This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/f8WPzqscu5_TJtCp8yWJh5F2Zlc.roa
File:                     f8WPzqscu5_TJtCp8yWJh5F2Zlc.roa (raw, json)
Hash identifier:          zqSADmBffInbRmrVTRaXDd1UvgOprqRW+gGx1he/zr4=
Subject key identifier:   7F:C5:8F:CE:AB:1C:BB:9F:D3:26:D0:A9:F3:25:89:87:91:76:66:57
Certificate issuer:       /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial:       019BE80AA662C5038655FCFB8ECDD3943A1A
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/f8WPzqscu5_TJtCp8yWJh5F2Zlc.roa
Signing time:             Thu 22 Jan 2026 23:29:30 +0000
ROA not before:           Thu 22 Jan 2026 23:29:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208990
IP address blocks:        212.91.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e8:0a:a6:62:c5:03:86:55:fc:fb:8e:cd:d3:94:3a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
        Validity
            Not Before: Jan 22 23:29:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7fc58fceab1cbb9fd326d0a9f325898791766657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:c6:73:76:19:73:0a:76:f5:04:6e:c0:63:
                    9c:b8:5d:20:96:8d:9a:9b:21:4c:70:f4:14:9f:a9:
                    2c:a9:86:d1:94:b2:0a:c8:f5:dc:97:ee:d3:63:b8:
                    8e:56:30:33:55:90:57:e4:b2:54:0f:3a:a6:16:b7:
                    29:2e:48:b7:cf:22:1a:46:d5:95:ed:13:12:7c:43:
                    b5:b5:4f:bd:35:69:8c:2a:1e:e4:56:42:76:cc:0b:
                    70:e7:82:6b:61:ea:de:3f:a6:d8:4f:ae:3e:e5:25:
                    af:43:53:7b:64:1b:25:16:7e:e8:58:f4:91:6a:0b:
                    51:67:e3:e6:ed:4c:13:5b:fe:8a:7b:0b:5a:a1:b1:
                    00:33:99:ce:1e:6f:7e:fd:26:d9:8e:bd:75:76:4a:
                    28:e1:f9:c5:97:fa:95:06:44:0a:04:7d:ff:d2:7d:
                    d4:68:2e:05:c1:e0:27:4d:ab:39:1e:30:44:ae:95:
                    56:2e:65:42:3b:83:73:ef:25:a1:56:42:1a:69:37:
                    0d:f3:ed:73:ce:18:33:57:b2:4c:30:6c:4f:b4:de:
                    37:4f:a6:d4:69:01:b6:e6:04:9a:d7:e0:a0:2c:ab:
                    b5:b5:9f:ba:63:10:bf:68:76:ba:6d:73:7c:e6:3f:
                    37:92:b7:28:f5:f5:00:4c:e5:d0:92:63:30:fa:c8:
                    32:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C5:8F:CE:AB:1C:BB:9F:D3:26:D0:A9:F3:25:89:87:91:76:66:57
            X509v3 Authority Key Identifier:
                keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/f8WPzqscu5_TJtCp8yWJh5F2Zlc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.91.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:8b:c0:7f:92:20:be:4d:08:ba:a9:7f:c5:b5:80:93:ab:8e:
         81:27:be:1d:88:26:66:a0:db:42:ef:14:c1:0c:79:e5:35:53:
         b2:a7:06:36:c4:65:27:d0:54:b0:e9:8e:f3:32:70:db:85:90:
         b7:ab:5f:b0:a6:3a:29:61:a5:86:11:3d:3c:6a:ab:9b:26:54:
         74:c0:b0:99:29:ee:eb:09:6a:c1:61:d4:22:03:b9:3c:6e:e7:
         55:f4:60:20:c5:26:78:11:76:b9:e6:76:1b:45:03:cc:4e:cf:
         e6:ac:68:8f:d5:18:13:a7:b1:ed:3c:bb:5c:f1:bc:4b:4c:8d:
         0c:ad:1e:9a:20:08:32:43:ed:fd:eb:4e:7e:a2:77:0d:ea:98:
         35:5e:61:93:a9:a7:d9:04:f8:0c:28:e4:37:42:8f:12:8a:07:
         4d:f0:59:c9:b7:81:28:59:2c:81:b3:77:53:44:24:b7:69:5e:
         44:83:6a:3c:d8:cb:aa:a8:55:4d:10:68:55:df:f7:5c:ae:50:
         be:b8:88:fa:89:8d:bf:eb:6c:82:57:31:ba:02:a6:1f:4a:3c:
         2c:6a:77:38:a0:57:e6:10:21:a7:a4:2e:a9:86:b2:86:fb:a5:
         d6:d2:d8:87:35:79:52:3b:db:21:3a:99:63:b4:11:73:b5:71:
         1c:15:88:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZvoCqZixQOGVfz7js3TlDoaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjYwMTIyMjMyOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmM1OGZjZWFiMWNiYjlmZDMyNmQwYTlmMzI1ODk4NzkxNzY2NjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkjGc3YZcwp29QRuwGOcuF0glo2a
myFMcPQUn6ksqYbRlLIKyPXcl+7TY7iOVjAzVZBX5LJUDzqmFrcpLki3zyIaRtWV
7RMSfEO1tU+9NWmMKh7kVkJ2zAtw54JrYereP6bYT64+5SWvQ1N7ZBslFn7oWPSR
agtRZ+Pm7UwTW/6KewtaobEAM5nOHm9+/SbZjr11dkoo4fnFl/qVBkQKBH3/0n3U
aC4FweAnTas5HjBErpVWLmVCO4Nz7yWhVkIaaTcN8+1zzhgzV7JMMGxPtN43T6bU
aQG25gSa1+CgLKu1tZ+6YxC/aHa6bXN85j83krco9fUATOXQkmMw+sgymwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH/Fj86rHLuf0ybQqfMliYeRdmZXMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvZjhXUHpxc2N1NV9USnRDcDh5V0poNUYyWmxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FsVMA0G
CSqGSIb3DQEBCwUAA4IBAQC2i8B/kiC+TQi6qX/FtYCTq46BJ74diCZmoNtC7xTB
DHnlNVOypwY2xGUn0FSw6Y7zMnDbhZC3q1+wpjopYaWGET08aqubJlR0wLCZKe7r
CWrBYdQiA7k8budV9GAgxSZ4EXa55nYbRQPMTs/mrGiP1RgTp7HtPLtc8bxLTI0M
rR6aIAgyQ+39605+oncN6pg1XmGTqafZBPgMKOQ3Qo8SigdN8FnJt4EoWSyBs3dT
RCS3aV5Eg2o82MuqqFVNEGhV3/dcrlC+uIj6iY2/62yCVzG6AqYfSjwsanc4oFfm
ECGnpC6phrKG+6XW0tiHNXlSO9shOpljtBFztXEcFYhE
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:27 2026 by rpki-client