This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/R-n3kTkIS66pCDSaN5Ab3iofUqI.roa
File:                     R-n3kTkIS66pCDSaN5Ab3iofUqI.roa (raw, json)
Hash identifier:          vPJfuaoV108F+OtGlAxFY7kAhAHnh7DyqePwOJe3DWc=
Subject key identifier:   47:E9:F7:91:39:08:4B:AE:A9:08:34:9A:37:90:1B:DE:2A:1F:52:A2
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       019B7CEDEF8F2A41A6F97F55973BF6126290
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/R-n3kTkIS66pCDSaN5Ab3iofUqI.roa
Signing time:             Fri 02 Jan 2026 04:18:46 +0000
ROA not before:           Fri 02 Jan 2026 04:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208476
IP address blocks:        185.244.26.0/24 maxlen: 24
                          185.244.29.0/24 maxlen: 24
                          185.244.30.0/24 maxlen: 24
                          185.244.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:ef:8f:2a:41:a6:f9:7f:55:97:3b:f6:12:62:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  2 04:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=47e9f79139084baea908349a37901bde2a1f52a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0c:31:1a:33:78:46:01:5c:bf:e5:1b:70:52:
                    7d:b5:4a:3a:e5:31:09:2f:f4:1c:3a:a5:6e:a2:42:
                    4c:c9:d6:de:6d:eb:c6:b3:e8:41:47:cc:36:b5:71:
                    e1:02:38:8f:84:9b:7c:38:af:7c:91:4d:40:d7:15:
                    49:fc:eb:7e:34:9a:d1:b2:70:4d:05:21:22:dc:de:
                    0e:6c:df:e6:11:a8:93:9d:7f:86:f1:96:37:44:74:
                    d8:85:a9:b4:f0:c8:e4:d3:88:3b:ac:c1:da:2d:e7:
                    c0:16:48:f4:61:46:94:93:ea:07:0e:29:db:30:2d:
                    09:37:9d:14:86:78:0d:d6:4a:29:c9:e6:ac:fa:09:
                    ba:1f:80:06:a3:a9:de:67:18:c7:f0:0a:35:e6:9c:
                    ae:ac:97:91:1e:fc:53:ed:fa:c2:15:d4:6a:ec:0d:
                    d7:68:c1:48:07:7a:a3:1a:f7:8d:0c:13:d6:cf:b4:
                    26:2f:13:19:5b:df:bd:05:4f:20:72:85:d6:9c:2c:
                    1b:ab:00:c4:d5:68:66:a4:fc:0d:08:3c:16:00:67:
                    41:41:61:3b:b4:57:9e:99:9e:8b:70:d6:47:12:05:
                    42:db:1f:96:e1:f8:d2:87:88:e0:ee:02:9b:30:a8:
                    4b:81:84:2f:f2:88:7b:31:91:eb:26:50:ec:55:43:
                    92:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E9:F7:91:39:08:4B:AE:A9:08:34:9A:37:90:1B:DE:2A:1F:52:A2
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/R-n3kTkIS66pCDSaN5Ab3iofUqI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.244.26.0/24
                  185.244.29.0-185.244.31.255

    Signature Algorithm: sha256WithRSAEncryption
         c0:14:3d:be:6a:9a:48:fa:00:d1:f5:7e:cc:f5:02:19:e7:b3:
         d5:ce:f5:96:5f:2c:ca:ce:00:0b:23:ee:a1:8d:cf:9a:b7:55:
         9b:56:06:af:6c:99:c0:95:58:2a:ad:7e:b9:ed:75:88:7e:f0:
         1f:e7:8e:ec:f0:5a:34:bb:c6:8b:cc:f9:74:a9:dd:1d:b7:52:
         68:50:d7:dc:b5:29:7f:a1:ee:ab:84:c7:43:2a:50:46:20:55:
         ba:18:c8:de:e7:1b:db:0b:f6:f5:f1:53:44:08:5e:b2:cb:cf:
         b3:1e:89:8b:03:68:43:87:92:d4:01:a8:6b:cd:64:8b:bb:eb:
         eb:ec:47:69:98:13:1b:62:67:d7:15:76:70:93:dc:fd:86:11:
         10:d1:af:ef:b4:12:3f:67:cf:25:ce:1d:47:9d:69:91:f4:e9:
         6d:4d:ad:cf:b0:d9:a1:74:f0:00:b1:8e:aa:e7:5a:d4:1f:5d:
         7d:fe:22:c0:72:7f:a5:0d:4d:09:b4:8f:70:68:41:c3:d7:55:
         ff:f3:20:f0:dd:7d:4d:9d:fe:8a:69:dc:73:8c:69:c0:3a:6f:
         9f:c5:a3:97:b6:24:4d:e0:36:8f:c7:81:8c:ca:af:a2:ed:a1:
         da:b3:04:3e:53:f5:8c:5e:00:93:d1:6a:4c:2b:6c:70:80:fe:
         30:49:0e:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:17:43 2026 by rpki-client