This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/c0cTTJQDf36qVQCG96WRyKdM_Wc.roa
File:                     c0cTTJQDf36qVQCG96WRyKdM_Wc.roa (raw, json)
Hash identifier:          aYsM49Xy0hnVUlbAWRXmCHPgWbkgOmuFrAd7Tian+Cg=
Subject key identifier:   73:47:13:4C:94:03:7F:7E:AA:55:00:86:F7:A5:91:C8:A7:4C:FD:67
Certificate issuer:       /CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Certificate serial:       019B79113F202F032AB9AF3CF62D54302217
Authority key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/c0cTTJQDf36qVQCG96WRyKdM_Wc.roa
Signing time:             Thu 01 Jan 2026 10:18:52 +0000
ROA not before:           Thu 01 Jan 2026 10:18:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205313
IP address blocks:        185.222.72.0/22 maxlen: 22
                          185.222.72.0/23 maxlen: 23
                          185.222.72.0/24 maxlen: 24
                          185.222.73.0/24 maxlen: 24
                          185.222.74.0/23 maxlen: 23
                          185.222.74.0/24 maxlen: 24
                          185.222.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:3f:20:2f:03:2a:b9:af:3c:f6:2d:54:30:22:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
        Validity
            Not Before: Jan  1 10:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7347134c94037f7eaa550086f7a591c8a74cfd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1f:22:43:95:2b:5f:d9:13:d6:ca:e9:5e:d4:
                    54:6b:39:3c:11:96:4c:26:51:53:a4:7e:36:90:61:
                    7c:f7:06:ac:9e:12:9a:72:41:5a:aa:56:ee:42:69:
                    e6:ed:cc:6a:5f:76:84:69:7d:fa:24:ef:30:74:6a:
                    9b:8d:cb:18:7c:84:ee:50:db:c3:55:fb:48:e4:92:
                    a8:de:bb:df:c0:f7:70:9b:a9:9c:d6:e5:5c:7b:a9:
                    60:87:ff:57:88:60:2b:5f:fe:44:07:95:01:66:ef:
                    3f:be:2d:c2:57:dd:c1:da:15:aa:e6:24:b1:71:c6:
                    5b:35:0f:79:9a:de:bf:9f:82:9a:4a:e9:ce:89:36:
                    13:07:7b:ba:d1:5b:00:c1:e8:9c:6d:2b:f2:42:0b:
                    5c:a6:da:ed:95:f7:59:bd:f0:69:66:6a:a4:f8:1d:
                    6b:1f:d5:91:d2:09:35:a5:16:cf:76:88:7d:b4:ed:
                    09:8c:af:dd:ec:09:90:8a:72:c3:61:54:4b:fa:2d:
                    48:4c:36:f9:11:12:94:ad:a0:ee:bf:eb:68:65:a5:
                    68:18:6d:de:25:9d:33:ae:96:49:68:2e:45:4b:9d:
                    54:44:3a:27:9b:fe:9d:e4:3b:56:b3:13:f6:1c:65:
                    33:54:09:c0:12:b4:b2:12:92:05:16:e3:3f:03:ce:
                    17:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:47:13:4C:94:03:7F:7E:AA:55:00:86:F7:A5:91:C8:A7:4C:FD:67
            X509v3 Authority Key Identifier:
                keyid:B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/c0cTTJQDf36qVQCG96WRyKdM_Wc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:5f:fd:96:dc:df:23:f2:28:20:98:2f:63:76:43:7a:73:
         6d:84:e5:d6:30:88:e5:7b:a1:13:7c:ca:ae:6b:f8:e8:e5:95:
         62:63:95:ef:ba:9e:2a:80:8e:ac:33:d2:ea:d1:dc:ed:46:85:
         0b:a7:1b:b0:08:db:91:34:6d:64:5b:bc:fa:e1:91:05:b0:56:
         26:b0:20:b5:45:6b:26:92:d9:6b:f4:df:79:a2:68:de:cf:4d:
         49:18:66:9c:5f:46:2d:87:d2:c1:7b:d5:69:4c:05:17:0e:20:
         10:86:9a:0c:a2:45:99:50:69:7f:2b:f5:0e:ed:58:1b:f0:86:
         95:dc:90:9f:81:42:77:6f:00:b4:6c:bc:64:d4:da:5d:70:2b:
         35:e5:27:7a:7a:65:0d:c0:65:92:1b:db:2b:9b:f7:fb:dd:4b:
         7e:f1:8a:24:3a:57:fa:78:c9:d6:ee:b2:c3:4d:cd:9f:25:f6:
         84:5c:03:4e:bf:44:ae:f1:88:94:61:09:69:4c:a7:89:26:d9:
         62:26:81:3a:02:b1:a7:0b:2f:53:b7:5f:a6:88:60:e2:dc:35:
         dc:23:88:62:81:9c:30:72:7a:e1:6c:03:f5:04:2f:f8:0d:ea:
         61:51:1b:4c:66:ce:85:20:38:62:a8:e2:af:1c:da:f2:ca:aa:
         95:e1:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:22 2026 by rpki-client