This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/ilNm5742TcelBt1JRTpbVc0kEFQ.roa
File:                     ilNm5742TcelBt1JRTpbVc0kEFQ.roa (raw, json)
Hash identifier:          SMPc6b5V7LjBUekIbR5+KEL4jjQXtQ78eL+CAx5590Q=
Subject key identifier:   8A:53:66:E7:BE:36:4D:C7:A5:06:DD:49:45:3A:5B:55:CD:24:10:54
Certificate issuer:       /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial:       019B783452F07C14A0C7BD8DEA37372AEB1A
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/ilNm5742TcelBt1JRTpbVc0kEFQ.roa
Signing time:             Thu 01 Jan 2026 06:17:33 +0000
ROA not before:           Thu 01 Jan 2026 06:17:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     0
IP address blocks:        80.255.192.0/19 maxlen: 19
                          84.19.104.0/21 maxlen: 21
                          84.19.122.0/23 maxlen: 23
                          84.19.124.0/22 maxlen: 22
                          185.228.252.0/22 maxlen: 22
                          193.39.32.0/20 maxlen: 20
                          193.39.65.0/24 maxlen: 24
                          193.193.96.0/20 maxlen: 20
                          194.145.148.0/23 maxlen: 23
                          195.182.160.0/19 maxlen: 19
                          212.43.160.0/19 maxlen: 19
                          213.147.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Jan 2026 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:52:f0:7c:14:a0:c7:bd:8d:ea:37:37:2a:eb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
        Validity
            Not Before: Jan  1 06:17:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8a5366e7be364dc7a506dd49453a5b55cd241054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:c5:71:ea:ad:2a:39:12:67:33:63:09:6e:
                    1a:24:eb:cc:4f:f2:75:19:05:cc:a8:e0:7f:ef:96:
                    c4:a0:5b:4d:ff:92:97:a8:35:ea:b4:2e:63:ad:d6:
                    be:1b:8f:1f:aa:f6:22:11:af:2b:7b:62:91:85:68:
                    8f:f4:75:61:40:6d:a6:5c:55:1b:0b:24:f6:d0:e2:
                    9c:ea:11:89:b8:2c:a8:9e:68:f6:30:94:21:d4:c7:
                    78:6c:7e:bf:b4:37:74:99:34:41:d3:44:62:af:1c:
                    bc:c8:a8:b0:8c:3e:4b:e4:7f:79:ca:71:d9:31:57:
                    ab:a2:5e:c3:38:21:f7:29:3b:c1:1d:59:9f:98:47:
                    86:d9:75:30:31:e3:55:c9:e7:69:25:b4:04:45:6d:
                    98:fe:47:14:62:05:6e:50:df:91:e1:bf:1c:00:8d:
                    08:f1:b0:c6:ee:a4:c8:db:be:65:27:0f:c8:08:c6:
                    5c:07:e7:45:81:99:6b:ca:14:5d:c1:54:f5:29:05:
                    2d:d0:59:b9:e8:d2:c9:f9:0a:cd:8c:78:f8:3d:bc:
                    6c:b9:eb:13:2e:dc:41:ab:a4:a2:27:41:2d:00:d9:
                    6f:c0:c6:fa:c7:6c:92:b7:c2:25:b6:2e:a3:37:c2:
                    af:6c:70:41:38:59:44:c5:be:9d:0c:52:05:7a:b6:
                    ee:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:53:66:E7:BE:36:4D:C7:A5:06:DD:49:45:3A:5B:55:CD:24:10:54
            X509v3 Authority Key Identifier:
                keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/ilNm5742TcelBt1JRTpbVc0kEFQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.255.192.0/19
                  84.19.104.0/21
                  84.19.122.0-84.19.127.255
                  185.228.252.0/22
                  193.39.32.0/20
                  193.39.65.0/24
                  193.193.96.0/20
                  194.145.148.0/23
                  195.182.160.0/19
                  212.43.160.0/19
                  213.147.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:3f:ff:5f:e8:dd:67:92:93:cb:a7:1c:76:89:2b:56:14:f7:
         00:18:08:fb:e8:7f:8a:6b:e3:6c:5e:6d:02:9e:98:1a:7f:e8:
         2b:eb:13:27:16:ab:81:da:c2:a5:6c:ee:c2:cf:ee:05:5d:13:
         ae:5d:0d:70:5a:c4:9f:39:5d:38:65:51:3f:a4:26:61:90:e7:
         84:6b:8f:8c:51:b5:29:bb:43:04:d0:6f:c6:ff:f8:d6:68:d9:
         2c:74:39:01:f2:ba:fd:c3:5a:b9:55:bf:99:e7:e4:ce:e5:cc:
         88:a0:43:df:c4:30:97:7a:84:b6:05:c6:b4:8d:a1:b3:09:fd:
         fc:44:91:a1:8e:fb:7f:76:a8:d4:3f:07:8e:fc:87:8a:f6:27:
         25:b2:13:14:cd:2a:f7:bb:cd:1e:0d:4f:26:31:d4:f8:d7:11:
         64:09:26:92:0e:31:c1:62:74:24:a7:9c:62:c9:cd:10:39:79:
         dd:3c:a4:f8:b4:4f:7d:32:46:0c:51:dc:18:46:1e:f6:1a:65:
         95:c0:d9:17:1d:86:10:4e:62:a2:8b:8d:44:3c:43:40:d5:65:
         df:75:fd:fb:c7:2b:cf:83:4b:87:0a:a6:3e:b4:93:d7:88:98:
         a8:d3:3f:a5:43:0a:d5:67:81:0a:4e:80:1b:61:15:03:6d:78:
         e5:16:24:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 23:47:50 2026 by rpki-client