This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/Go5O8u6koNHV7b7UoH00mholn8I.roa
File:                     Go5O8u6koNHV7b7UoH00mholn8I.roa (raw, json)
Hash identifier:          iLDBMtL7MeCo+uMKF6jUonWy9kHpSBrH0Ajuok1AP1g=
Subject key identifier:   1A:8E:4E:F2:EE:A4:A0:D1:D5:ED:BE:D4:A0:7D:34:9A:1A:25:9F:C2
Certificate issuer:       /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial:       019B797EC98EAFE85EC1B8D74738B4C4FBF3
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/Go5O8u6koNHV7b7UoH00mholn8I.roa
Signing time:             Thu 01 Jan 2026 12:18:30 +0000
ROA not before:           Thu 01 Jan 2026 12:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29167
IP address blocks:        37.209.128.0/19 maxlen: 21
                          84.39.160.0/20 maxlen: 21
                          93.154.128.0/17 maxlen: 17
                          151.248.32.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:c9:8e:af:e8:5e:c1:b8:d7:47:38:b4:c4:fb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
        Validity
            Not Before: Jan  1 12:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1a8e4ef2eea4a0d1d5edbed4a07d349a1a259fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:12:07:38:74:ee:e1:59:d1:bd:3a:6b:e0:70:
                    36:cb:af:28:9f:f0:c9:f7:16:90:5f:26:e1:0a:2d:
                    2d:2c:4b:dc:fc:cc:6a:8a:a3:f4:87:a6:06:33:20:
                    7b:7b:88:d8:d1:f1:67:db:1c:03:52:70:68:21:36:
                    ba:44:19:24:a8:20:fd:f7:94:6a:3f:a9:26:e2:ba:
                    fd:ac:73:c4:cb:b4:c6:ae:32:31:d4:43:ac:72:4f:
                    d8:77:a1:e8:1f:73:f1:7a:21:ea:c3:d8:e7:c6:e7:
                    18:6e:f8:cc:62:9a:7d:48:0e:8f:2c:a9:1b:14:63:
                    5d:ec:f1:23:77:c1:88:b3:7e:f1:6a:6e:8b:62:25:
                    d3:63:25:9d:6b:14:cd:74:aa:86:bc:eb:cb:cb:e4:
                    92:33:b8:81:35:8b:1c:2d:6f:87:2c:3f:ef:d8:29:
                    f7:10:5d:5e:82:76:1d:2f:d0:f5:d0:d6:f6:dd:4c:
                    d4:a1:73:41:c1:ba:f9:20:1d:26:2d:d9:79:86:44:
                    85:81:4d:49:f5:62:6c:51:5a:1e:cc:c5:13:45:26:
                    5e:49:e2:d0:eb:63:6c:dc:2c:2e:b7:c6:fc:63:37:
                    ca:1c:2a:4e:ac:b0:1b:bb:8b:91:93:ae:bb:84:55:
                    73:c5:99:62:e7:1d:92:bf:6f:9f:d3:06:22:9f:d3:
                    9e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8E:4E:F2:EE:A4:A0:D1:D5:ED:BE:D4:A0:7D:34:9A:1A:25:9F:C2
            X509v3 Authority Key Identifier:
                keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/Go5O8u6koNHV7b7UoH00mholn8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.209.128.0/19
                  84.39.160.0/20
                  93.154.128.0/17
                  151.248.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:6b:3d:14:a0:63:5e:07:d3:f2:b9:f6:e4:22:e1:71:8d:dc:
         16:76:ef:99:61:7f:42:57:3b:db:3e:6d:af:5d:ea:3a:d6:a2:
         62:90:c1:a9:39:0d:a7:42:1d:4c:73:60:e4:f6:4c:c4:79:bc:
         a3:b7:f2:60:c7:ef:d4:05:0f:40:3a:e8:51:d5:0e:cc:c5:f8:
         85:a2:f8:e1:9c:14:68:0f:ad:a5:80:f1:1e:c2:b2:e1:89:f0:
         ad:52:39:33:94:6f:05:9f:f1:bb:ea:3b:e5:5c:11:48:25:25:
         06:46:c8:7b:ad:3e:01:90:a3:d4:2a:56:e6:2d:fe:fc:bb:6f:
         de:2a:27:26:2e:21:b3:d1:45:9c:b3:50:85:a1:7b:5f:55:0c:
         93:3f:98:b3:48:94:cd:a3:b8:2d:1e:67:6e:f9:01:45:ce:0a:
         97:2c:99:88:ed:73:da:bc:c0:d7:c0:98:05:89:cf:c3:2a:f7:
         d0:c2:be:0b:fe:c1:8c:c5:91:31:b0:43:b3:78:98:60:a2:c2:
         18:e6:5f:ed:11:56:58:56:ac:03:b3:a1:44:ee:2c:47:e5:0b:
         8c:c4:96:1f:6b:08:03:c3:ce:dc:f2:c9:d6:f5:e5:4a:73:6d:
         77:90:86:23:25:56:5d:e5:4e:bb:b6:2b:b0:07:b0:ed:a7:0c:
         8e:dd:dc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:15:36 2026 by rpki-client