This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa
File:                     Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa (raw, json)
Hash identifier:          zEpFycfVYnZq5Lv9INkh/ljd5iU1KyImwbjPqDc/m94=
Subject key identifier:   22:AB:F0:DA:A7:18:36:2B:03:45:A6:16:28:85:DB:35:9E:41:4A:01
Certificate issuer:       /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial:       019B791079AB84E728A2453F50165C5B9A22
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa
Signing time:             Thu 01 Jan 2026 10:18:01 +0000
ROA not before:           Thu 01 Jan 2026 10:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51588
IP address blocks:        194.56.92.0/22 maxlen: 22
                          194.56.92.0/23 maxlen: 23
                          194.56.92.0/24 maxlen: 24
                          194.56.94.0/23 maxlen: 23
                          194.56.94.0/24 maxlen: 24
                          194.56.95.0/24 maxlen: 24
                          2a06:3100::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:79:ab:84:e7:28:a2:45:3f:50:16:5c:5b:9a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
        Validity
            Not Before: Jan  1 10:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=22abf0daa718362b0345a6162885db359e414a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0a:f4:fe:e5:0d:e9:a5:6a:92:a0:46:c2:41:
                    06:9b:66:31:2c:41:2f:cf:d2:c7:46:b0:48:51:e9:
                    a3:fe:72:e0:15:1c:54:34:66:c5:39:a1:75:ef:0f:
                    e0:f9:b5:f8:63:db:d2:74:91:09:58:4e:f3:ac:41:
                    aa:ac:80:6f:1d:d8:17:ee:96:0e:1e:ce:98:07:27:
                    0d:e6:fd:06:6e:1a:c3:64:67:fc:cf:be:3e:f2:fb:
                    37:83:19:e5:9f:a1:f5:17:de:fd:75:56:e8:4a:b8:
                    dd:ba:10:85:e7:13:fd:81:1c:dc:69:3c:8a:4e:f8:
                    17:cf:c1:15:e1:c0:02:11:01:a5:04:28:60:7c:ee:
                    cf:94:bc:df:94:17:af:47:5b:7d:9e:2d:36:ce:6e:
                    e3:d3:94:38:77:7d:66:78:c6:f4:cb:d5:a6:b8:46:
                    e7:31:60:d6:20:b5:ab:13:d2:eb:aa:c1:a7:e4:63:
                    28:98:9e:d9:83:6c:e1:53:f1:36:02:32:43:26:b3:
                    07:06:04:ee:dc:de:96:40:c8:96:24:59:21:c9:46:
                    b5:14:87:e8:d3:ac:b1:ee:48:71:96:02:9d:ad:32:
                    8a:1b:66:5d:c3:b5:13:25:5d:d4:c6:67:85:1a:94:
                    5a:52:42:06:05:01:8c:5e:f1:72:6f:1d:6c:1b:c8:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AB:F0:DA:A7:18:36:2B:03:45:A6:16:28:85:DB:35:9E:41:4A:01
            X509v3 Authority Key Identifier:
                keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.56.92.0/22
                IPv6:
                  2a06:3100::/29

    Signature Algorithm: sha256WithRSAEncryption
         0f:4d:db:8a:e7:37:31:3b:39:a3:0d:cb:a5:19:e5:d8:b2:ae:
         46:f3:95:cd:ab:1a:b3:27:2c:05:de:43:9b:03:00:bd:27:45:
         08:07:f4:9a:e6:0a:d8:8a:54:5f:84:e9:db:5c:b7:90:a4:e1:
         3b:93:fa:8f:36:df:af:3a:da:44:af:0b:16:42:04:95:89:69:
         e2:9e:37:22:29:05:ec:8e:db:cf:cd:9e:d7:b6:3f:d8:b8:fd:
         08:74:c4:1b:69:50:35:af:68:2a:6c:50:46:89:59:6b:cc:b0:
         7e:5e:8c:41:88:80:67:36:30:b1:4b:ae:05:32:ef:5a:eb:4d:
         31:8d:e0:27:a8:5e:cc:62:c9:97:f1:97:69:85:23:df:33:2f:
         0d:84:91:d5:f9:95:c9:7d:ed:c3:37:d8:de:5c:11:c8:f2:ae:
         1f:44:7d:ef:51:7a:0e:37:84:ca:d8:42:ad:4a:84:75:ed:c3:
         c6:e2:08:10:4c:a7:ca:db:2d:d4:0b:b6:41:d8:e9:49:ea:65:
         f7:07:39:13:32:39:83:6f:65:c0:d5:28:ac:c9:a9:7a:d3:2e:
         2a:72:68:04:9b:a0:b1:dc:87:7d:25:52:db:39:64:50:f8:a8:
         e2:0b:10:2a:ec:20:50:28:1a:84:ff:02:a1:ef:b1:46:08:72:
         4b:84:1d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:51 2026 by rpki-client