This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/65n1MSI3unbbksrGBnV0tZNRKwU.roa
File:                     65n1MSI3unbbksrGBnV0tZNRKwU.roa (raw, json)
Hash identifier:          RAJKjfCFj0OujZqw3X076kiACwP7shKNwd0C92B0Iz0=
Subject key identifier:   EB:99:F5:31:22:37:BA:76:DB:92:CA:C6:06:75:74:B5:93:51:2B:05
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       019B797E3D4FF23BFEED4F3894AEF615DAFF
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/65n1MSI3unbbksrGBnV0tZNRKwU.roa
Signing time:             Thu 01 Jan 2026 12:17:54 +0000
ROA not before:           Thu 01 Jan 2026 12:17:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210110
IP address blocks:        185.190.81.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 12:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:3d:4f:f2:3b:fe:ed:4f:38:94:ae:f6:15:da:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 12:17:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eb99f5312237ba76db92cac6067574b593512b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:9e:16:3a:11:af:4b:36:3e:82:68:8b:58:
                    ef:58:34:16:73:95:7a:bf:2b:dc:98:57:62:87:38:
                    b5:96:36:b6:ee:cd:6f:d5:d6:57:27:f0:64:87:ce:
                    fb:04:03:b6:8b:a6:43:15:ed:23:a6:3e:03:97:60:
                    f8:9f:93:0f:eb:59:46:76:f6:89:62:15:20:68:5d:
                    bd:ef:c4:b2:45:d0:51:7d:89:85:8a:49:fd:44:91:
                    3b:48:86:1a:92:05:b3:83:b4:fe:e9:c4:5e:bd:1e:
                    5a:e3:f7:45:05:00:9e:fc:58:76:da:c2:9a:89:35:
                    10:5c:5f:1c:8d:07:6f:43:07:78:84:b1:b9:a2:4c:
                    0c:74:e1:12:d7:01:e1:88:e0:6c:d9:a0:ea:e1:93:
                    c5:34:22:71:9e:f9:75:02:41:db:4e:d5:fb:c5:0a:
                    73:c2:85:a1:2e:ba:16:4f:73:26:25:d3:e7:a2:bf:
                    5d:be:f6:8d:70:68:53:ea:89:29:5d:d5:be:7d:00:
                    3f:c6:b6:d2:23:bf:0c:e2:0d:02:c9:65:3c:3a:03:
                    bd:d9:c2:44:be:fd:3a:14:56:12:70:c5:73:4a:f8:
                    7a:f0:a5:1f:f9:35:da:5d:0d:95:78:6b:9a:d4:16:
                    e8:a9:bf:28:bb:6f:24:f4:09:0a:c9:96:3b:30:24:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:99:F5:31:22:37:BA:76:DB:92:CA:C6:06:75:74:B5:93:51:2B:05
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/65n1MSI3unbbksrGBnV0tZNRKwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:cb:66:fd:58:2d:a6:a7:2e:6f:98:32:a1:8f:ff:8c:b1:9b:
         76:a8:54:54:49:2f:7e:bd:45:ac:45:f0:66:0e:c1:84:94:98:
         ca:ac:06:3a:93:f5:a6:90:dc:b2:86:7a:35:94:72:a7:6d:77:
         3b:c6:3b:82:7f:be:74:33:2e:3d:35:82:e5:28:9c:59:85:39:
         0b:f3:90:c6:3b:fa:ce:6c:93:bf:e6:cd:e4:5d:0f:78:b8:a6:
         cb:a9:7f:a9:10:4e:19:17:85:35:e1:58:1f:f9:a8:16:c6:6a:
         44:c6:11:6d:3e:9e:cb:80:83:bb:1a:fd:14:89:7e:31:c6:01:
         98:3f:29:78:6a:53:5c:02:1f:72:24:0c:4c:5a:2f:7a:f8:63:
         29:f0:4c:8b:c5:b2:b7:2f:46:b3:6c:33:cb:01:7a:0f:3b:12:
         f7:57:31:a8:bd:e3:e6:74:47:16:fb:cd:3a:a0:9a:43:fa:14:
         55:12:90:ab:8f:86:23:20:7b:49:c6:50:96:24:c0:d6:46:99:
         d8:5b:a2:ae:09:ab:9a:76:6f:98:2a:49:bf:b2:bb:f9:3f:8b:
         15:70:20:17:93:dc:99:44:66:e2:d4:96:b3:73:76:fe:1d:e0:
         bd:bf:3f:d2:a4:88:c7:8b:ca:ca:20:33:ac:15:18:9d:e5:7b:
         d8:4f:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 20:27:35 2026 by rpki-client