This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/mot890KLKonsvKEqcWKSQTfnOuw.roa
File:                     mot890KLKonsvKEqcWKSQTfnOuw.roa (raw, json)
Hash identifier:          TEigGd0FQjToJ1w8bcpu4A5x/fikb79rKfpx2867fcM=
Subject key identifier:   9A:8B:7C:F7:42:8B:2A:89:EC:BC:A1:2A:71:62:92:41:37:E7:3A:EC
Certificate issuer:       /CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
Certificate serial:       019B783549D8D0111069392D4F6CB57DFF6D
Authority key identifier: 80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/mot890KLKonsvKEqcWKSQTfnOuw.roa
Signing time:             Thu 01 Jan 2026 06:18:36 +0000
ROA not before:           Thu 01 Jan 2026 06:18:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205495
IP address blocks:        185.216.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:49:d8:d0:11:10:69:39:2d:4f:6c:b5:7d:ff:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e506fcf1d7cf649d388e975ca26252e219fc7c
        Validity
            Not Before: Jan  1 06:18:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9a8b7cf7428b2a89ecbca12a7162924137e73aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:3e:64:99:a5:b3:3f:62:f9:7b:7b:19:b6:
                    50:37:3b:72:6c:f5:83:dd:d2:91:1c:a8:ee:91:e8:
                    31:1d:33:f9:3e:bb:0c:b1:2e:c9:1d:d5:a1:d2:5e:
                    06:c1:2c:d6:d1:27:94:e3:67:33:4f:bb:2e:61:ff:
                    61:36:6a:a1:bb:72:a2:36:8e:fb:d1:8c:9e:a1:cb:
                    fe:c2:87:e9:8b:d3:6f:29:99:f6:d4:eb:8c:ac:cd:
                    83:12:ca:3e:01:4e:27:b7:52:71:0f:b9:3a:cd:ce:
                    bb:3a:f1:22:ce:ee:e8:ff:89:02:15:b7:c3:7f:67:
                    ac:2c:cd:2c:99:84:fd:ea:38:0e:dc:a2:d4:95:03:
                    66:e6:2a:08:bb:0f:57:57:89:4f:9c:5f:ad:29:9f:
                    d8:23:ae:32:61:02:56:57:23:94:70:7a:86:82:79:
                    b3:10:ae:c7:0e:29:d7:a4:22:16:10:5c:56:d2:c9:
                    bf:39:b2:08:4f:39:3e:61:b8:35:4b:c4:7a:99:9e:
                    e3:af:71:d7:60:66:ab:cc:cf:77:a0:94:62:66:2e:
                    17:2b:30:1e:1c:37:a9:3d:8a:aa:2b:b8:6c:41:dd:
                    01:a5:3e:78:c4:7d:ba:79:79:85:53:42:b2:38:a5:
                    32:31:79:3c:b3:66:d0:8a:88:d5:55:45:6b:61:a0:
                    c0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8B:7C:F7:42:8B:2A:89:EC:BC:A1:2A:71:62:92:41:37:E7:3A:EC
            X509v3 Authority Key Identifier:
                keyid:80:E5:06:FC:F1:D7:CF:64:9D:38:8E:97:5C:A2:62:52:E2:19:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/mot890KLKonsvKEqcWKSQTfnOuw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a8f471-c243-4cc6-970d-ff7dc04ba385/1/gOUG_PHXz2SdOI6XXKJiUuIZ_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:ff:2c:d2:46:31:a9:09:42:75:5c:84:b5:2e:31:ab:ef:d5:
         72:f6:cb:24:69:8a:c7:6e:46:ba:ed:f8:42:55:89:82:a2:3e:
         b5:1f:b9:b7:09:9d:42:bc:f2:82:be:18:97:a7:0b:c8:ba:21:
         04:32:f6:e4:a7:99:97:ac:d5:66:dc:83:2d:90:63:d0:90:07:
         9b:e6:e1:af:7e:1d:d5:04:2b:96:f9:b3:a6:b9:59:60:49:eb:
         c9:32:fc:20:e6:b7:0b:46:55:a8:12:53:bf:49:76:04:7c:af:
         07:02:ab:d6:b2:95:60:cc:21:5f:66:42:37:61:c3:7e:3f:41:
         ce:b3:a1:04:ad:76:44:fb:89:8c:30:d6:e3:bc:6d:32:7f:0c:
         80:f7:23:d0:6a:72:68:10:40:53:ff:89:72:bb:38:9e:40:cc:
         89:e4:00:0f:97:fb:84:a9:4c:8d:64:d3:1c:c0:02:42:73:dc:
         22:8a:4c:c2:5e:51:a1:46:c7:aa:67:b0:41:a3:49:6e:46:b5:
         5a:e3:cf:5c:41:c9:ac:5f:55:e9:fe:f3:8f:5a:c2:5f:9c:94:
         c8:45:18:95:82:f5:44:7a:29:29:df:f9:e0:da:9d:a9:c3:f1:
         95:a8:46:6c:0c:80:77:47:af:19:d8:c9:bd:7f:f3:39:3b:fc:
         0f:51:d6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:29:16 2026 by rpki-client