This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1-75h6Z8XZfpA-J4Xkm8JYxrcW7E.roa
File:                     1-75h6Z8XZfpA-J4Xkm8JYxrcW7E.roa (raw, json)
Hash identifier:          YgoOaQlFbXUdsZx8u8PNBd2uQHXrr/r+JgEvwggSZDA=
Subject key identifier:   FB:BE:61:E9:9F:17:65:FA:40:F8:9E:17:92:6F:09:63:1A:DC:5B:B1
Certificate issuer:       /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial:       019B7BA3780F1C27DEB709F21ADAA7121211
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1-75h6Z8XZfpA-J4Xkm8JYxrcW7E.roa
Signing time:             Thu 01 Jan 2026 22:17:49 +0000
ROA not before:           Thu 01 Jan 2026 22:17:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     61113
IP address blocks:        82.146.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:78:0f:1c:27:de:b7:09:f2:1a:da:a7:12:12:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
        Validity
            Not Before: Jan  1 22:17:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fbbe61e99f1765fa40f89e17926f09631adc5bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:a0:e1:a3:5a:f5:f8:93:c9:1b:94:0c:0f:
                    e0:7b:ff:1b:04:f2:74:2f:cb:d2:07:3d:11:5d:2f:
                    3e:17:a2:31:a2:1e:e4:9d:58:2b:1b:2f:af:cc:39:
                    3d:fa:84:17:f4:89:25:8c:f7:09:e3:ec:f1:74:3b:
                    93:61:58:d1:ba:c9:61:8e:f9:20:57:dd:e1:7e:69:
                    8d:7a:81:51:1e:74:83:2f:33:1a:31:cb:67:0c:28:
                    88:61:d0:de:27:d1:db:b5:29:c7:4e:63:23:3b:5a:
                    41:ad:9e:ed:05:8a:e9:dd:92:05:f0:82:81:18:14:
                    76:d5:df:08:0f:7b:45:bc:a2:25:e1:01:82:c6:1c:
                    4e:16:16:48:45:59:70:79:4e:ed:c9:af:29:e2:e5:
                    7d:1a:7f:02:a1:5d:08:3a:44:83:1c:04:7f:ff:a0:
                    ca:bc:f2:34:0c:e0:8d:ad:1b:c6:c1:84:cd:cc:08:
                    3f:1c:87:fe:69:37:04:29:9c:03:c7:08:ff:c9:3e:
                    26:04:34:49:78:09:3e:9b:96:27:23:d2:c2:1c:af:
                    34:4c:00:f9:8d:0c:cd:36:1b:67:e5:c2:cc:3b:9c:
                    77:b9:ca:a3:a2:92:18:13:4c:bb:48:b9:94:62:01:
                    e3:6a:c6:a4:33:d5:d6:c5:85:8d:84:8d:e0:34:8a:
                    c2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BE:61:E9:9F:17:65:FA:40:F8:9E:17:92:6F:09:63:1A:DC:5B:B1
            X509v3 Authority Key Identifier:
                keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/1-75h6Z8XZfpA-J4Xkm8JYxrcW7E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.146.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:61:07:d4:6c:0a:51:af:82:c3:52:2d:1a:fa:7d:38:2c:4f:
         3e:ec:27:44:46:5b:60:92:a2:67:91:09:5b:1e:a6:3b:b6:70:
         f9:5a:75:a9:8a:3a:65:c7:2a:3c:77:fb:98:da:08:66:12:79:
         c8:f4:fe:5d:1a:f1:1a:ac:0e:03:a7:31:ae:21:c7:22:a0:91:
         21:90:09:ef:51:00:95:d4:f9:c2:83:b1:48:de:64:98:f2:3b:
         fa:07:b7:4f:0a:cb:2e:fb:15:26:42:85:bb:e9:e4:5a:7a:a3:
         27:c0:be:d0:4e:34:89:77:93:88:ea:42:30:31:1e:a0:dc:53:
         35:c3:2c:d8:e7:1f:f7:48:f7:3a:eb:cb:a1:31:e6:d5:da:fe:
         0e:4e:f6:17:8e:46:20:f0:b5:a7:50:49:a9:8d:f2:b3:5f:e0:
         31:db:0f:2d:b9:b2:11:f1:73:48:1b:7b:1f:86:c3:03:fa:8b:
         69:da:c8:71:5d:c0:52:76:97:61:e0:84:ee:50:d8:f6:ab:ed:
         1d:1c:7a:97:2e:ab:c6:9d:8b:a3:26:79:94:7a:c4:a8:69:96:
         ae:2c:87:d7:60:9d:92:d8:40:08:c0:5b:6d:1f:0b:dd:60:b6:
         c6:bf:b8:b0:10:f4:d3:24:ca:11:ab:8b:70:27:9f:3a:1f:ce:
         fd:46:69:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:19:41 2026 by rpki-client