This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/Ig2ees5HLfOePoZmV44oy1ypzFU.roa
File:                     Ig2ees5HLfOePoZmV44oy1ypzFU.roa (raw, json)
Hash identifier:          Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=
Subject key identifier:   22:0D:9E:7A:CE:47:2D:F3:9E:3E:86:66:57:8E:28:CB:5C:A9:CC:55
Certificate issuer:       /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial:       019B7F82FFDF71BF2F578347C176CCB73C80
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/Ig2ees5HLfOePoZmV44oy1ypzFU.roa
Signing time:             Fri 02 Jan 2026 16:20:50 +0000
ROA not before:           Fri 02 Jan 2026 16:20:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60026
IP address blocks:        194.61.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:ff:df:71:bf:2f:57:83:47:c1:76:cc:b7:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
        Validity
            Not Before: Jan  2 16:20:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=220d9e7ace472df39e3e8666578e28cb5ca9cc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:a8:96:19:c9:99:7d:26:a7:3f:c6:79:d4:
                    90:47:d1:e0:8b:ee:8d:8e:92:9b:83:6f:11:63:97:
                    8f:72:bc:5a:27:55:9f:74:5f:5c:11:c4:f9:ac:dd:
                    44:6a:50:87:5a:ec:91:de:e7:06:30:fb:b9:38:85:
                    68:8f:75:96:7e:e9:aa:38:aa:62:a0:2b:f2:08:75:
                    6e:c6:01:75:86:b7:0e:8d:e9:3a:3e:dd:95:6a:54:
                    84:82:25:d0:d9:47:8d:04:39:81:30:56:e3:96:8d:
                    66:db:55:87:ba:82:9f:e4:e5:52:3c:47:8f:db:b4:
                    b9:98:b3:b4:fd:11:9a:b5:c5:38:79:18:4d:9e:b6:
                    97:d6:dd:1d:77:e7:1f:85:f2:29:44:ef:08:99:24:
                    36:9d:21:ac:ab:fc:8d:da:10:da:92:be:fe:1b:03:
                    ad:93:87:76:10:bd:b0:59:4d:4a:62:92:82:9d:c1:
                    55:37:c2:17:ff:c1:07:5a:87:16:db:9d:e5:4d:4c:
                    33:52:63:28:10:38:32:cd:84:be:9f:73:cb:d5:76:
                    f2:2b:c9:1e:20:2a:e3:29:4d:cb:9e:7b:d4:ea:d3:
                    f9:b7:03:8d:31:12:7e:61:d2:e2:89:59:1a:2a:d7:
                    d1:71:73:20:3c:b8:59:14:77:4c:e5:90:19:c6:6a:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0D:9E:7A:CE:47:2D:F3:9E:3E:86:66:57:8E:28:CB:5C:A9:CC:55
            X509v3 Authority Key Identifier:
                keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/Ig2ees5HLfOePoZmV44oy1ypzFU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.61.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d6:80:6d:05:94:22:09:4f:5f:88:e4:f6:31:07:bb:dd:e3:
         10:c9:47:86:ed:1f:12:29:40:97:23:3f:90:83:c9:62:39:a4:
         dd:74:67:b0:cb:6a:5f:ac:6d:fe:30:d0:60:3b:73:69:5d:4e:
         fc:7e:20:58:1e:c2:b5:56:a0:0d:80:70:03:47:4d:65:07:a2:
         ed:a1:82:68:69:20:b0:14:11:4d:f8:71:16:b1:8d:ff:10:be:
         19:91:b9:f7:c7:da:3e:e8:af:56:11:1e:2f:88:c8:42:81:ef:
         42:e1:d2:b3:bb:99:ff:21:e4:04:d3:96:c7:3e:f1:63:3e:49:
         18:80:cd:6f:ce:21:f0:75:05:11:25:fa:fe:44:90:d2:76:d6:
         13:07:dc:f8:65:c3:65:7a:e0:c4:0e:f8:ec:c0:e4:25:d9:2b:
         5d:6c:46:b6:3f:89:6b:ff:0c:61:e1:20:24:b6:c9:8a:91:a2:
         1f:9c:e7:c6:cc:13:8e:e4:86:ae:7c:e4:51:0b:87:58:ab:b8:
         b9:f4:98:bf:72:66:57:14:93:5d:6d:91:73:a5:51:88:5b:c7:
         fc:89:68:13:9a:4b:cb:61:12:2e:c6:92:8a:aa:19:99:b3:0b:
         1a:26:1a:7b:3a:98:f0:93:95:32:fd:c0:45:75:3f:bf:24:a2:
         6d:15:49:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:25:49 2026 by rpki-client