifier:          t2ZzFO0nJIlbwEhCbNQmoDzuwTVLWr9QOVPPYIko4ls=
Subject key identifier:   BD:9D:09:9D:B1:A4:43:28:14:D9:8F:02:0A:94:EB:F6:27:20:AD:4E
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       019B7E37EEF73DA202F6FA9EA45D34CCC61A
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vZ0JnbGkQygU2Y8CCpTr9icgrU4.roa
Signing time:             Fri 02 Jan 2026 10:19:13 +0000
ROA not before:           Fri 02 Jan 2026 10:19:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211056
IP address blocks:        185.215.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:ee:f7:3d:a2:02:f6:fa:9e:a4:5d:34:cc:c6:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Jan  2 10:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bd9d099db1a4432814d98f020a94ebf62720ad4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:bc:d1:99:db:c4:d9:a7:c3:85:97:88:ce:
                    92:75:d7:31:b0:d3:78:60:f1:52:39:c1:61:d8:ab:
                    3b:05:9c:24:e9:26:1e:bb:8e:f1:88:0f:a5:24:0f:
                    30:9c:67:19:d4:cb:56:d3:b3:fc:eb:1b:c8:04:fd:
                    2f:24:21:a0:d9:57:da:04:de:0d:12:17:04:91:12:
                    b7:a7:fe:5c:38:ae:ed:1c:25:23:34:0c:b3:cd:26:
                    a5:69:ad:bd:ee:6a:64:40:fc:28:ca:cc:cb:ab:d0:
                    01:3a:4c:b9:8a:9b:88:34:50:8a:bf:73:6a:ef:12:
                    e3:5b:87:8f:ce:6f:f5:19:7c:9e:f8:e5:96:0d:ca:
                    b5:96:60:9f:d7:22:8e:2f:b5:ba:13:53:be:7f:af:
                    67:08:18:05:cf:a0:9a:79:3c:b0:8d:dc:5f:88:b0:
                    d6:49:73:cc:51:47:09:8f:a7:07:55:14:ba:fe:b3:
                    63:bd:d8:0e:37:88:0b:d3:c0:9f:af:96:20:78:a1:
                    a6:59:e4:cf:e3:2d:fd:6d:9c:63:f9:fd:01:bb:e8:
                    a6:21:b2:73:cd:81:e9:f5:9f:2e:ac:ed:c4:3a:7b:
                    cb:ba:19:03:bf:09:11:a5:93:bd:1d:29:39:65:b1:
                    40:0e:ca:e8:2c:24:16:51:79:b1:d5:03:be:5a:21:
                    bb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9D:09:9D:B1:A4:43:28:14:D9:8F:02:0A:94:EB:F6:27:20:AD:4E
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vZ0JnbGkQygU2Y8CCpTr9icgrU4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:49:c2:74:46:2e:50:55:aa:02:ee:4e:37:91:3b:ae:a7:59:
         bd:76:9b:af:52:7e:d8:f7:f1:ba:8d:6f:65:c4:3d:81:f6:84:
         4d:bf:1b:4a:db:ba:ff:ca:a4:3e:37:ca:f9:43:67:81:7c:58:
         29:d1:fc:dd:1a:d3:10:47:e2:75:51:bf:45:64:e5:2b:bc:05:
         4a:9e:d3:50:5a:24:a9:3a:2e:d7:74:29:6d:1a:12:20:7a:76:
         fd:c3:aa:2c:5f:65:a4:8a:bb:5e:d9:18:34:7d:60:4c:fb:1f:
         6b:67:ba:a3:56:50:e2:9b:87:40:5c:61:b2:24:1d:34:00:43:
         49:eb:9b:08:6d:43:1b:39:ba:73:e4:1b:e1:7a:75:2c:5c:90:
         ef:de:af:54:12:b0:8b:5a:51:aa:4d:6f:cb:3b:a7:0c:8d:8d:
         37:f5:ce:f0:65:11:9f:08:5a:12:42:da:f7:de:d3:a9:3c:cb:
         8a:58:10:c8:fc:a3:0e:ea:a8:fe:19:70:5c:e8:b1:d5:34:76:
         a9:26:64:57:7e:8f:b0:68:74:69:d0:6c:09:92:ca:97:7d:f0:
         8c:c4:83:51:92:9c:db:43:c3:f2:7b:8f:90:5d:fc:80:02:0e:
         c6:ff:2c:a7:f0:ca:48:71:ef:fc:25:59:24:73:7c:f5:4d:92:
         1a:95:47:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:33:26 2026 by rpki-client