This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/8QpoO-rxJHsqUjRex5_olbhYxQc.roa
File:                     8QpoO-rxJHsqUjRex5_olbhYxQc.roa (raw, json)
Hash identifier:          SX9oUFynqnM4YrEmctmRd+yYGKV06PoodiFRGZH6voc=
Subject key identifier:   F1:0A:68:3B:EA:F1:24:7B:2A:52:34:5E:C7:9F:E8:95:B8:58:C5:07
Certificate issuer:       /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial:       019B77590F198709A0AE49D4E22F77492B03
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/8QpoO-rxJHsqUjRex5_olbhYxQc.roa
Signing time:             Thu 01 Jan 2026 02:18:03 +0000
ROA not before:           Thu 01 Jan 2026 02:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206170
IP address blocks:        62.3.44.0/24 maxlen: 24
                          86.106.25.0/24 maxlen: 24
                          86.107.103.0/24 maxlen: 24
                          109.205.246.0/24 maxlen: 24
                          185.132.127.0/24 maxlen: 24
                          185.189.48.0/22 maxlen: 22
                          188.66.60.0/22 maxlen: 22
                          188.66.60.0/24 maxlen: 24
                          188.66.61.0/24 maxlen: 24
                          188.66.62.0/24 maxlen: 24
                          188.66.63.0/24 maxlen: 24
                          195.85.54.0/24 maxlen: 24
                          2001:67c:750::/48 maxlen: 48
                          2a0b:dc80::/29 maxlen: 29
                          2a0d:5f47:ffff::/48 maxlen: 48
                          2a12:fe00::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:0f:19:87:09:a0:ae:49:d4:e2:2f:77:49:2b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
        Validity
            Not Before: Jan  1 02:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f10a683beaf1247b2a52345ec79fe895b858c507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1e:e4:0f:2b:78:5e:a3:2b:2c:71:a6:e4:48:
                    86:e3:80:72:43:b1:99:99:d0:f2:6f:0d:7d:aa:96:
                    dd:a7:e9:87:7a:c4:6c:bc:2d:41:63:4d:38:58:5c:
                    2b:07:ea:9f:44:a6:11:e5:ab:95:96:fb:84:7a:15:
                    ec:e6:c3:ca:fb:30:08:ad:7b:ea:23:31:a8:17:27:
                    73:dd:4b:de:7b:eb:3c:2e:0f:41:2f:5f:e2:ca:bb:
                    b0:fc:ae:47:39:3d:92:2c:f1:de:cf:a8:84:1a:d7:
                    74:13:02:7e:10:eb:15:aa:e0:b6:0e:06:33:d8:bc:
                    70:b2:1f:2d:7c:f1:6d:9f:8b:b9:10:ce:9b:f8:16:
                    e3:a6:78:7d:d6:35:9c:73:67:25:e4:fa:36:04:ac:
                    c3:cf:75:d1:b9:61:5f:66:1a:f3:28:42:28:2c:04:
                    ca:10:e1:2b:c7:bd:78:b1:67:69:8c:bb:86:7c:74:
                    5a:be:00:72:32:02:05:38:06:65:9c:d5:b5:77:59:
                    cd:af:95:ac:bd:d1:c9:4e:aa:1b:12:92:cd:d5:c3:
                    5d:fa:e6:51:14:9b:ef:43:7c:13:ef:3b:de:56:f1:
                    f5:b7:33:de:e0:8b:4b:47:83:23:d8:fc:1b:cb:c3:
                    0f:23:5b:0a:7c:b1:bf:3b:cc:2a:54:3e:40:ce:de:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0A:68:3B:EA:F1:24:7B:2A:52:34:5E:C7:9F:E8:95:B8:58:C5:07
            X509v3 Authority Key Identifier:
                keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/8QpoO-rxJHsqUjRex5_olbhYxQc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.44.0/24
                  86.106.25.0/24
                  86.107.103.0/24
                  109.205.246.0/24
                  185.132.127.0/24
                  185.189.48.0/22
                  188.66.60.0/22
                  195.85.54.0/24
                IPv6:
                  2001:67c:750::/48
                  2a0b:dc80::/29
                  2a0d:5f47:ffff::/48
                  2a12:fe00::/29

    Signature Algorithm: sha256WithRSAEncryption
         9e:31:ba:ac:79:3d:a9:9b:29:01:44:96:05:a7:8a:f2:d1:0b:
         48:08:6a:5d:ae:f4:3e:af:cb:a7:e1:84:60:aa:55:fd:db:ca:
         2b:97:fe:47:40:55:f7:4a:f7:54:ea:2e:d3:53:a6:01:06:f9:
         5c:45:c5:b5:6e:3d:c8:1f:cb:09:40:20:ad:b2:95:c4:50:42:
         67:24:c4:36:35:49:b8:44:17:e4:1c:1d:e5:65:c2:38:09:71:
         3f:49:2e:64:4d:da:b8:41:dc:ab:f3:49:f0:a7:87:0d:33:0d:
         7f:dd:a0:e3:80:b8:5b:46:dc:13:c5:f4:73:be:c0:d7:8a:e9:
         31:92:9b:56:f8:d4:01:59:c5:78:f8:e5:71:80:55:a6:aa:74:
         c1:50:a6:dc:c8:2f:a9:67:4c:61:6a:0b:d0:66:2a:00:83:1e:
         74:28:dc:a9:d9:22:0f:e2:63:cc:35:a2:4d:45:72:26:4b:01:
         d0:cf:74:04:97:62:83:05:c0:ae:b8:47:51:05:f1:d7:35:c4:
         f1:8d:57:ae:cc:df:34:92:2f:80:2d:0d:6a:a2:28:3a:ab:4c:
         e3:99:b3:6d:47:ed:c7:ff:8d:c7:97:4a:f8:29:01:b2:35:e8:
         da:8d:79:fc:2e:c8:9e:9f:60:dd:71:d9:46:4b:98:c6:7d:17:
         85:be:13:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:00:27 2026 by rpki-client