This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa
File:                     1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (raw, json)
Hash identifier:          OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=
Subject key identifier:   F8:87:C8:78:01:70:11:86:58:B7:50:1B:01:A2:77:00:D5:E1:EA:E8
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       019B7EA535E7798A8625D9E4B2897608A1FB
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa
Signing time:             Fri 02 Jan 2026 12:18:34 +0000
ROA not before:           Fri 02 Jan 2026 12:18:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200024
IP address blocks:        87.246.25.0/24 maxlen: 24
                          87.246.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a5:35:e7:79:8a:86:25:d9:e4:b2:89:76:08:a1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Jan  2 12:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f887c8780170118658b7501b01a27700d5e1eae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:f6:ba:0b:8b:01:c4:22:56:b6:29:fb:5e:
                    95:f0:fa:cb:91:8f:94:48:6b:8b:db:fc:57:2a:9e:
                    88:60:21:46:7f:51:0f:21:62:fa:c5:8e:9d:99:04:
                    31:0f:5a:df:92:6e:ff:a5:3a:42:a7:fd:36:73:ae:
                    ca:37:cd:96:02:14:92:c5:03:82:fb:09:11:dc:37:
                    00:fc:b2:13:c9:0c:10:1a:1f:69:b9:e6:04:cf:5b:
                    ff:b3:b2:1f:5e:62:87:b6:66:ea:2d:3e:52:c2:4f:
                    a8:a3:e8:bb:3a:db:4b:81:f3:10:ac:91:c9:25:2e:
                    0f:16:7f:a6:46:e4:3b:ac:fe:a1:7a:59:ba:ac:48:
                    78:db:4e:90:f5:1b:cc:d3:c1:21:a4:28:6e:db:02:
                    21:c2:84:3a:b7:f0:0c:43:b0:fa:7b:01:58:fc:cd:
                    66:a3:9e:9d:81:bb:cf:5b:88:9f:b4:38:b1:af:57:
                    ae:07:2e:f0:76:d3:41:2e:c6:02:e7:66:2f:05:45:
                    91:8b:55:1d:d8:04:1d:cc:59:fb:51:ce:92:62:cf:
                    52:23:51:65:16:5a:13:61:5a:06:e1:af:95:ea:d9:
                    db:01:2d:cd:da:eb:3c:a6:f3:5a:33:1e:a0:77:08:
                    85:3c:4b:a4:61:14:27:30:0e:0e:a4:d2:e2:07:38:
                    34:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:87:C8:78:01:70:11:86:58:B7:50:1B:01:A2:77:00:D5:E1:EA:E8
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.246.25.0-87.246.26.255

    Signature Algorithm: sha256WithRSAEncryption
         63:40:77:29:fe:33:49:2a:b6:06:14:e1:77:f5:a9:06:8b:bc:
         49:8b:2b:eb:87:71:9d:fd:77:8b:07:aa:a7:fa:b3:de:db:d7:
         05:f4:2d:83:36:2d:25:16:a0:d9:22:4c:cd:67:d0:d6:c4:ce:
         52:30:10:16:d1:2b:fd:43:a1:76:c3:ed:a9:ae:eb:12:2b:d9:
         97:87:e2:5c:61:86:79:c6:cb:72:4e:42:55:74:bb:c7:a3:df:
         2a:d4:3d:d3:9b:cf:9c:9b:d6:71:07:45:96:9c:63:f7:67:b0:
         46:ea:ec:47:75:e2:2f:00:7d:8b:ef:18:58:1d:17:9e:d5:24:
         be:aa:57:9e:c6:be:50:0f:11:77:aa:6a:31:b1:62:86:16:b1:
         9b:51:85:11:57:39:ce:4f:e7:bf:d6:03:20:a9:e8:db:69:3b:
         b7:b0:ab:e4:b1:9e:46:d1:de:71:56:e8:e7:51:2e:6a:0a:19:
         52:94:f1:6b:e7:5c:f7:1e:82:10:85:99:2b:ad:7f:8e:f8:0a:
         99:05:ee:c8:ca:c8:e5:c8:c8:ee:08:5c:2a:d0:b1:cb:aa:d5:
         8a:ce:ff:62:9d:48:03:d7:c2:3a:09:ab:47:7b:27:50:4b:da:
         20:b1:43:19:d6:b7:1c:aa:6a:65:c1:30:ea:67:66:b7:65:ea:
         e6:20:32:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:35:13 2026 by rpki-client