This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/4iNI26R-dGov0Tl2yDZjMNRLbfA.roa
File:                     4iNI26R-dGov0Tl2yDZjMNRLbfA.roa (raw, json)
Hash identifier:          Mbs7tF0S261BkHnLQzWDasyVwFU+7wR+ArpU3P29zD8=
Subject key identifier:   E2:23:48:DB:A4:7E:74:6A:2F:D1:39:76:C8:36:63:30:D4:4B:6D:F0
Certificate issuer:       /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial:       019B7C80CCCA779F71AEB2753468ACE4B328
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/4iNI26R-dGov0Tl2yDZjMNRLbfA.roa
Signing time:             Fri 02 Jan 2026 02:19:34 +0000
ROA not before:           Fri 02 Jan 2026 02:19:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25400
IP address blocks:        185.246.80.0/22 maxlen: 22
                          185.246.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:cc:ca:77:9f:71:ae:b2:75:34:68:ac:e4:b3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
        Validity
            Not Before: Jan  2 02:19:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e22348dba47e746a2fd13976c8366330d44b6df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:43:4c:8e:81:b8:87:45:63:ca:95:a5:b3:
                    eb:31:4a:df:e2:44:2a:89:6c:12:8c:15:ea:ea:83:
                    9d:79:34:14:05:a5:99:80:bb:54:bc:63:be:d5:62:
                    57:98:34:94:2b:93:9e:44:f8:86:26:e0:18:3b:77:
                    ac:b9:de:a3:9f:7a:b9:62:4e:bc:44:06:f7:2c:3c:
                    6a:28:f4:a7:33:70:7d:a8:1e:e1:83:c9:89:6f:08:
                    7a:40:6b:33:f6:f4:09:66:e6:5f:f1:42:9d:2e:5e:
                    25:91:78:22:63:93:58:b0:8c:e3:8b:46:38:d5:dc:
                    50:87:f2:26:f4:d9:f1:f8:f7:9a:ea:2c:37:9a:a9:
                    ab:96:b6:35:b3:f0:a7:d8:9e:2a:3a:b0:11:c8:1b:
                    5d:15:83:a8:66:64:b9:c1:a8:52:d5:29:90:d7:fc:
                    55:5c:a1:42:22:ff:68:e4:84:a9:76:71:d7:59:80:
                    03:6d:86:60:7b:4c:cb:56:74:21:61:65:23:3f:0e:
                    9d:97:0b:75:8b:b9:e6:22:35:39:40:35:50:89:19:
                    77:d7:6c:89:6e:1d:6f:81:14:e2:7a:25:02:38:61:
                    28:7b:ae:46:ea:ed:cb:9a:bd:36:0a:9f:35:b9:ec:
                    d4:4d:74:eb:63:8a:6c:7a:bd:04:53:5d:92:be:c8:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:23:48:DB:A4:7E:74:6A:2F:D1:39:76:C8:36:63:30:D4:4B:6D:F0
            X509v3 Authority Key Identifier:
                keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/4iNI26R-dGov0Tl2yDZjMNRLbfA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:67:0c:3a:04:59:d8:ac:75:99:52:bd:d1:04:69:d7:6b:11:
         a1:53:aa:32:63:3c:33:6a:d1:e3:be:f3:81:34:df:80:49:bd:
         1e:0d:32:d3:a0:8f:07:c7:f2:94:9a:d3:40:2c:da:59:76:24:
         18:a8:85:e8:c0:c9:a6:ec:96:e1:cf:b6:19:4c:14:1b:79:b7:
         c8:fe:d0:8f:18:ed:f1:cd:86:ce:87:1c:b5:bd:ae:5f:2a:a9:
         d1:a3:4a:f8:fb:f2:e1:96:25:71:be:a1:d0:6c:cc:3c:ef:5c:
         3d:53:12:5f:74:6a:58:ec:f7:05:78:d0:a6:35:57:ee:57:c5:
         34:60:57:d2:6e:51:93:b5:78:61:bc:1f:3a:5f:0a:88:b5:c7:
         92:a2:8c:29:2f:01:c2:47:ec:80:0a:d8:27:97:17:d1:62:08:
         76:b9:53:1d:5c:63:51:1c:16:35:20:ec:b1:bc:5f:28:0b:86:
         aa:63:4b:a8:7d:21:d0:98:b8:64:cb:97:2d:cc:76:66:1f:3e:
         90:6b:05:81:0d:f0:69:f6:c5:2e:8f:43:1e:37:9f:5a:2f:94:
         26:80:f6:b9:2e:1b:20:49:ee:4f:6b:75:45:ab:ec:47:59:ba:
         9f:f6:9a:e1:0f:d8:98:68:9f:34:a5:8b:a7:89:8b:91:31:0a:
         49:41:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:23:10 2026 by rpki-client