This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/0bgPaSS9Ae0rB9f1u5QtAJZ7vjQ.roa
File:                     0bgPaSS9Ae0rB9f1u5QtAJZ7vjQ.roa (raw, json)
Hash identifier:          IFhoLkFpjChfV3wyKbItrjVFxiC4Oyb3ylSVZABFfD0=
Subject key identifier:   D1:B8:0F:69:24:BD:01:ED:2B:07:D7:F5:BB:94:2D:00:96:7B:BE:34
Certificate issuer:       /CN=12b9846d8f75d645ff6308ce030087a297e6b359
Certificate serial:       019B7910A87AA89F5DE51DBD5E9CCE95553E
Authority key identifier: 12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/0bgPaSS9Ae0rB9f1u5QtAJZ7vjQ.roa
Signing time:             Thu 01 Jan 2026 10:18:13 +0000
ROA not before:           Thu 01 Jan 2026 10:18:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204389
IP address blocks:        178.218.192.0/24 maxlen: 24
                          185.250.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:a8:7a:a8:9f:5d:e5:1d:bd:5e:9c:ce:95:55:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b9846d8f75d645ff6308ce030087a297e6b359
        Validity
            Not Before: Jan  1 10:18:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d1b80f6924bd01ed2b07d7f5bb942d00967bbe34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:c1:0e:20:d8:be:e0:c0:d9:9e:1e:c5:c6:
                    d0:ff:6b:b2:c6:22:29:7a:ca:56:fc:d0:1e:6a:36:
                    0f:a7:9b:e8:7f:1b:f2:c9:bf:c7:4d:8e:83:22:da:
                    2b:16:b2:fe:40:59:84:2a:ed:2b:7e:cc:4c:e1:67:
                    b5:89:e4:8b:00:eb:af:27:31:e8:95:ac:39:95:ee:
                    42:cb:d3:41:0f:ca:09:ca:fb:7f:e4:a8:f1:0a:52:
                    f7:2d:c8:a0:c3:af:15:00:ba:64:c3:0f:18:09:7e:
                    2a:37:5b:17:12:97:e2:e9:fd:a7:73:db:da:40:62:
                    46:7d:63:7d:a4:9c:ac:d7:20:08:ee:73:dd:b3:03:
                    66:48:bb:f9:e6:bd:ee:68:98:3e:14:ba:c0:ca:c4:
                    70:31:e5:7c:e0:90:2d:f9:0c:13:e2:d6:6f:f3:cf:
                    25:4e:0e:51:48:f2:0a:53:51:1a:70:03:e9:75:38:
                    ae:af:bb:5e:13:34:6b:b4:c4:9b:6d:a1:c9:22:b0:
                    a1:01:a2:96:ec:1d:f3:0d:2e:46:f7:1d:25:20:ef:
                    2e:f3:bd:45:75:6c:6c:7a:c3:81:07:98:78:18:db:
                    40:89:4b:60:e1:d4:f8:9b:b8:a8:9b:ee:5f:a0:80:
                    3e:cb:76:f3:3d:c8:4e:ef:bd:c0:cd:45:8b:75:6f:
                    cc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B8:0F:69:24:BD:01:ED:2B:07:D7:F5:BB:94:2D:00:96:7B:BE:34
            X509v3 Authority Key Identifier:
                keyid:12:B9:84:6D:8F:75:D6:45:FF:63:08:CE:03:00:87:A2:97:E6:B3:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErmEbY911kX_YwjOAwCHopfms1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/0bgPaSS9Ae0rB9f1u5QtAJZ7vjQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/038f7d-59bb-4825-b6bf-78851932b27f/1/ErmEbY911kX_YwjOAwCHopfms1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.218.192.0/24
                  185.250.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:2c:08:d5:9a:6b:3e:2f:b6:ea:3d:f9:42:99:3b:b6:b8:bf:
         f1:85:52:5b:92:81:b6:f9:dd:bd:29:55:70:61:40:23:17:ba:
         26:36:a9:6a:d8:e8:0c:da:27:56:f1:fa:b2:09:c4:d3:04:0b:
         cc:1f:13:62:0b:46:fc:2b:92:da:7a:25:f9:f4:ea:50:c2:19:
         62:c8:92:6f:69:1a:e1:84:24:d0:d8:7f:43:0d:c5:c4:2a:ae:
         75:86:ce:dd:9e:8c:26:3b:cb:03:3e:ce:91:e3:63:2c:d1:ea:
         4f:8c:0e:ee:8a:80:4d:40:58:28:df:93:e7:39:82:8a:d8:93:
         0b:61:ad:1c:6e:59:81:a2:97:5b:d4:f2:12:dc:de:f3:b3:4a:
         04:9d:7a:d1:66:47:9d:e0:ed:4c:1b:ee:98:71:1d:94:b5:57:
         64:fd:61:7b:f2:e3:7c:37:cc:29:41:4f:a5:a1:86:e7:38:a2:
         e0:c9:e5:85:61:d2:2e:3d:75:a3:3f:c0:8f:47:9d:62:af:5d:
         39:15:1f:63:84:7c:94:fb:3f:7e:19:cc:74:fe:df:db:ce:fd:
         16:3e:9f:69:f9:05:40:99:cd:c5:ce:87:3f:44:9d:58:39:20:
         8b:29:4d:51:b4:bd:92:47:9a:75:61:7f:14:f6:a1:db:61:d5:
         62:13:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:44:01 2026 by rpki-client