This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/A8DjBFWApaOvVsNL6vXCg0QZ-Zs.roa
File:                     A8DjBFWApaOvVsNL6vXCg0QZ-Zs.roa (raw, json)
Hash identifier:          9eSIPzP882gnq+toY+f9OquYBfy9B8LbOEOMMknDFO4=
Subject key identifier:   03:C0:E3:04:55:80:A5:A3:AF:56:C3:4B:EA:F5:C2:83:44:19:F9:9B
Certificate issuer:       /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial:       019B77C6F23A610A9DA6593BE4FA7D3873AD
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/A8DjBFWApaOvVsNL6vXCg0QZ-Zs.roa
Signing time:             Thu 01 Jan 2026 04:18:05 +0000
ROA not before:           Thu 01 Jan 2026 04:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     40178
IP address blocks:        188.92.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:f2:3a:61:0a:9d:a6:59:3b:e4:fa:7d:38:73:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
        Validity
            Not Before: Jan  1 04:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=03c0e3045580a5a3af56c34beaf5c2834419f99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:3b:25:8a:8a:30:83:31:f8:66:50:62:c9:
                    4a:b3:8d:ef:39:5e:03:18:53:b2:0a:c4:db:8f:18:
                    5f:20:06:cd:84:b1:7a:8c:58:dd:bf:6b:63:6d:c1:
                    40:f7:12:3f:ba:ab:05:12:7a:65:46:79:6d:03:16:
                    51:5e:e1:fc:14:57:48:2f:ea:a0:20:e0:8c:13:89:
                    b9:9a:27:dd:44:90:28:3d:d3:dc:7e:d4:dc:8b:cc:
                    a9:ff:d3:51:2f:31:f3:7a:e3:d9:cc:72:1f:61:0e:
                    50:81:20:d6:16:5f:f6:15:bd:05:c9:f9:de:f5:18:
                    d7:52:a1:fe:24:20:a2:eb:10:51:dc:a6:9f:93:83:
                    49:d0:22:2d:97:fa:43:ee:94:70:0e:d3:69:9a:b5:
                    8f:3d:ad:0c:3b:56:38:8e:d1:21:51:8c:ec:5e:63:
                    4f:74:b1:53:c8:76:c3:64:3d:8b:44:fb:32:89:7e:
                    f7:35:b2:12:ec:44:8d:bf:90:67:b2:a9:5d:5a:02:
                    2e:9f:20:7a:2e:23:5e:22:6d:3f:64:06:da:0a:c7:
                    3e:ce:24:3b:20:4d:b7:b9:37:27:26:7a:4a:8d:14:
                    64:41:47:ce:bb:5a:e2:09:32:1f:49:77:52:42:3a:
                    d6:8e:56:57:d3:a5:8a:e5:c7:b3:83:e1:f9:97:63:
                    12:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C0:E3:04:55:80:A5:A3:AF:56:C3:4B:EA:F5:C2:83:44:19:F9:9B
            X509v3 Authority Key Identifier:
                keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/A8DjBFWApaOvVsNL6vXCg0QZ-Zs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.92.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:c0:d5:7e:28:ef:4a:f4:ec:bc:33:1b:2d:d6:5c:bf:63:1f:
         11:f0:f6:04:10:30:bd:c1:2f:c9:1b:7f:df:ff:2b:7b:b7:b3:
         f2:fa:fc:e9:ea:63:7e:3c:c5:48:e6:fb:ee:2d:55:53:9a:16:
         b0:60:e2:0e:66:1a:fd:76:dd:32:89:7a:10:b7:eb:56:0a:3d:
         ac:07:f9:81:10:c3:17:eb:2e:f9:11:16:05:d8:e7:0e:c8:82:
         a3:a8:81:d2:43:d9:93:c8:71:6a:c6:7d:48:45:b6:1c:14:b4:
         a3:2e:7b:fb:d6:49:41:bc:c9:06:91:de:99:9a:3a:d9:2e:5b:
         a3:0c:0d:63:eb:5b:51:1b:2a:ce:55:02:13:52:08:c0:6c:49:
         3b:0b:53:b1:87:9a:0e:e6:e9:2d:91:dd:0e:fd:59:d0:08:ba:
         d4:7b:e2:85:76:a8:22:7a:b7:a1:48:47:1a:ae:44:3d:9a:63:
         46:c4:b2:37:52:b8:c4:9c:e9:88:43:49:79:28:44:92:ff:85:
         38:83:db:ae:23:ae:aa:23:b6:c4:41:29:61:ee:35:be:43:50:
         29:d6:65:99:ee:95:f3:81:27:bb:70:cf:29:08:b4:c6:76:b5:
         ee:0b:01:ec:b2:ca:71:c5:b3:f2:45:bd:2f:7d:9a:ec:ce:f3:
         50:16:fe:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:38:57 2026 by rpki-client