This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/8SVcazJnmu-hFQWM3wOb0PrKho0.roa
File:                     8SVcazJnmu-hFQWM3wOb0PrKho0.roa (raw, json)
Hash identifier:          wcEIMGn9kXQiu8d1LEAtjcXokRGRSiotTvI/O0MGe9E=
Subject key identifier:   F1:25:5C:6B:32:67:9A:EF:A1:15:05:8C:DF:03:9B:D0:FA:CA:86:8D
Certificate issuer:       /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial:       019B7C12C48D68101299B16099FE4C8DC608
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/8SVcazJnmu-hFQWM3wOb0PrKho0.roa
Signing time:             Fri 02 Jan 2026 00:19:23 +0000
ROA not before:           Fri 02 Jan 2026 00:19:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15465
IP address blocks:        185.181.24.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:c4:8d:68:10:12:99:b1:60:99:fe:4c:8d:c6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
        Validity
            Not Before: Jan  2 00:19:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f1255c6b32679aefa115058cdf039bd0faca868d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:5a:0a:b6:c8:45:ec:14:6e:aa:bb:c0:fe:
                    5b:f7:e9:03:75:26:3d:81:84:c3:d5:82:13:29:f8:
                    1c:dd:9b:75:48:61:79:6d:8d:8a:a8:68:15:36:bf:
                    ab:0f:f0:e0:b0:a7:4a:c2:9f:db:14:00:5f:b6:71:
                    8d:af:e4:79:99:bd:ae:71:11:03:d5:c9:ea:3b:9f:
                    63:e4:3f:53:92:22:57:19:f1:d2:cc:d3:67:0d:f0:
                    e6:f6:31:9b:09:f2:92:53:d4:e3:16:60:e9:72:f2:
                    18:5a:9d:b3:87:de:d7:b9:2c:af:bd:25:a4:27:df:
                    e9:94:d4:a1:c7:56:05:28:d2:c2:83:5a:a4:ef:b9:
                    d1:2e:ed:fb:1f:da:f4:83:dd:db:70:cb:e4:53:b7:
                    0f:90:73:51:5d:2e:07:ba:a6:05:78:0e:e4:b9:84:
                    1a:c0:d1:ae:d4:8b:ab:43:8b:f7:8e:cc:cb:18:f8:
                    6d:34:98:e4:32:3f:97:39:3f:ef:37:63:b5:7f:03:
                    fc:6a:4f:eb:9e:8c:7c:cd:3b:88:38:2f:43:05:10:
                    6a:3a:3e:6e:97:c7:0c:38:30:f0:c3:35:38:c0:47:
                    a3:23:e1:ed:39:39:5f:a9:d6:82:d9:55:82:df:33:
                    10:80:10:6b:f1:5d:b3:b8:9b:99:a8:c6:56:ca:4e:
                    51:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:25:5C:6B:32:67:9A:EF:A1:15:05:8C:DF:03:9B:D0:FA:CA:86:8D
            X509v3 Authority Key Identifier:
                keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/8SVcazJnmu-hFQWM3wOb0PrKho0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.181.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:67:f6:4f:d1:38:04:6e:6c:7e:c1:82:41:73:20:06:e0:20:
         f8:d0:ee:49:ca:8d:37:4d:94:2f:a9:be:69:79:70:f0:21:d5:
         33:cb:74:35:e7:62:2f:4e:de:06:52:75:ec:9c:d2:a5:16:23:
         7a:33:40:2f:72:18:d3:d4:ba:5f:13:07:13:af:4e:a8:2d:c8:
         73:f1:79:e9:b9:95:49:16:98:71:28:a1:53:ae:f9:93:cf:02:
         7c:88:3b:2d:4c:63:44:e8:15:80:65:51:09:9a:89:2f:df:46:
         e6:83:7c:c3:d6:bb:b4:5e:0d:f9:c0:ed:1a:ec:4a:16:90:e9:
         25:b4:02:7d:15:01:c9:37:54:6a:3a:e7:8d:09:fb:5d:86:91:
         70:c7:4e:ff:bf:30:94:cd:6e:51:db:71:85:fb:0b:fc:fc:69:
         b8:6b:18:28:e2:31:17:fd:2b:b5:19:66:9b:2e:4d:76:69:1a:
         85:9a:91:19:05:6a:43:f5:25:50:04:c4:90:15:23:e0:e4:2c:
         a2:bc:97:0d:c7:bc:7b:6b:2b:00:3a:c0:05:1a:7a:18:a7:10:
         43:36:57:0c:04:5b:f2:51:b1:4a:c7:76:d6:90:39:7f:fc:29:
         3d:d0:59:bf:e4:6e:87:ee:fc:69:44:6f:7b:3e:ff:81:09:de:
         6a:04:b3:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8EsSNaBASmbFgmf5MjcYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOWIyZDcwMjMzZTBlNWJkZWY2ZGJmYmRhOTE4ODZkMjdi
NmE1YWUwHhcNMjYwMTAyMDAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTI1NWM2YjMyNjc5YWVmYTExNTA1OGNkZjAzOWJkMGZhY2E4NjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPFaCrbIRewUbqq7wP5b9+kDdSY9
gYTD1YITKfgc3Zt1SGF5bY2KqGgVNr+rD/DgsKdKwp/bFABftnGNr+R5mb2ucRED
1cnqO59j5D9TkiJXGfHSzNNnDfDm9jGbCfKSU9TjFmDpcvIYWp2zh97XuSyvvSWk
J9/plNShx1YFKNLCg1qk77nRLu37H9r0g93bcMvkU7cPkHNRXS4HuqYFeA7kuYQa
wNGu1IurQ4v3jszLGPhtNJjkMj+XOT/vN2O1fwP8ak/rnox8zTuIOC9DBRBqOj5u
l8cMODDwwzU4wEejI+HtOTlfqdaC2VWC3zMQgBBr8V2zuJuZqMZWyk5R4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPElXGsyZ5rvoRUFjN8Dm9D6yoaNMB8GA1UdIwQY
MBaAFKGbLXAjPg5b3vbb+9qRiG0ntqWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUt
M2YxYTdjNGY1MWI1LzEvOFNWY2F6Sm5tdS1oRlFXTTN3T2IwUHJLaG8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUtM2YxYTdjNGY1MWI1
LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubUYMA0G
CSqGSIb3DQEBCwUAA4IBAQB/Z/ZP0TgEbmx+wYJBcyAG4CD40O5Jyo03TZQvqb5p
eXDwIdUzy3Q152IvTt4GUnXsnNKlFiN6M0AvchjT1LpfEwcTr06oLchz8XnpuZVJ
FphxKKFTrvmTzwJ8iDstTGNE6BWAZVEJmokv30bmg3zD1ru0Xg35wO0a7EoWkOkl
tAJ9FQHJN1RqOueNCftdhpFwx07/vzCUzW5R23GF+wv8/Gm4axgo4jEX/Su1GWab
Lk12aRqFmpEZBWpD9SVQBMSQFSPg5CyivJcNx7x7aysAOsAFGnoYpxBDNlcMBFvy
UbFKx3bWkDl//Ck90Fm/5G6H7vxpRG97Pv+BCd5qBLNL
-----END CERTIFICATE-----
Generated at Tue Jan 27 08:35:18 2026 by rpki-client