This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/G1copBYS9CmMlX2FVwkbhIhbgBo.roa
File:                     G1copBYS9CmMlX2FVwkbhIhbgBo.roa (raw, json)
Hash identifier:          iiTpPKuQy+sIvxdb8BIjv61/rd0bo75wTrkKcwU7rb4=
Subject key identifier:   1B:57:28:A4:16:12:F4:29:8C:95:7D:85:57:09:1B:84:88:5B:80:1A
Certificate issuer:       /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial:       019BCBCD7988AEC569460D59BE356DDF12A0
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/G1copBYS9CmMlX2FVwkbhIhbgBo.roa
Signing time:             Sat 17 Jan 2026 11:53:19 +0000
ROA not before:           Sat 17 Jan 2026 11:53:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     9123
IP address blocks:        89.23.96.0/24 maxlen: 24
                          89.23.97.0/24 maxlen: 24
                          89.23.98.0/24 maxlen: 24
                          89.23.99.0/24 maxlen: 24
                          89.23.100.0/24 maxlen: 24
                          89.23.101.0/24 maxlen: 24
                          89.23.102.0/24 maxlen: 24
                          89.23.112.0/24 maxlen: 24
                          89.23.115.0/24 maxlen: 24
                          89.23.116.0/24 maxlen: 24
                          89.23.117.0/24 maxlen: 24
                          89.23.118.0/24 maxlen: 24
                          185.39.206.0/24 maxlen: 24
                          212.67.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:cb:cd:79:88:ae:c5:69:46:0d:59:be:35:6d:df:12:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
        Validity
            Not Before: Jan 17 11:53:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=1b5728a41612f4298c957d8557091b84885b801a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:5a:c4:0a:04:6f:47:99:88:5f:b6:55:2c:
                    1b:9d:f7:ca:48:f0:ee:73:9c:b4:35:45:a7:df:19:
                    81:7e:8a:ac:d6:98:3c:d5:69:76:9d:ff:73:f1:41:
                    32:0a:7e:2f:2d:69:8d:d3:99:56:a2:de:ac:cd:25:
                    31:f7:3d:6d:d6:af:38:80:f0:d2:30:90:9e:25:ae:
                    01:dd:6f:6a:eb:78:00:43:e5:57:d7:00:fc:8b:4c:
                    09:b4:5e:c3:b6:70:41:78:3e:d0:b7:d3:b4:52:d2:
                    b0:ac:5b:f0:de:ac:c8:3d:0e:27:40:ec:ac:4e:13:
                    a7:5b:77:45:2b:24:52:09:db:fd:bb:6d:db:7a:e8:
                    d3:2d:23:03:68:59:08:32:f6:17:35:d3:a4:14:7f:
                    5d:6b:68:d1:3b:27:eb:50:68:53:68:fe:12:64:b5:
                    09:ad:08:1d:40:2c:d9:f4:6d:aa:a7:a0:ec:f3:07:
                    33:b7:a4:d8:41:df:b6:1c:64:30:d8:c0:f8:ff:33:
                    bb:67:0e:97:7f:48:a1:aa:3e:a5:a2:6a:61:bb:3b:
                    92:e3:b0:08:2a:01:95:2b:a4:17:8d:ad:13:04:4d:
                    21:fd:ed:c6:a4:93:a3:ce:64:7b:90:aa:02:d6:cd:
                    59:1b:03:8b:23:65:ff:c6:d8:76:57:35:a6:46:56:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:57:28:A4:16:12:F4:29:8C:95:7D:85:57:09:1B:84:88:5B:80:1A
            X509v3 Authority Key Identifier:
                keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/G1copBYS9CmMlX2FVwkbhIhbgBo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.23.96.0-89.23.102.255
                  89.23.112.0/24
                  89.23.115.0-89.23.118.255
                  185.39.206.0/24
                  212.67.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:44:4e:8e:e2:40:87:48:86:64:83:49:a8:74:bb:c1:a1:10:
         8e:1c:c4:22:2a:18:e2:59:86:b9:78:20:1b:f9:76:0f:93:d7:
         cd:6a:38:70:55:1c:8b:e1:19:98:9a:18:d6:37:b9:06:46:b6:
         38:6f:e2:38:72:50:be:f7:10:c2:37:44:7c:65:d0:f5:71:2a:
         9f:d4:29:0a:b0:79:60:d3:a8:e7:a6:d2:3f:a2:b8:19:fe:73:
         d3:b4:ee:be:8a:07:73:86:84:b9:a1:dc:bc:64:54:d7:98:29:
         1a:9c:a5:b0:22:ba:f5:22:52:73:ce:fa:2c:52:d9:8c:14:f7:
         00:c0:e6:34:83:4f:a6:9b:e8:36:96:8f:f6:75:90:76:52:a4:
         ff:55:6a:83:57:a8:12:f3:5f:08:fe:25:31:4a:ad:39:5d:ac:
         11:a0:68:9b:b4:cd:a2:ea:73:ef:87:50:3f:09:41:4c:6a:ee:
         7d:07:b8:f9:d6:32:6e:a1:d7:63:30:ba:de:58:fa:1a:97:41:
         d7:79:1b:b5:f0:19:41:ee:cd:06:9a:45:86:32:e7:72:d0:ac:
         2a:19:19:7b:53:a7:5e:13:18:34:13:86:19:cd:d7:3f:49:47:
         90:83:5c:d2:a3:b0:17:30:a6:5e:f8:8f:85:bf:bd:5b:f9:5f:
         ea:02:9a:ca
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZvLzXmIrsVpRg1ZvjVt3xKgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjYwMTE3MTE1MzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjU3MjhhNDE2MTJmNDI5OGM5NTdkODU1NzA5MWI4NDg4NWI4MDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ9axAoEb0eZiF+2VSwbnffKSPDu
c5y0NUWn3xmBfoqs1pg81Wl2nf9z8UEyCn4vLWmN05lWot6szSUx9z1t1q84gPDS
MJCeJa4B3W9q63gAQ+VX1wD8i0wJtF7DtnBBeD7Qt9O0UtKwrFvw3qzIPQ4nQOys
ThOnW3dFKyRSCdv9u23beujTLSMDaFkIMvYXNdOkFH9da2jROyfrUGhTaP4SZLUJ
rQgdQCzZ9G2qp6Ds8wczt6TYQd+2HGQw2MD4/zO7Zw6Xf0ihqj6lomphuzuS47AI
KgGVK6QXja0TBE0h/e3GpJOjzmR7kKoC1s1ZGwOLI2X/xth2VzWmRlZBwwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFBtXKKQWEvQpjJV9hVcJG4SIW4AaMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvRzFjb3BCWVM5Q21NbFgyRlZ3a2JoSWhiZ0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAVZF2AD
BABZF2YDBABZF3AwDAMEAFkXcwMEAFkXdgMEALknzgMEANRDETANBgkqhkiG9w0B
AQsFAAOCAQEAH0ROjuJAh0iGZINJqHS7waEQjhzEIioY4lmGuXggG/l2D5PXzWo4
cFUci+EZmJoY1je5Bka2OG/iOHJQvvcQwjdEfGXQ9XEqn9QpCrB5YNOo56bSP6K4
Gf5z07TuvooHc4aEuaHcvGRU15gpGpylsCK69SJSc876LFLZjBT3AMDmNINPppvo
NpaP9nWQdlKk/1Vqg1eoEvNfCP4lMUqtOV2sEaBom7TNoupz74dQPwlBTGrufQe4
+dYybqHXYzC63lj6GpdB13kbtfAZQe7NBppFhjLnctCsKhkZe1OnXhMYNBOGGc3X
P0lHkINc0qOwFzCmXviPhb+9W/lf6gKayg==
-----END CERTIFICATE-----
Generated at Mon Jan 19 19:58:12 2026 by rpki-client