This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/F4oDS3nVMxBAdNHBTP_jR3L2rbU.roa
File:                     F4oDS3nVMxBAdNHBTP_jR3L2rbU.roa (raw, json)
Hash identifier:          o/R8nP2KVmlJ+NXMkDw0CKw0ITlj+/zX+zWZq5sENck=
Subject key identifier:   17:8A:03:4B:79:D5:33:10:40:74:D1:C1:4C:FF:E3:47:72:F6:AD:B5
Certificate issuer:       /CN=305d78d2075c7820979d7ba50d25b1427b67d456
Certificate serial:       019B78A30FC07AD2D76A6011F46FD3FF02EE
Authority key identifier: 30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/F4oDS3nVMxBAdNHBTP_jR3L2rbU.roa
Signing time:             Thu 01 Jan 2026 08:18:30 +0000
ROA not before:           Thu 01 Jan 2026 08:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204819
IP address blocks:        185.69.64.0/22 maxlen: 22
                          2a05:2080::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:0f:c0:7a:d2:d7:6a:60:11:f4:6f:d3:ff:02:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305d78d2075c7820979d7ba50d25b1427b67d456
        Validity
            Not Before: Jan  1 08:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=178a034b79d533104074d1c14cffe34772f6adb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:11:ce:a1:99:72:e5:6f:12:46:83:d9:22:
                    a9:2d:66:35:cb:66:23:86:cd:fc:9d:82:ca:3c:46:
                    49:b5:a7:dc:d7:5e:8f:a5:a9:31:70:d5:83:d9:b5:
                    7d:86:67:7f:74:4a:7f:cc:11:1a:ef:f0:be:b6:59:
                    59:18:11:9b:da:75:c9:89:29:47:26:59:b7:c7:c1:
                    f1:c4:62:a1:d1:67:56:91:b7:9d:6d:3b:9e:a5:ac:
                    20:e7:d4:63:65:eb:33:6f:b2:d3:a0:aa:86:8f:b1:
                    ef:a5:fd:00:96:3f:c6:c3:53:91:9c:46:0b:ba:4d:
                    45:d3:17:19:d9:21:d1:1c:b9:85:47:ab:3f:2d:24:
                    62:c3:15:1e:74:28:13:82:42:05:ff:8e:37:7e:02:
                    19:fe:a3:94:8e:ed:1c:fb:3e:c6:fe:6b:cc:49:eb:
                    fc:3f:ea:02:69:a4:39:c7:46:0a:61:2e:9a:db:c8:
                    9d:4e:fb:b1:62:b9:b3:ad:ef:a1:e5:7c:63:1a:1d:
                    5a:25:4b:42:11:db:a4:3f:22:4e:ff:f1:91:11:a0:
                    c4:fe:f1:7d:0d:5c:6f:f6:6f:26:a0:8d:6d:a9:8a:
                    b0:75:6c:41:4a:41:c2:3a:20:ec:13:02:76:25:6b:
                    8f:16:2a:d7:ab:ab:35:e1:98:1d:2b:07:4d:29:f9:
                    50:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8A:03:4B:79:D5:33:10:40:74:D1:C1:4C:FF:E3:47:72:F6:AD:B5
            X509v3 Authority Key Identifier:
                keyid:30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/F4oDS3nVMxBAdNHBTP_jR3L2rbU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.64.0/22
                IPv6:
                  2a05:2080::/29

    Signature Algorithm: sha256WithRSAEncryption
         05:b9:27:58:1e:0a:f1:15:14:44:85:a3:aa:8e:c5:0c:78:b8:
         b8:d7:8e:51:86:28:9c:98:6f:31:d3:4a:d1:f1:c2:b3:81:3d:
         4c:7b:45:98:07:f4:5b:ee:83:9d:a8:ca:cd:8c:f9:dc:95:fc:
         52:ef:42:2f:d2:e6:95:51:0f:d2:fb:0e:db:7d:1b:84:52:26:
         dd:7f:58:b4:c7:7e:b8:6a:66:50:a0:2f:8d:6d:46:05:be:9e:
         7c:64:a1:8e:14:31:d1:76:8e:b5:77:0f:7e:64:6b:dd:56:81:
         cb:51:4f:bf:ec:c2:bb:5a:bd:ae:21:b8:3a:3f:ce:61:bd:f6:
         e7:32:35:a4:56:d1:f8:49:b4:22:61:59:09:14:0a:77:3c:17:
         ef:ea:f0:46:b7:c3:2b:f7:4c:be:42:80:bf:67:08:9d:4c:44:
         e7:19:42:47:8f:f2:1e:0a:6f:06:9b:c8:2a:84:40:5b:c2:75:
         72:5e:df:31:2c:7b:6f:fd:56:d5:7f:d4:d7:1f:5f:11:b4:80:
         30:eb:ca:06:d4:a3:72:5e:97:68:58:43:88:28:9f:f1:f0:b6:
         ee:36:97:bb:e3:1a:70:33:5d:b7:11:27:68:fe:60:f6:c6:7f:
         0c:df:ca:5c:a8:b7:a0:aa:f3:87:8d:a6:42:01:da:91:e3:c9:
         3e:11:31:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:13:18 2026 by rpki-client