This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/j4On1jEgDqGHCrQyanmlHTLIPfU.roa
File:                     j4On1jEgDqGHCrQyanmlHTLIPfU.roa (raw, json)
Hash identifier:          FBZAhcfJ9YrnvMKAbA0ULbxZIF42C1VrsQa2aWPitG8=
Subject key identifier:   8F:83:A7:D6:31:20:0E:A1:87:0A:B4:32:6A:79:A5:1D:32:C8:3D:F5
Certificate issuer:       /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial:       019B79106CEE63B5E0FD20230B0E3AD62076
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/j4On1jEgDqGHCrQyanmlHTLIPfU.roa
Signing time:             Thu 01 Jan 2026 10:17:58 +0000
ROA not before:           Thu 01 Jan 2026 10:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212238
IP address blocks:        185.178.164.0/24 maxlen: 24
                          185.178.165.0/24 maxlen: 24
                          185.178.166.0/24 maxlen: 24
                          185.178.167.0/24 maxlen: 24
                          185.196.96.0/24 maxlen: 24
                          185.196.98.0/24 maxlen: 24
                          185.196.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:6c:ee:63:b5:e0:fd:20:23:0b:0e:3a:d6:20:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
        Validity
            Not Before: Jan  1 10:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8f83a7d631200ea1870ab4326a79a51d32c83df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:ba:05:56:c0:3b:08:d0:c8:69:75:02:0e:
                    29:05:30:53:89:7e:c2:40:c6:e9:40:36:88:c5:68:
                    87:1d:e9:25:bf:ac:cb:af:ef:f8:24:c2:c5:73:be:
                    d9:06:8d:6f:de:19:b2:b6:e1:7d:62:ba:50:ac:1f:
                    ec:ee:f9:ef:9d:30:3b:a6:9f:58:2a:10:95:dc:fb:
                    de:df:3f:af:25:96:cd:66:79:1c:dd:17:b8:bf:2d:
                    83:ef:c3:17:1b:4c:48:05:26:f8:30:f8:36:45:88:
                    e7:53:1a:34:81:2f:31:5d:c8:01:65:a8:6c:7e:c4:
                    69:45:70:d6:70:ea:c1:dd:60:b7:5b:dc:86:88:90:
                    47:bc:ba:da:0e:7f:d2:6a:aa:d7:cb:42:73:d2:47:
                    76:a1:7f:10:48:32:61:b5:b3:68:24:cf:f3:9a:a4:
                    18:f9:15:0f:90:6e:17:28:7e:ad:41:41:27:15:a6:
                    a8:ea:81:bc:02:d3:26:b3:63:f5:7d:ee:39:9e:68:
                    0c:4e:9b:d2:98:28:3d:3c:61:19:ba:b4:c8:4f:41:
                    5e:12:dd:da:cc:46:44:df:4b:13:1d:da:5a:cc:7f:
                    c7:33:94:6f:93:09:ad:26:7e:e4:11:64:4d:82:0b:
                    ae:9a:d5:54:91:51:90:77:38:ef:4f:ee:0f:3c:25:
                    49:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:83:A7:D6:31:20:0E:A1:87:0A:B4:32:6A:79:A5:1D:32:C8:3D:F5
            X509v3 Authority Key Identifier:
                keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/j4On1jEgDqGHCrQyanmlHTLIPfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.178.164.0/22
                  185.196.96.0/24
                  185.196.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:9e:3f:74:62:82:ca:87:fe:86:8a:3e:ec:25:f8:be:d9:d3:
         1d:62:c8:d2:e7:6a:8a:20:50:66:97:91:5a:b3:8d:79:cc:e6:
         ca:7d:84:5a:ed:f4:10:a6:05:2e:57:af:a0:2e:43:ba:72:2d:
         01:52:35:05:ba:03:22:02:64:36:e9:bf:e8:4b:c2:15:12:1a:
         aa:77:e9:ea:22:52:92:99:3c:7b:be:8b:3a:fe:45:20:35:cc:
         6f:20:81:3b:0d:26:68:ec:9d:d6:a8:46:84:a0:54:84:16:65:
         a5:3e:d1:83:33:f0:b4:b6:ec:f1:75:82:15:ab:04:17:9f:69:
         0f:24:54:b3:7b:80:1c:a1:a0:ba:2b:eb:30:3f:c3:99:d0:03:
         57:f1:38:2b:b2:b4:15:08:72:aa:96:93:15:34:f3:7e:04:c3:
         4a:97:65:9a:d0:17:72:a5:0b:b1:16:b6:07:bd:db:4d:5c:bb:
         c6:3d:c2:4e:6d:b2:70:90:25:88:b6:3d:79:f1:b2:bc:67:29:
         1f:21:af:31:f7:ca:58:ba:b3:be:9d:87:ee:5a:b8:53:a2:fc:
         a6:52:0d:e0:ce:65:e8:a1:85:8a:87:a8:b9:d0:a4:e2:05:37:
         d5:c5:9a:f9:61:61:86:3d:19:74:52:18:ba:37:3b:6b:2a:79:
         e2:63:a2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:35:53 2026 by rpki-client