This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/RvemEYu6d9uXP0B24R0lC57HD8g.roa
File:                     RvemEYu6d9uXP0B24R0lC57HD8g.roa (raw, json)
Hash identifier:          9b4V5juxcrPJgnNUjLn/7LskPGWZqz+b2M3iYcgQ1TU=
Subject key identifier:   46:F7:A6:11:8B:BA:77:DB:97:3F:40:76:E1:1D:25:0B:9E:C7:0F:C8
Certificate issuer:       /CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
Certificate serial:       019B85515167B3E0C7E9118B5E8E0C24A6E3
Authority key identifier: 81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/RvemEYu6d9uXP0B24R0lC57HD8g.roa
Signing time:             Sat 03 Jan 2026 19:24:17 +0000
ROA not before:           Sat 03 Jan 2026 19:24:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207471
IP address blocks:        185.140.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:85:51:51:67:b3:e0:c7:e9:11:8b:5e:8e:0c:24:a6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816d220b2b5a46fbeb27ef2d969fa21dd338c5b3
        Validity
            Not Before: Jan  3 19:24:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=46f7a6118bba77db973f4076e11d250b9ec70fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:eb:7a:af:b9:b6:8c:d2:9a:ff:66:77:96:bb:
                    31:9f:21:76:e2:15:b3:8d:07:0e:9b:5c:df:86:54:
                    df:6f:c4:ab:24:cd:46:2c:0a:47:3a:bd:99:43:43:
                    24:68:d2:2a:72:24:1a:5a:2f:d2:c4:93:db:af:dc:
                    3e:2b:81:28:a3:02:bc:3f:8d:d1:df:cd:7e:e7:c2:
                    64:3f:93:db:e2:e9:88:53:b3:7d:36:74:18:3b:ac:
                    08:5b:3a:e9:e3:ab:9e:02:c9:d5:2c:20:3f:e4:c9:
                    94:83:46:8f:4b:d1:95:10:47:87:dc:89:b0:19:39:
                    07:1f:0f:0e:4f:d5:f2:3a:18:3d:92:04:ae:4e:05:
                    71:49:ed:9f:92:07:2c:32:97:33:bb:b1:0e:44:b7:
                    ab:7b:e1:a3:c9:a3:31:90:56:69:ab:62:d3:f8:89:
                    45:50:42:ef:98:96:4d:02:d4:a9:24:3c:b8:20:44:
                    9c:b2:ab:3e:fc:e4:49:6b:a1:a5:d7:ee:d3:04:06:
                    71:65:86:48:4f:32:dc:a1:b9:05:f1:66:e8:f5:ac:
                    34:9f:75:fa:43:09:15:b3:ab:89:a9:54:ce:79:01:
                    83:87:9b:35:2c:99:1e:97:3e:0b:e5:b4:d5:34:63:
                    05:c6:fe:89:5e:10:b5:c8:f8:4f:75:53:c5:1c:ae:
                    ae:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F7:A6:11:8B:BA:77:DB:97:3F:40:76:E1:1D:25:0B:9E:C7:0F:C8
            X509v3 Authority Key Identifier:
                keyid:81:6D:22:0B:2B:5A:46:FB:EB:27:EF:2D:96:9F:A2:1D:D3:38:C5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gW0iCytaRvvrJ-8tlp-iHdM4xbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/RvemEYu6d9uXP0B24R0lC57HD8g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/971311-f47f-46db-8c57-e9782041cc24/1/gW0iCytaRvvrJ-8tlp-iHdM4xbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.140.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:e4:2b:cc:0f:03:1c:a4:2e:59:55:b6:6b:3a:e5:5c:99:a4:
         35:ac:ff:63:f2:c3:45:c5:c5:08:29:e4:9d:fe:f0:9d:f8:41:
         c6:b3:fc:71:6b:af:81:15:74:cc:c1:cc:e2:2d:c9:6d:9f:99:
         c9:07:69:b5:a5:23:01:2b:62:bf:c5:fe:23:81:ce:01:2e:15:
         5c:b0:3a:f0:92:59:e8:63:22:d0:32:8d:f0:13:c7:c7:3d:9c:
         69:88:3a:34:f9:b4:d0:74:3f:1a:fc:69:06:8b:40:5c:f3:07:
         13:a4:dd:87:8b:9a:08:01:d3:70:3a:f5:b4:f7:4f:8a:b5:f0:
         2d:66:90:57:0f:dc:23:19:48:be:25:52:39:4c:13:c5:18:10:
         d6:1e:cd:57:7b:71:78:ab:c6:78:5b:9b:e7:9d:b4:5a:7d:7c:
         76:6a:16:23:67:0e:13:e3:92:08:6f:25:5c:bf:b0:ba:24:f0:
         ff:20:71:9f:80:18:e4:7f:ed:5e:20:32:7c:b5:4b:5e:ad:a6:
         7c:86:6a:b4:cd:a2:1d:f2:e7:ba:29:55:33:7a:91:5c:56:ff:
         18:1c:68:b5:e0:c5:48:d4:46:93:34:43:24:e9:14:2c:05:5d:
         be:14:13:92:4b:a1:98:38:f4:19:b5:a4:86:fb:19:af:44:e0:
         bb:d2:4f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:39:26 2026 by rpki-client