This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/RLR72YRiJVyCWPKBdtMEO1UXGxo.roa
File:                     RLR72YRiJVyCWPKBdtMEO1UXGxo.roa (raw, json)
Hash identifier:          5N61eUvI++Qd4nCDGm+6k0H44mOvPhvyKSYwjTVvkeA=
Subject key identifier:   44:B4:7B:D9:84:62:25:5C:82:58:F2:81:76:D3:04:3B:55:17:1B:1A
Certificate issuer:       /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial:       019B7AC8D616B352F429E0037D781FD98686
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/RLR72YRiJVyCWPKBdtMEO1UXGxo.roa
Signing time:             Thu 01 Jan 2026 18:19:00 +0000
ROA not before:           Thu 01 Jan 2026 18:19:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207029
IP address blocks:        185.85.24.0/22 maxlen: 22
                          185.85.24.0/23 maxlen: 23
                          185.85.26.0/23 maxlen: 23
                          185.134.8.0/22 maxlen: 22
                          185.134.8.0/23 maxlen: 23
                          185.134.10.0/23 maxlen: 23
                          185.210.112.0/22 maxlen: 22
                          185.210.112.0/23 maxlen: 23
                          185.210.114.0/23 maxlen: 23
                          213.226.104.0/22 maxlen: 22
                          213.226.104.0/23 maxlen: 23
                          213.226.106.0/23 maxlen: 23
                          2a05:a580::/29 maxlen: 29
                          2a06:ea00::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:d6:16:b3:52:f4:29:e0:03:7d:78:1f:d9:86:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
        Validity
            Not Before: Jan  1 18:19:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=44b47bd98462255c8258f28176d3043b55171b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ee:37:4f:ea:71:27:1f:97:50:9f:f9:b6:f8:
                    56:d5:6c:46:9d:b2:39:0a:fb:dd:1a:79:0c:b0:af:
                    9b:60:ae:42:8e:03:4b:2b:6d:0b:e8:e0:c7:8e:20:
                    d2:89:76:30:76:59:c3:0f:89:88:f2:ac:c8:d1:17:
                    bd:6d:b6:7c:a5:5e:ab:c6:ca:26:ee:7f:25:40:af:
                    78:a1:91:1b:df:4a:2c:8b:e5:4c:c0:59:f6:b9:99:
                    e4:c9:2d:53:f9:a3:6f:6f:36:e7:72:01:07:5f:41:
                    73:55:4c:f4:5c:2e:9e:52:90:e0:d1:e8:87:c8:e9:
                    d2:a3:eb:4a:49:e2:61:a7:87:c2:c3:e8:63:e6:6f:
                    e5:89:11:a6:47:f1:58:ed:81:4a:d8:c2:5a:30:5b:
                    37:0e:73:b6:14:ba:96:ca:47:04:36:c6:40:74:ef:
                    44:75:84:09:af:a4:3f:5d:80:fc:ca:e2:75:25:15:
                    dd:28:0a:e4:72:d6:29:2c:dd:6d:4e:9c:fd:17:b1:
                    b9:f8:9d:de:14:38:be:03:cc:7f:d6:b4:7c:58:df:
                    fe:52:5a:1e:99:22:95:58:fb:2e:bc:60:35:e5:b2:
                    7e:95:35:01:65:cf:43:34:9f:ad:9e:c3:4e:3f:cd:
                    f5:1e:f7:dd:ba:d6:55:48:db:ae:04:c8:54:7e:95:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B4:7B:D9:84:62:25:5C:82:58:F2:81:76:D3:04:3B:55:17:1B:1A
            X509v3 Authority Key Identifier:
                keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/RLR72YRiJVyCWPKBdtMEO1UXGxo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.85.24.0/22
                  185.134.8.0/22
                  185.210.112.0/22
                  213.226.104.0/22
                IPv6:
                  2a05:a580::/29
                  2a06:ea00::/29

    Signature Algorithm: sha256WithRSAEncryption
         00:d1:fb:a4:07:ad:d6:3f:9b:69:ff:88:6d:37:0a:cd:6c:2b:
         70:6f:59:aa:d0:97:98:31:ce:b2:e4:5e:2b:6a:8d:47:4b:93:
         92:a1:41:79:fa:aa:16:92:0e:aa:7a:aa:00:d4:02:41:88:33:
         68:70:de:bb:73:7e:0d:12:46:d3:6d:66:cd:11:fe:6a:a0:07:
         fa:6a:5c:89:b2:b6:10:57:de:54:1e:cc:6a:dc:97:68:b4:98:
         4a:3a:02:30:00:cd:51:f6:af:e1:6c:3e:72:29:0d:84:35:ad:
         60:db:8c:e5:89:1d:64:ec:4b:5f:32:1d:2a:7c:7d:67:d0:5c:
         57:49:dc:3b:cf:14:cb:3b:bd:d4:ca:21:30:c6:9d:ed:16:22:
         77:68:fd:d7:17:68:bf:ad:cc:59:72:98:89:aa:70:66:b1:53:
         e4:11:ff:eb:98:34:3e:4e:74:ab:b8:db:6e:ad:33:3a:5b:38:
         b8:c2:ee:65:4d:bc:1b:50:e3:11:41:f1:c8:13:51:31:c3:59:
         a9:ab:5b:0d:dc:88:d6:ca:0e:03:cb:b9:dc:92:2f:cd:87:fb:
         c4:64:fa:9f:54:88:17:b3:e3:0f:9e:4e:3d:54:64:a7:7b:28:
         bd:c9:6d:49:0a:4d:ad:fd:f5:a1:c2:cf:34:4b:e1:3f:89:58:
         6e:e6:59:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:05:18 2026 by rpki-client