This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/ixtZoNmxiG_wkXITXELK6spLLhI.roa
File:                     ixtZoNmxiG_wkXITXELK6spLLhI.roa (raw, json)
Hash identifier:          R3WjQ04yzcChTqlhK+2BR+bykQrjNPE+INNVOK70dYY=
Subject key identifier:   8B:1B:59:A0:D9:B1:88:6F:F0:91:72:13:5C:42:CA:EA:CA:4B:2E:12
Certificate issuer:       /CN=f963247d0d83b9f608cf864f427cdfe94b252a10
Certificate serial:       019B7B363DAAA90ADCC7AC2110662838AFC3
Authority key identifier: F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/ixtZoNmxiG_wkXITXELK6spLLhI.roa
Signing time:             Thu 01 Jan 2026 20:18:30 +0000
ROA not before:           Thu 01 Jan 2026 20:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202191
IP address blocks:        185.26.208.0/24 maxlen: 24
                          185.26.209.0/24 maxlen: 24
                          185.26.210.0/23 maxlen: 23
                          185.26.210.0/24 maxlen: 24
                          185.26.211.0/24 maxlen: 24
                          193.53.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:3d:aa:a9:0a:dc:c7:ac:21:10:66:28:38:af:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f963247d0d83b9f608cf864f427cdfe94b252a10
        Validity
            Not Before: Jan  1 20:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8b1b59a0d9b1886ff09172135c42caeaca4b2e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:75:4b:81:23:c4:e8:9a:78:78:fd:34:e5:18:
                    0a:ae:a6:c6:8f:41:61:ba:2c:fb:ce:5c:1f:4e:08:
                    f1:4d:7c:36:07:47:49:5f:ad:56:29:78:67:76:42:
                    87:74:9d:fb:26:d4:11:4e:1a:03:dc:a3:05:e8:ec:
                    8f:b7:6d:90:b3:a6:cc:a6:6d:b9:8c:8e:7f:28:04:
                    24:20:db:24:bb:94:83:03:3d:fd:a5:da:24:3e:47:
                    2f:6b:bb:4a:2f:4c:8e:1d:e6:7f:32:16:93:4c:2d:
                    f8:42:d6:94:4d:e3:f4:b0:55:05:89:9b:f3:c8:c4:
                    ea:56:ac:8a:4d:e1:bc:e0:0a:53:c3:ec:fb:01:9c:
                    89:8b:de:ce:93:29:40:70:91:0e:46:d4:f2:45:3f:
                    f8:7b:90:ea:7d:da:d8:63:68:ff:29:69:6d:13:79:
                    b4:bc:7c:86:74:c1:6b:ef:36:9d:1b:6b:ea:24:d5:
                    84:0a:b4:33:d1:0f:87:01:b1:53:32:01:f2:db:18:
                    43:92:70:93:51:25:4f:ef:2d:19:2d:e6:c5:3b:e0:
                    52:6c:f1:35:8e:50:9a:30:cb:33:d6:94:87:3b:16:
                    37:62:b7:09:68:4e:1a:bd:71:9e:d7:b2:8f:10:18:
                    9f:c5:b9:82:03:44:2d:3d:b0:ca:54:3f:24:4c:38:
                    8d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1B:59:A0:D9:B1:88:6F:F0:91:72:13:5C:42:CA:EA:CA:4B:2E:12
            X509v3 Authority Key Identifier:
                keyid:F9:63:24:7D:0D:83:B9:F6:08:CF:86:4F:42:7C:DF:E9:4B:25:2A:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/ixtZoNmxiG_wkXITXELK6spLLhI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/95b434-3de0-48e9-88e9-2d7f38474c08/1/1-WMkfQ2DufYIz4ZPQnzf6UslKhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.208.0/22
                  193.53.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:45:47:83:db:a8:5d:82:18:d2:48:bb:8c:2b:90:11:73:89:
         0f:81:1f:af:ed:88:31:a9:6a:8d:6d:b0:d9:3d:28:e3:1a:95:
         24:dd:af:44:64:44:47:52:79:56:c2:be:a3:b6:3a:2f:78:cc:
         14:6a:df:70:85:50:59:e5:20:bb:e9:af:0d:e1:47:18:75:c1:
         50:0a:40:b9:64:1b:c5:71:af:a4:a6:0e:35:50:fa:26:0e:e4:
         da:30:3f:60:47:2e:ea:b2:94:ea:54:32:35:1c:8f:84:01:36:
         06:26:58:93:4f:dd:aa:b3:59:47:85:f8:88:ad:7e:08:e8:00:
         3e:d0:02:f1:cd:3c:01:36:f5:99:4a:62:4c:ae:96:7a:8a:f4:
         96:91:5f:5d:64:04:37:99:f7:5c:2d:8a:0f:1f:b7:77:82:9e:
         a8:13:a5:21:ac:7d:cd:39:e4:1a:da:7e:ab:de:94:81:b4:a2:
         9d:28:5f:5d:ec:23:89:b3:0e:3d:e7:7b:51:91:35:52:0c:bc:
         61:ac:67:52:a3:af:6b:9e:27:57:98:f3:9c:f7:d6:14:c8:57:
         e2:34:6d:02:84:1a:77:67:9f:e2:0d:39:22:29:e6:ae:e7:c5:
         99:28:b7:eb:83:cd:87:26:fb:3f:25:01:1c:8c:ee:ab:5c:11:
         bc:28:f9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:29 2026 by rpki-client