This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/c0G-pi-MHoUVy10JBLyR5eJ9LDE.roa
File:                     c0G-pi-MHoUVy10JBLyR5eJ9LDE.roa (raw, json)
Hash identifier:          DZTMStTrvuwcy5k73Rjjqjnb39nj0Wc3hKlmSRtn5ko=
Subject key identifier:   73:41:BE:A6:2F:8C:1E:85:15:CB:5D:09:04:BC:91:E5:E2:7D:2C:31
Certificate issuer:       /CN=eb8253477ef40787a4874ab315234470a7814731
Certificate serial:       019C227FDA7E8C4A86664748C09BB4FDAEF3
Authority key identifier: EB:82:53:47:7E:F4:07:87:A4:87:4A:B3:15:23:44:70:A7:81:47:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/c0G-pi-MHoUVy10JBLyR5eJ9LDE.roa
Signing time:             Tue 03 Feb 2026 07:55:30 +0000
ROA not before:           Tue 03 Feb 2026 07:55:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29355
IP address blocks:        185.134.236.0/22 maxlen: 22
                          185.134.236.0/24 maxlen: 24
                          185.134.237.0/24 maxlen: 24
                          185.134.238.0/24 maxlen: 24
                          185.134.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:22:7f:da:7e:8c:4a:86:66:47:48:c0:9b:b4:fd:ae:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb8253477ef40787a4874ab315234470a7814731
        Validity
            Not Before: Feb  3 07:55:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7341bea62f8c1e8515cb5d0904bc91e5e27d2c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fe:a0:3c:e3:16:b3:46:fe:24:19:a5:d6:38:
                    c6:e2:7c:8e:17:26:65:00:4a:4e:35:40:ef:f5:b4:
                    24:4a:db:37:ec:6e:d5:37:9c:23:49:4c:b3:02:3a:
                    8a:aa:9d:66:aa:7c:65:8b:5f:fb:ae:be:d6:f4:ac:
                    1d:c0:02:60:64:f5:1b:2e:f1:4b:5b:d2:c1:9e:91:
                    d1:8f:5d:5d:dd:84:a3:7e:fb:3b:89:eb:c8:c9:20:
                    10:6f:53:27:37:da:3b:2f:4c:b6:96:e1:1c:1b:13:
                    d8:0f:88:fa:bd:0d:bd:da:27:64:43:54:b4:5c:f0:
                    55:7c:a2:76:67:b9:41:8a:09:3b:e4:43:1c:1d:69:
                    4a:1e:21:bb:18:ef:21:64:d9:d9:f4:4f:d2:5e:a5:
                    fb:37:32:c5:1d:d6:2a:b6:82:40:6b:ff:69:83:b6:
                    a2:7e:52:68:37:72:b2:b9:37:5f:49:13:7a:8d:c4:
                    f8:58:6e:25:a9:40:b4:15:f6:68:d9:e3:78:81:51:
                    e7:77:a4:db:2c:fc:29:70:8c:a4:30:5a:74:00:dc:
                    f4:04:08:42:e9:98:51:94:b1:ad:79:36:3b:b4:a6:
                    69:de:15:ab:dc:3e:9d:3c:c3:86:81:55:04:53:82:
                    c8:57:99:82:7f:cd:84:f9:18:57:c2:6c:23:7d:f0:
                    ac:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:41:BE:A6:2F:8C:1E:85:15:CB:5D:09:04:BC:91:E5:E2:7D:2C:31
            X509v3 Authority Key Identifier:
                keyid:EB:82:53:47:7E:F4:07:87:A4:87:4A:B3:15:23:44:70:A7:81:47:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64JTR370B4ekh0qzFSNEcKeBRzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/c0G-pi-MHoUVy10JBLyR5eJ9LDE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1014c6-dfd7-43cf-830a-30ab064bb30b/1/64JTR370B4ekh0qzFSNEcKeBRzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.134.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:2b:0c:53:29:d0:ea:52:94:5f:59:40:35:c6:c3:42:a4:ff:
         73:98:11:65:42:95:ad:8a:1b:43:36:ad:d7:f5:a4:e7:7e:33:
         b6:b3:f9:2e:9e:a0:5f:87:12:e0:69:15:f0:a4:74:22:53:a7:
         c5:8e:3c:e6:9c:2b:c3:ec:d6:3c:e4:c4:66:72:e5:15:97:60:
         44:ff:f9:74:ee:9b:46:56:87:4a:f9:f4:e6:ed:61:79:de:e5:
         ed:69:36:60:f4:5c:27:39:c6:9e:a6:b8:5d:73:4b:7c:ad:42:
         47:ce:ff:57:cf:c7:0d:41:eb:a1:50:91:86:85:62:9a:65:ec:
         f9:0f:08:9b:6d:3b:b9:18:1e:30:52:62:16:7d:17:23:50:d9:
         42:f0:5e:45:53:54:dc:a6:76:fb:94:bc:cc:aa:6c:c2:03:47:
         dc:ed:0e:59:b6:b4:34:c8:3f:5a:cb:b4:9d:dc:ac:52:4f:1b:
         e5:9d:f0:c9:51:11:57:a1:8d:1b:75:ff:6b:84:12:d0:66:1d:
         fd:76:57:9c:9f:97:b8:3a:12:93:08:cd:0e:84:fe:04:38:a3:
         c7:d8:f9:ee:68:57:50:a1:55:c7:90:92:94:0f:fc:c8:86:f1:
         35:da:1f:f4:62:5c:fb:31:96:42:11:32:c9:9c:b3:23:7d:04:
         c5:60:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:23:28 2026 by rpki-client