This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/_c6xx4G9gRqlWT599mmQOoWoW50.roa
File:                     _c6xx4G9gRqlWT599mmQOoWoW50.roa (raw, json)
Hash identifier:          c/9VJ4HKTN9Q4dyySRrDW6GfcNhn9tZLqvs7ju71Tx8=
Subject key identifier:   FD:CE:B1:C7:81:BD:81:1A:A5:59:3E:7D:F6:69:90:3A:85:A8:5B:9D
Certificate issuer:       /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial:       019B78A210DD05349A0A278DA7A68F2FA1D6
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/_c6xx4G9gRqlWT599mmQOoWoW50.roa
Signing time:             Thu 01 Jan 2026 08:17:25 +0000
ROA not before:           Thu 01 Jan 2026 08:17:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2119
IP address blocks:        185.23.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:10:dd:05:34:9a:0a:27:8d:a7:a6:8f:2f:a1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
        Validity
            Not Before: Jan  1 08:17:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fdceb1c781bd811aa5593e7df669903a85a85b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:c9:51:0f:cf:b3:53:85:a0:31:32:aa:71:
                    b1:cf:8f:e7:66:ae:76:e0:d1:5d:36:e7:3d:69:63:
                    6e:c2:c1:e1:42:6f:7d:80:3c:bd:6c:b0:d1:cb:28:
                    17:fd:fc:e9:29:d5:aa:16:66:80:20:05:70:09:d1:
                    18:b3:e2:d9:3c:22:1b:bf:77:a8:0e:30:9c:04:84:
                    db:49:48:64:dc:f6:33:93:26:ec:c5:a7:aa:a9:bf:
                    71:10:14:2e:23:f7:93:d8:ef:ba:05:03:2e:99:d7:
                    cd:60:33:a9:4b:8e:e1:4c:d7:c6:bc:b0:a0:31:ff:
                    e4:9c:31:60:72:84:da:b7:8f:1b:78:53:1d:6d:ec:
                    bb:6c:c1:25:77:34:3f:57:05:03:6f:5d:0e:50:36:
                    bf:72:e7:73:50:b2:74:70:8c:d0:85:c1:de:e8:22:
                    2f:94:8d:d5:6c:fa:3c:b7:ad:36:0b:23:9f:87:1f:
                    ed:06:14:ca:46:bc:4c:25:cf:be:e4:99:68:c8:ce:
                    20:88:a0:a3:bc:ee:ae:e5:60:e6:2a:b6:1f:98:b9:
                    4b:d1:43:e5:31:ac:62:82:02:39:d1:2c:1f:ef:37:
                    64:01:0f:90:9c:2b:e7:47:73:8c:98:1f:3c:ea:d6:
                    55:85:9c:63:14:4a:26:fb:44:10:c3:2b:f4:99:b7:
                    9b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CE:B1:C7:81:BD:81:1A:A5:59:3E:7D:F6:69:90:3A:85:A8:5B:9D
            X509v3 Authority Key Identifier:
                keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/_c6xx4G9gRqlWT599mmQOoWoW50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.23.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:81:ba:20:6d:0b:58:51:73:f1:56:cd:cd:0a:1d:0b:20:12:
         c1:2d:1d:17:c6:19:79:8c:04:94:9b:70:a2:1c:70:3c:40:64:
         40:b0:9c:70:5f:f8:95:60:02:1f:05:c4:e1:16:72:96:26:a9:
         d8:9e:b4:3f:88:9e:49:c7:3d:88:8e:82:4e:e9:93:19:2b:e8:
         ca:b4:bb:86:de:c2:c4:9a:71:34:37:d4:1d:a4:a8:55:a0:6b:
         5b:df:1c:3e:9c:0f:2a:8c:9f:d0:9b:d3:ac:cf:96:66:cf:de:
         00:3e:ff:c7:ce:ab:5e:8f:97:c9:9a:05:6e:03:20:bc:65:20:
         47:53:2a:0f:87:17:f8:4e:95:59:fe:3a:b7:e6:d7:09:13:05:
         50:a7:6b:8d:50:0e:cd:e6:51:f5:7f:c3:5d:50:3b:91:1b:dd:
         80:33:9a:24:fa:c7:5e:cf:91:4d:07:9a:2e:cf:89:e7:47:f4:
         59:0e:97:d2:28:75:91:6e:1a:a7:88:a0:df:9c:9b:50:ee:f5:
         2f:43:bd:5d:78:b1:ab:a8:24:62:01:2b:5c:1d:ff:dc:a5:3f:
         04:08:c5:79:6a:6e:d6:47:d4:d0:a5:e7:d6:59:25:c7:28:43:
         30:ec:75:b1:67:80:e0:e0:a0:fd:b4:59:6e:a4:a6:be:20:a9:
         b4:b8:9b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:04:48 2026 by rpki-client