This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/IreyC7z1Yhp8CnQTiMmYNasLsvc.roa
File:                     IreyC7z1Yhp8CnQTiMmYNasLsvc.roa (raw, json)
Hash identifier:          TR7+Aar2Bxv7ahPzs2fJ/dVUCPN2vUNNNaJde+kEpd0=
Subject key identifier:   22:B7:B2:0B:BC:F5:62:1A:7C:0A:74:13:88:C9:98:35:AB:0B:B2:F7
Certificate issuer:       /CN=8cee8804ff70376e2afe21abf93e228d5afdd509
Certificate serial:       019B7A5B8EDD43EA26BB1E3C76895817BCCB
Authority key identifier: 8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/IreyC7z1Yhp8CnQTiMmYNasLsvc.roa
Signing time:             Thu 01 Jan 2026 16:19:39 +0000
ROA not before:           Thu 01 Jan 2026 16:19:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204649
IP address blocks:        80.73.208.0/21 maxlen: 24
                          80.73.216.0/23 maxlen: 23
                          185.244.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:8e:dd:43:ea:26:bb:1e:3c:76:89:58:17:bc:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cee8804ff70376e2afe21abf93e228d5afdd509
        Validity
            Not Before: Jan  1 16:19:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=22b7b20bbcf5621a7c0a741388c99835ab0bb2f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e6:cc:01:45:37:e8:f9:32:3c:93:7c:13:f9:
                    45:fa:e3:42:19:e9:89:f0:a2:ed:81:6d:52:1d:7b:
                    bf:56:8b:30:f0:f0:24:31:e6:45:64:7e:d9:b4:8b:
                    c6:9b:64:5d:d0:91:1f:f3:4f:03:b4:cb:1d:5a:c2:
                    7a:97:fc:23:53:0d:c9:31:d6:70:2a:b9:da:42:f2:
                    e6:a3:4b:95:ba:8e:8e:04:1b:93:c6:d2:07:6d:da:
                    8b:5a:3a:05:a3:6b:3d:50:2f:51:4b:b8:74:79:9b:
                    3c:bd:61:f5:33:00:64:df:0b:bb:ad:96:b4:41:cd:
                    6e:3b:38:04:39:bb:56:56:8e:05:c0:50:a6:69:9a:
                    1d:fb:1f:e8:1b:bd:26:50:52:3f:cb:50:61:b2:b7:
                    3b:1e:b5:5a:32:06:32:15:60:ad:67:20:8b:7f:79:
                    21:c6:ef:1d:c5:68:49:3e:03:4e:a2:ec:c3:17:55:
                    93:aa:40:62:d5:fc:20:15:be:2b:6e:1a:87:95:be:
                    f9:a3:de:94:84:03:bf:50:2b:0a:96:75:8f:d8:16:
                    b7:71:87:99:5c:7b:ec:85:74:71:df:be:1b:f9:41:
                    6f:3a:2b:ed:76:ff:22:ec:52:b5:77:42:a3:2f:10:
                    b9:6d:05:50:f5:9b:64:09:15:91:40:d5:2a:f4:4f:
                    90:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B7:B2:0B:BC:F5:62:1A:7C:0A:74:13:88:C9:98:35:AB:0B:B2:F7
            X509v3 Authority Key Identifier:
                keyid:8C:EE:88:04:FF:70:37:6E:2A:FE:21:AB:F9:3E:22:8D:5A:FD:D5:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO6IBP9wN24q_iGr-T4ijVr91Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/IreyC7z1Yhp8CnQTiMmYNasLsvc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc1ab9-febe-4422-8b32-92d94cd7b024/1/jO6IBP9wN24q_iGr-T4ijVr91Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.208.0-80.73.217.255
                  185.244.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e5:bd:93:b8:ae:54:59:14:41:52:35:56:16:91:de:3f:1f:3d:
         7d:41:4e:25:af:fc:1a:75:37:fe:d0:a2:72:86:99:60:8a:fc:
         9d:bb:2f:42:c1:22:3c:4e:df:b6:e8:7a:3e:e2:aa:42:f7:69:
         de:19:0f:3a:56:40:6b:ab:1a:da:0f:cf:2f:c4:2c:d8:56:04:
         39:ed:59:fb:87:31:fa:24:0b:78:4c:aa:8b:28:71:f5:cb:8a:
         b3:b7:ef:06:80:45:47:ed:7d:dd:90:6e:c1:30:ea:08:52:76:
         d0:4d:e4:da:f1:7c:fb:63:9b:4f:07:d8:ac:8c:0e:e3:ce:22:
         39:95:4b:e6:45:05:8f:f9:6b:1e:0f:b5:6a:d4:bd:37:c0:6d:
         13:3f:67:a1:9e:ff:07:4e:26:f7:91:97:73:db:70:77:ff:ff:
         db:b1:36:4e:8b:40:03:31:0d:97:86:3d:c4:df:ba:76:b3:83:
         87:d6:54:ac:15:f6:b0:cd:de:ad:6f:bf:71:b7:ea:7a:73:c4:
         72:cc:35:b1:cb:25:8f:79:03:0a:fa:34:c6:10:e3:6e:a5:57:
         79:4b:e5:4b:78:32:6d:30:b3:09:15:13:97:e3:67:2e:0f:9f:
         35:09:fb:c1:72:59:d7:5d:10:99:c6:3f:f8:61:65:08:b0:45:
         51:66:97:d1
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZt6W47dQ+omux48dolYF7zLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZWU4ODA0ZmY3MDM3NmUyYWZlMjFhYmY5M2UyMjhkNWFm
ZGQ1MDkwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmI3YjIwYmJjZjU2MjFhN2MwYTc0MTM4OGM5OTgzNWFiMGJiMmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ObMAUU36PkyPJN8E/lF+uNCGemJ
8KLtgW1SHXu/Vosw8PAkMeZFZH7ZtIvGm2Rd0JEf808DtMsdWsJ6l/wjUw3JMdZw
KrnaQvLmo0uVuo6OBBuTxtIHbdqLWjoFo2s9UC9RS7h0eZs8vWH1MwBk3wu7rZa0
Qc1uOzgEObtWVo4FwFCmaZod+x/oG70mUFI/y1Bhsrc7HrVaMgYyFWCtZyCLf3kh
xu8dxWhJPgNOouzDF1WTqkBi1fwgFb4rbhqHlb75o96UhAO/UCsKlnWP2Ba3cYeZ
XHvshXRx374b+UFvOivtdv8i7FK1d0KjLxC5bQVQ9ZtkCRWRQNUq9E+QSwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFCK3sgu89WIafAp0E4jJmDWrC7L3MB8GA1UdIwQY
MBaAFIzuiAT/cDduKv4hq/k+Io1a/dUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzFhYjktZmViZS00NDIyLThiMzIt
OTJkOTRjZDdiMDI0LzEvSXJleUM3ejFZaHA4Q25RVGlNbVlOYXNMc3ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYzFhYjktZmViZS00NDIyLThiMzItOTJkOTRjZDdiMDI0
LzEvak82SUJQOXdOMjRxX2lHci1UNGlqVnI5MVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBARQSdAD
BAFQSdgDBAK59AwwDQYJKoZIhvcNAQELBQADggEBAOW9k7iuVFkUQVI1VhaR3j8f
PX1BTiWv/Bp1N/7QonKGmWCK/J27L0LBIjxO37boej7iqkL3ad4ZDzpWQGurGtoP
zy/ELNhWBDntWfuHMfokC3hMqosocfXLirO37waARUftfd2QbsEw6ghSdtBN5Nrx
fPtjm08H2KyMDuPOIjmVS+ZFBY/5ax4PtWrUvTfAbRM/Z6Ge/wdOJveRl3PbcHf/
/9uxNk6LQAMxDZeGPcTfunazg4fWVKwV9rDN3q1vv3G36npzxHLMNbHLJY95Awr6
NMYQ426lV3lL5Ut4Mm0wswkVE5fjZy4PnzUJ+8FyWdddEJnGP/hhZQiwRVFml9E=
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:16:18 2026 by rpki-client