This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/_BiThTGjxk4mTLq-x93nIMvlUFM.roa
File:                     _BiThTGjxk4mTLq-x93nIMvlUFM.roa (raw, json)
Hash identifier:          eb4KvoDqDMfsY+rM/WfNgq/w+lmr8scY27yz0mI6HFM=
Subject key identifier:   FC:18:93:85:31:A3:C6:4E:26:4C:BA:BE:C7:DD:E7:20:CB:E5:50:53
Certificate issuer:       /CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
Certificate serial:       019B79101F04A8A9F9A828B2E30DD2C931B7
Authority key identifier: 13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/_BiThTGjxk4mTLq-x93nIMvlUFM.roa
Signing time:             Thu 01 Jan 2026 10:17:38 +0000
ROA not before:           Thu 01 Jan 2026 10:17:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28757
IP address blocks:        80.80.176.0/20 maxlen: 20
                          80.80.176.0/21 maxlen: 21
                          80.80.176.0/23 maxlen: 23
                          80.80.178.0/24 maxlen: 24
                          80.80.179.0/24 maxlen: 24
                          80.80.180.0/23 maxlen: 23
                          80.80.182.0/24 maxlen: 24
                          80.80.183.0/24 maxlen: 24
                          80.80.184.0/21 maxlen: 21
                          80.80.191.0/24 maxlen: 24
                          185.71.108.0/22 maxlen: 22
                          185.71.108.0/23 maxlen: 23
                          185.71.110.0/23 maxlen: 23
                          217.16.208.0/20 maxlen: 20
                          217.16.208.0/21 maxlen: 21
                          217.16.216.0/21 maxlen: 21
                          217.16.216.0/22 maxlen: 22
                          217.16.220.0/23 maxlen: 23
                          217.16.222.0/24 maxlen: 24
                          217.16.223.0/24 maxlen: 24
                          2a02:6b00::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:1f:04:a8:a9:f9:a8:28:b2:e3:0d:d2:c9:31:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f3ad40f96ed5e7f39d8d9e196abf0fa2381e8c
        Validity
            Not Before: Jan  1 10:17:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fc18938531a3c64e264cbabec7dde720cbe55053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:d9:45:60:26:de:5a:09:01:2b:50:39:1c:
                    21:47:25:34:e4:8e:c2:10:c8:40:75:3d:a3:47:20:
                    16:77:31:f6:0c:82:c6:dd:e0:c2:c2:c8:f0:a7:b6:
                    39:26:c8:54:e3:09:49:33:6a:ba:7f:b2:ae:e5:9c:
                    22:99:fd:0c:15:96:6e:63:09:eb:e1:9e:b7:5a:87:
                    07:9f:bf:a7:cd:bc:a2:d0:c4:1f:d1:2d:08:bb:3c:
                    3f:73:8a:6d:6e:ba:d9:4c:1d:90:36:30:bc:68:f5:
                    1b:10:cb:a2:8e:a4:0b:09:84:61:40:2e:82:ee:32:
                    8f:92:68:05:c4:2f:ee:eb:fd:6a:8b:1f:75:4c:cd:
                    69:ee:06:04:ee:78:ee:01:c9:4f:b5:34:2b:b8:78:
                    a8:55:7c:e4:99:73:27:61:24:9f:25:50:01:5d:58:
                    a4:ab:37:c3:0f:f4:76:a9:57:42:20:cd:2d:da:9f:
                    5b:4e:ea:06:e5:5f:18:39:b1:a0:cb:13:5e:95:65:
                    2c:a5:3f:33:dc:2c:56:92:e6:4a:b8:f7:cc:e0:fd:
                    07:f8:b3:5b:75:a3:bf:1d:92:41:53:d3:26:e4:d4:
                    f6:66:17:6a:39:a6:d4:2c:d6:2d:3a:5e:12:1e:0d:
                    d0:3c:96:02:f8:ec:da:5f:0a:ad:26:c5:6c:d1:d9:
                    f7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:18:93:85:31:A3:C6:4E:26:4C:BA:BE:C7:DD:E7:20:CB:E5:50:53
            X509v3 Authority Key Identifier:
                keyid:13:F3:AD:40:F9:6E:D5:E7:F3:9D:8D:9E:19:6A:BF:0F:A2:38:1E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_OtQPlu1efznY2eGWq_D6I4How.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/_BiThTGjxk4mTLq-x93nIMvlUFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/772e7e-f0f0-4fe0-a634-f4fbe0cb9444/1/E_OtQPlu1efznY2eGWq_D6I4How.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.80.176.0/20
                  185.71.108.0/22
                  217.16.208.0/20
                IPv6:
                  2a02:6b00::/36

    Signature Algorithm: sha256WithRSAEncryption
         26:47:46:3b:0c:57:a4:14:a8:9a:83:7b:6d:9b:e0:80:70:6c:
         5f:f3:77:ea:f9:3a:24:b2:21:68:b4:89:ee:c7:18:41:4d:41:
         2c:01:43:48:8a:f0:a4:d3:9f:30:78:ab:e6:e8:e7:9a:6b:d5:
         a7:9b:bb:38:49:cf:ce:bc:f5:3a:82:1c:e2:64:a0:b6:4b:76:
         e9:3f:78:34:19:3e:a1:6e:85:02:6e:b4:51:1f:a6:fe:c9:34:
         2a:f5:ce:ed:df:18:8a:2f:90:fd:c7:e5:26:13:9e:99:37:33:
         21:a5:8e:63:22:b2:2e:f6:06:fc:28:21:e0:f6:fb:af:8f:db:
         39:a1:04:60:d5:e8:6e:08:04:94:8b:f1:a2:c1:a9:b1:3c:a2:
         d1:94:98:1f:54:61:65:b3:ce:1f:75:ad:c2:71:15:ae:ef:1c:
         5f:53:bf:4d:c6:f1:34:c3:41:d2:45:ba:32:a3:8b:e2:76:c3:
         8d:59:6f:c4:c6:91:38:c2:28:fe:5f:00:e3:d7:5f:ca:17:49:
         73:36:97:b7:0a:10:3f:f3:d0:7d:69:e8:6e:5b:ab:3e:c8:16:
         5d:b2:ef:75:cd:8a:a9:78:f9:a0:20:7c:6e:3b:c6:b7:9b:9c:
         25:7e:ae:fb:b3:bd:d1:8e:05:ae:9a:cd:91:53:9c:c3:55:a6:
         bc:6f:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:54:46 2026 by rpki-client