This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/k0Iullyv2GxnyN1JOo_ooOYPs6Q.roa
File:                     k0Iullyv2GxnyN1JOo_ooOYPs6Q.roa (raw, json)
Hash identifier:          /NoGy2Y6tDxjVqRQyw3GqgVp9/DVQaxc7eXTRGD4qk0=
Subject key identifier:   93:42:2E:96:5C:AF:D8:6C:67:C8:DD:49:3A:8F:E8:A0:E6:0F:B3:A4
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       019C3D0E40F56E7F0084774B501BDED4EA7C
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/k0Iullyv2GxnyN1JOo_ooOYPs6Q.roa
Signing time:             Sun 08 Feb 2026 11:41:10 +0000
ROA not before:           Sun 08 Feb 2026 11:41:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198584
IP address blocks:        195.24.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:3d:0e:40:f5:6e:7f:00:84:77:4b:50:1b:de:d4:ea:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: Feb  8 11:41:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=93422e965cafd86c67c8dd493a8fe8a0e60fb3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:8a:cc:e8:69:01:54:55:2f:6d:00:56:22:
                    fb:44:3a:7a:56:2e:7c:78:df:6d:d2:75:46:fc:3f:
                    fd:6b:83:16:fe:de:f9:7d:2d:b5:be:72:34:55:7b:
                    d9:31:20:d0:d1:17:8c:a4:b9:54:3d:39:f2:b5:ec:
                    f9:ae:39:b6:15:52:b8:8f:35:a2:0a:16:57:8e:65:
                    a4:85:4c:f5:1e:7c:21:f8:f1:b0:db:62:f7:a4:ce:
                    26:7e:97:f2:8f:86:5b:34:fc:7e:fc:e1:13:2b:f0:
                    a1:3f:3b:e4:2d:27:8b:51:07:1a:07:fc:c5:f4:94:
                    d9:e5:1a:a9:82:49:2f:35:0a:22:ed:77:2f:a3:47:
                    63:5d:60:8f:21:6e:70:b7:30:6d:89:80:ab:27:ee:
                    f9:22:53:c2:09:df:38:5b:3d:fa:73:14:b9:d4:6d:
                    a5:21:9c:7c:68:af:8f:f9:03:f1:e8:9c:6d:30:34:
                    22:a7:ee:96:71:b2:d0:b4:80:9e:94:ca:52:4b:e5:
                    4b:4f:6a:12:18:28:b7:a1:2e:28:de:9e:8c:4d:0e:
                    01:9e:97:21:98:27:8d:1d:a9:22:d3:0e:62:c2:aa:
                    ed:1e:1b:be:b2:cc:46:b8:b6:74:9d:31:5c:53:1a:
                    a6:ac:77:fa:97:b4:8a:36:fd:1a:06:9e:be:14:14:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:42:2E:96:5C:AF:D8:6C:67:C8:DD:49:3A:8F:E8:A0:E6:0F:B3:A4
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/k0Iullyv2GxnyN1JOo_ooOYPs6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.24.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:41:e3:14:96:07:88:f5:4c:19:30:e3:3a:82:b9:d9:08:ea:
         e3:6c:06:df:97:67:c6:5b:a9:21:3d:48:92:94:af:39:f1:66:
         50:bc:24:c7:75:57:4c:ad:b7:f9:6b:9b:b4:ea:11:06:e1:9f:
         7f:29:86:52:aa:8b:8b:39:21:01:f3:c5:05:68:4d:97:60:18:
         1d:61:b6:b8:df:77:e8:54:15:21:f0:3f:db:f3:9f:82:53:18:
         e1:04:23:c1:dd:82:68:8d:f5:89:6e:54:53:ab:35:b0:31:00:
         b6:96:2b:54:ef:ed:33:3c:76:c4:10:68:e9:46:94:21:bd:e3:
         56:51:fd:d8:f1:07:2d:bc:89:92:e8:3f:ec:01:e6:08:d0:1e:
         4c:30:c9:ec:da:1d:3b:49:10:e5:88:53:e0:42:5e:b6:de:0d:
         64:7c:7f:48:3d:f9:5e:5b:4a:bb:77:3e:8c:39:e2:49:69:27:
         f5:f2:fa:10:da:73:66:90:8c:7c:74:65:20:06:c1:bf:58:56:
         80:8c:a4:7a:c0:7f:0b:e4:e5:fe:2b:29:c1:08:1a:6d:eb:52:
         98:4f:2c:9b:c8:33:7f:ff:47:2a:9e:6e:5b:9b:ee:99:8c:04:
         86:32:a5:74:c7:6a:ba:c3:88:a6:83:7f:32:60:68:8f:a8:48:
         cf:f0:52:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZw9DkD1bn8AhHdLUBve1Op8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZjdjMDljMWEzZjczZWJlNjE3NDBhYjY1ZTU4OWY5MTY1
NWJkZWQwHhcNMjYwMjA4MTE0MTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzQyMmU5NjVjYWZkODZjNjdjOGRkNDkzYThmZThhMGU2MGZiM2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvSKzOhpAVRVL20AViL7RDp6Vi58
eN9t0nVG/D/9a4MW/t75fS21vnI0VXvZMSDQ0ReMpLlUPTnytez5rjm2FVK4jzWi
ChZXjmWkhUz1Hnwh+PGw22L3pM4mfpfyj4ZbNPx+/OETK/ChPzvkLSeLUQcaB/zF
9JTZ5RqpgkkvNQoi7Xcvo0djXWCPIW5wtzBtiYCrJ+75IlPCCd84Wz36cxS51G2l
IZx8aK+P+QPx6JxtMDQip+6WcbLQtICelMpSS+VLT2oSGCi3oS4o3p6MTQ4Bnpch
mCeNHaki0w5iwqrtHhu+ssxGuLZ0nTFcUxqmrHf6l7SKNv0aBp6+FBQQSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJNCLpZcr9hsZ8jdSTqP6KDmD7OkMB8GA1UdIwQY
MBaAFI73wJwaP3Pr5hdAq2XlifkWVb3tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZmQW5Cb19jLXZtRjBDclplV0otUlpWdmUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84YzZkODgtNTJjMy00N2U2LTgwMDkt
ZjYyYmU5ZThhNjcxLzEvazBJdWxseXYyR3hueU4xSk9vX29vT1lQczZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS84YzZkODgtNTJjMy00N2U2LTgwMDktZjYyYmU5ZThhNjcx
LzEvanZmQW5Cb19jLXZtRjBDclplV0otUlpWdmUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxjsMA0G
CSqGSIb3DQEBCwUAA4IBAQBOQeMUlgeI9UwZMOM6grnZCOrjbAbfl2fGW6khPUiS
lK858WZQvCTHdVdMrbf5a5u06hEG4Z9/KYZSqouLOSEB88UFaE2XYBgdYba433fo
VBUh8D/b85+CUxjhBCPB3YJojfWJblRTqzWwMQC2litU7+0zPHbEEGjpRpQhveNW
Uf3Y8QctvImS6D/sAeYI0B5MMMns2h07SRDliFPgQl623g1kfH9IPfleW0q7dz6M
OeJJaSf18voQ2nNmkIx8dGUgBsG/WFaAjKR6wH8L5OX+KynBCBpt61KYTyybyDN/
/0cqnm5bm+6ZjASGMqV0x2q6w4img38yYGiPqEjP8FKr
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:55:58 2026 by rpki-client