This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/r8wWtQIRlfVaRAqsTE8BSM5K8Fg.roa
File:                     r8wWtQIRlfVaRAqsTE8BSM5K8Fg.roa (raw, json)
Hash identifier:          q8BWxYBDwimUfBX5rZs0mS3SnxWzlL9k3GvkEkEzIbs=
Subject key identifier:   AF:CC:16:B5:02:11:95:F5:5A:44:0A:AC:4C:4F:01:48:CE:4A:F0:58
Certificate issuer:       /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial:       019B7AC8176B2CA3B9DCA1F0D64DF745FB20
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/r8wWtQIRlfVaRAqsTE8BSM5K8Fg.roa
Signing time:             Thu 01 Jan 2026 18:18:12 +0000
ROA not before:           Thu 01 Jan 2026 18:18:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207344
IP address blocks:        185.179.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:17:6b:2c:a3:b9:dc:a1:f0:d6:4d:f7:45:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
        Validity
            Not Before: Jan  1 18:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=afcc16b5021195f55a440aac4c4f0148ce4af058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ab:8e:77:c8:d1:41:c0:55:40:41:e4:56:e6:
                    6b:bf:3e:ea:69:e2:2f:26:26:41:e3:24:1c:24:70:
                    10:cc:11:5d:01:bb:34:29:3b:a5:f8:09:a2:08:b5:
                    4e:2d:e8:cb:36:10:0c:d8:3b:a0:65:d1:7f:65:80:
                    af:3f:82:0f:7f:d6:9d:d1:8e:31:4e:48:8e:a7:62:
                    79:13:68:16:49:60:44:70:56:60:53:92:08:d7:53:
                    ba:41:85:61:df:95:2c:64:d2:ea:cc:09:4e:c4:fc:
                    2b:8e:c8:c3:f5:83:65:9e:bf:3c:88:83:90:25:8a:
                    d9:48:df:cb:59:f6:98:4e:d0:1d:3e:2c:00:c9:08:
                    b1:1a:c1:6a:af:e1:0e:93:bd:2d:fb:89:0e:7a:ab:
                    65:0f:45:d2:2b:c4:10:ec:07:19:90:0e:f0:7d:dc:
                    7a:d8:3d:44:46:b3:4d:b1:b5:cd:bb:c6:62:9d:43:
                    5a:b6:f0:e6:4b:22:15:26:26:bd:bd:ad:74:ff:5a:
                    a4:33:fc:62:a5:5a:30:68:68:66:22:85:4a:33:b1:
                    23:20:66:7c:32:16:71:6c:e5:81:93:e8:6c:76:f1:
                    9b:2e:1b:1b:16:b2:9b:4d:01:e4:b5:20:e4:af:c4:
                    ff:d8:a2:62:ce:ea:f2:93:59:d1:1c:98:5d:34:9c:
                    b0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CC:16:B5:02:11:95:F5:5A:44:0A:AC:4C:4F:01:48:CE:4A:F0:58
            X509v3 Authority Key Identifier:
                keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/r8wWtQIRlfVaRAqsTE8BSM5K8Fg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:d9:15:c4:e3:1e:68:9c:e1:30:00:c6:26:46:b3:1c:d9:60:
         37:a4:12:9a:50:55:bc:9f:c8:55:07:b8:61:41:9e:37:44:de:
         bd:65:40:fc:ad:b1:a8:1f:8d:ae:20:71:c9:b3:e5:1a:24:29:
         e6:44:cb:15:43:ca:74:a1:d9:2e:ea:68:d5:65:af:ec:77:bb:
         31:bd:0c:fa:12:81:32:d6:6a:1a:09:e8:3c:52:23:20:5a:23:
         ed:f6:8a:2d:34:ba:33:73:c0:8c:52:e1:68:fb:ce:28:44:3f:
         ae:aa:bd:27:44:33:c2:41:d7:d2:ad:9d:f9:39:27:02:24:65:
         91:77:a8:78:a2:e3:b3:f0:96:34:a8:23:de:cb:11:1f:92:f1:
         ff:0d:99:d8:2d:cf:9d:6e:e9:de:e3:9c:d9:ad:8a:0e:b3:14:
         5c:25:44:ce:23:45:33:ec:5b:80:06:6a:82:3b:66:60:d5:30:
         3b:8c:cc:82:eb:50:78:a5:6c:cf:34:c7:fb:fd:46:97:16:b7:
         e9:32:7a:19:fa:2f:bf:b4:6f:cc:b3:be:26:85:ac:f4:71:57:
         ea:2b:68:4d:ed:9c:c3:5b:9c:64:c0:8a:68:53:fc:f4:6e:49:
         36:ea:2a:25:c4:b6:6b:17:f3:cd:fe:2b:60:6a:ce:49:05:7f:
         ea:02:ef:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:37 2026 by rpki-client