This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/sKoA1J6rxnysEZ_v3zwMo7Z67TY.roa
File:                     sKoA1J6rxnysEZ_v3zwMo7Z67TY.roa (raw, json)
Hash identifier:          mG9f/0+7q2d/QWjgfY6kLzwp92/dXDDFf1IO0cmQvoE=
Subject key identifier:   B0:AA:00:D4:9E:AB:C6:7C:AC:11:9F:EF:DF:3C:0C:A3:B6:7A:ED:36
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019B7D5BBE390FBC65AA1DAB4BDCD5455A81
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/sKoA1J6rxnysEZ_v3zwMo7Z67TY.roa
Signing time:             Fri 02 Jan 2026 06:18:43 +0000
ROA not before:           Fri 02 Jan 2026 06:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48586
IP address blocks:        80.92.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:be:39:0f:bc:65:aa:1d:ab:4b:dc:d5:45:5a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Jan  2 06:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b0aa00d49eabc67cac119fefdf3c0ca3b67aed36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:e5:b3:d2:20:3f:01:cd:ab:1d:89:54:62:
                    cb:b8:19:01:cd:0e:13:c9:ce:94:00:2c:23:b2:09:
                    ae:59:b5:5e:cc:3d:40:58:ae:87:55:85:ad:b1:96:
                    04:14:c5:1f:94:69:ad:6a:4a:33:fe:2e:4a:99:b9:
                    1e:47:a3:cf:10:5a:05:d8:09:38:57:ab:04:b0:cb:
                    0b:a6:8d:e6:de:bc:ad:85:d4:d6:51:bb:15:21:8a:
                    66:66:b6:26:ab:4e:45:89:92:af:0d:90:f2:db:b6:
                    13:0d:91:17:de:dd:d1:2a:7e:92:36:9c:4a:cd:6a:
                    9c:c9:c7:d6:7f:ad:3d:67:3f:d4:ae:fd:f7:4e:c9:
                    f0:d3:92:77:bb:05:c7:d9:8f:95:8e:8e:0a:38:b1:
                    dd:de:fc:d2:7f:45:63:a0:35:a1:78:e2:ba:f7:34:
                    11:7b:1a:6f:08:70:35:b2:fa:d6:90:41:92:c5:21:
                    1a:6e:81:c2:95:c3:c2:31:93:a5:bd:ea:2a:07:5a:
                    7f:25:be:08:d2:62:b0:a9:53:ac:c0:6f:4f:0e:c0:
                    88:3a:3d:f7:cc:1f:5f:8d:7e:27:3f:98:e9:c6:f0:
                    18:a4:e3:c7:12:ea:eb:5a:c2:c1:48:8d:72:e3:1d:
                    80:5e:7e:87:54:94:87:60:1c:ab:16:7c:a1:9e:a4:
                    38:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AA:00:D4:9E:AB:C6:7C:AC:11:9F:EF:DF:3C:0C:A3:B6:7A:ED:36
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/sKoA1J6rxnysEZ_v3zwMo7Z67TY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.92.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:69:1f:03:38:53:70:44:b4:37:f5:f0:29:e2:4e:11:db:5e:
         cc:0c:e1:11:bf:3e:3b:57:53:1b:3e:12:3d:7d:11:3b:04:b5:
         e3:b7:a2:b6:46:4a:6f:36:79:00:34:3d:a3:70:59:84:5b:94:
         3c:d7:57:aa:24:92:69:e6:da:a8:06:d6:be:ad:6e:97:a2:e1:
         c8:d3:8f:9b:b9:34:46:d9:3b:f4:2f:34:1a:04:b6:b8:73:c3:
         20:51:8e:99:0e:56:d8:57:fc:d4:1c:1b:33:06:52:6b:7b:e2:
         1f:ea:fe:a9:e3:18:8c:55:55:dd:8f:59:56:34:99:eb:5b:a9:
         ab:2a:d1:14:15:09:15:93:d0:1e:1b:c1:b2:b5:81:c3:04:3e:
         c6:cc:4c:a2:19:61:1a:20:b8:e9:88:0a:29:ba:d8:e1:c6:f4:
         a3:f9:80:a3:46:73:6f:f8:d6:91:77:68:32:17:17:b6:45:3d:
         0d:f4:23:94:88:4b:c2:ab:2e:a1:3e:e0:28:90:10:ab:d2:6b:
         ac:77:7f:6b:04:7d:30:19:62:5a:5a:63:11:25:96:f2:af:0c:
         d6:59:cb:de:4f:ee:bf:84:35:e0:3f:f3:a9:64:59:e2:9a:1e:
         bb:4d:a1:4b:2c:09:b9:4b:c5:45:cb:e7:07:02:25:1d:f1:4d:
         72:06:fb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:40:34 2026 by rpki-client