This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/B0Uzs5RoulMpxtKQXud6u4TA0PM.roa
File:                     B0Uzs5RoulMpxtKQXud6u4TA0PM.roa (raw, json)
Hash identifier:          mR2i4aLtlRQUg0BXj5ANdcDouKnEouJa0KGOvU/8HYM=
Subject key identifier:   07:45:33:B3:94:68:BA:53:29:C6:D2:90:5E:E7:7A:BB:84:C0:D0:F3
Certificate issuer:       /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial:       019B797E93ABCFB65C586AC2A097A1A95504
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/B0Uzs5RoulMpxtKQXud6u4TA0PM.roa
Signing time:             Thu 01 Jan 2026 12:18:16 +0000
ROA not before:           Thu 01 Jan 2026 12:18:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     30873
IP address blocks:        185.80.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:93:ab:cf:b6:5c:58:6a:c2:a0:97:a1:a9:55:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
        Validity
            Not Before: Jan  1 12:18:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=074533b39468ba5329c6d2905ee77abb84c0d0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:64:72:95:e9:a1:1c:49:53:2f:de:07:48:ab:
                    48:94:2a:cf:26:23:d6:46:5c:c5:5a:f1:ff:ee:71:
                    1d:96:27:e7:08:11:4f:f0:2a:00:21:f5:16:b9:01:
                    cb:fa:76:0b:61:cf:1f:82:18:ab:19:d6:84:90:36:
                    57:b3:30:e2:e5:6d:5c:e8:43:fc:89:0c:28:01:6c:
                    ae:2d:3b:2b:97:0b:ef:07:50:c9:71:74:b4:e1:f4:
                    25:41:0b:3f:27:0c:08:2c:3b:84:82:cc:04:d1:9f:
                    fa:eb:a4:7e:53:f1:e7:b9:56:42:0d:f1:42:4a:88:
                    fd:4f:6a:1a:e9:cf:31:7b:6e:06:54:71:02:72:3b:
                    ec:d6:a6:ec:f6:2d:5e:c9:f9:c0:3a:5e:9e:2a:82:
                    fc:1c:10:6a:5e:2c:f8:f7:6e:38:42:fd:53:9d:99:
                    75:9e:95:df:85:76:ca:2d:0a:0a:d7:3f:4d:1a:7d:
                    e9:d4:90:05:58:1d:e6:71:06:26:16:4e:ee:12:d5:
                    b2:c8:45:2f:72:87:a5:b4:67:37:e4:db:36:d8:b7:
                    e8:3b:be:5b:73:e5:8f:f7:c3:c4:2a:6f:64:7d:7d:
                    d6:f9:54:5f:2d:2f:0a:72:34:55:3e:72:c8:53:99:
                    ab:28:df:38:40:81:f8:c2:f4:2a:07:83:8d:ca:37:
                    63:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:45:33:B3:94:68:BA:53:29:C6:D2:90:5E:E7:7A:BB:84:C0:D0:F3
            X509v3 Authority Key Identifier:
                keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/B0Uzs5RoulMpxtKQXud6u4TA0PM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:65:8f:9d:16:78:01:41:f1:44:0a:33:44:fd:7c:80:ee:f4:
         8f:21:8f:c0:5c:bb:32:07:fd:02:48:59:ca:cb:54:20:7f:88:
         69:35:6d:90:ec:f3:dd:df:1a:3a:e9:c9:bf:97:9b:db:3e:28:
         c0:58:19:ba:0c:c2:b4:b5:1a:6e:27:1d:01:38:99:f4:ed:50:
         89:b1:a5:c1:8c:1b:0c:73:11:b6:b6:84:71:13:90:62:c9:56:
         da:1a:a3:6b:82:a2:45:4d:f5:ed:1c:46:e7:4c:d3:74:04:12:
         08:16:15:b6:09:25:ef:1f:5b:de:c2:44:28:3c:f1:53:b4:de:
         40:45:45:08:fd:29:3f:07:80:0b:dd:03:bd:d5:0e:4f:9d:02:
         19:57:64:36:ea:e4:a6:43:68:05:77:45:f3:3f:38:36:b3:be:
         4c:5f:25:29:f4:4a:33:5f:d2:83:92:b4:e7:1d:39:55:3c:0f:
         67:b3:57:cd:40:df:1d:cc:2c:dd:5d:0a:80:5d:71:f0:f2:8c:
         72:13:e9:05:d8:f2:8e:ee:44:b4:98:5e:3d:67:f7:49:f2:c9:
         d4:d6:a5:bb:66:85:e8:22:7f:21:a6:3f:8e:cf:b8:ab:4d:da:
         97:c2:8b:d0:f4:b2:a7:56:ec:85:44:3f:f7:ba:ba:b9:fd:d0:
         ca:81:96:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:06:51 2026 by rpki-client