This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/B_8fkcCbHsvWKWbijy_wLr7B3Ok.roa
File:                     B_8fkcCbHsvWKWbijy_wLr7B3Ok.roa (raw, json)
Hash identifier:          Xx2ZzFe415idKOO95GHC4DjV8zLTTk2X9UgUXh2GHfc=
Subject key identifier:   07:FF:1F:91:C0:9B:1E:CB:D6:29:66:E2:8F:2F:F0:2E:BE:C1:DC:E9
Certificate issuer:       /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial:       019BDA3A227E97F89008565F40A8B6E1A60B
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/B_8fkcCbHsvWKWbijy_wLr7B3Ok.roa
Signing time:             Tue 20 Jan 2026 07:06:41 +0000
ROA not before:           Tue 20 Jan 2026 07:06:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        37.148.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:da:3a:22:7e:97:f8:90:08:56:5f:40:a8:b6:e1:a6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
        Validity
            Not Before: Jan 20 07:06:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=07ff1f91c09b1ecbd62966e28f2ff02ebec1dce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:29:b4:ee:db:0a:68:76:ab:90:9b:b7:82:
                    a5:e2:86:eb:31:1c:33:8b:73:11:53:6d:d1:39:9d:
                    32:bb:4e:33:0c:75:ea:03:3c:15:c6:b5:66:76:04:
                    e2:ef:4d:b8:5b:29:22:63:8b:5d:45:c4:7f:a4:21:
                    74:44:2a:90:8e:a2:1a:e1:1c:0d:7c:cc:6c:62:44:
                    18:cc:e2:37:f4:d9:9c:e0:41:97:9d:47:86:d6:21:
                    06:e0:9a:1d:05:42:b1:32:32:f6:c7:2d:5a:04:f0:
                    d9:54:6c:45:74:21:6b:f9:f4:7b:13:4b:a7:c9:da:
                    77:31:c7:45:a7:fa:c6:8a:7a:59:f9:ed:fe:0a:80:
                    7c:a4:b7:e2:ad:d1:72:1f:39:4d:57:9b:ea:30:fd:
                    56:7a:98:5d:c5:7a:01:f1:2c:db:93:7c:04:f9:fb:
                    eb:b3:e3:52:fb:03:63:a9:1e:0c:8e:fa:1d:b0:72:
                    45:53:51:ab:2b:91:b4:ae:2b:0b:36:a4:70:9a:55:
                    99:90:68:6a:b8:e9:5a:2e:6e:bb:3f:89:27:03:84:
                    2f:0c:97:1a:79:94:7a:14:df:1e:2b:fa:f6:db:a8:
                    61:81:52:5a:6b:dd:4a:e7:99:4f:19:2a:ba:8d:6c:
                    5d:11:60:43:cc:ca:d4:17:32:ee:f4:1c:0e:21:78:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FF:1F:91:C0:9B:1E:CB:D6:29:66:E2:8F:2F:F0:2E:BE:C1:DC:E9
            X509v3 Authority Key Identifier:
                keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/B_8fkcCbHsvWKWbijy_wLr7B3Ok.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.148.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:e8:16:f4:43:6f:8e:15:cb:e1:aa:58:c5:64:10:fb:49:50:
         07:d5:a5:67:1d:82:dd:5d:a7:12:10:66:34:88:c2:d8:e1:b6:
         c5:e0:4b:1e:82:98:2b:a4:ca:db:af:74:4b:cd:73:05:30:be:
         04:45:d0:f0:77:11:50:3b:ad:69:58:17:fb:98:8f:90:eb:46:
         a4:84:f4:c3:a7:e5:e7:1c:cf:cb:b8:65:b7:0c:0e:2f:ab:08:
         ba:e9:a9:41:68:77:34:4c:08:f7:de:fe:70:fe:e0:09:3d:11:
         aa:10:2f:7e:06:21:b6:03:5c:0a:26:cf:e3:42:56:89:47:0d:
         64:4d:19:7a:d1:96:93:75:98:db:ce:b0:cb:58:c9:97:a1:db:
         c8:93:9a:49:12:a9:e7:d3:d7:c5:29:f4:a8:60:18:fb:e6:4f:
         6d:b6:6e:73:5c:4d:a6:e7:a5:85:85:77:13:58:5a:aa:04:8d:
         7f:bc:2d:02:0f:b0:e9:98:c5:7a:b3:d6:bd:9e:22:89:a1:49:
         78:20:1e:0b:a7:95:f7:39:c7:10:de:02:80:05:99:ce:13:d7:
         cf:14:4b:87:8d:46:06:73:01:e1:6c:fa:cd:37:9a:ee:1b:73:
         5f:03:3c:39:c6:c3:7a:fb:91:da:15:e4:5b:d7:3a:05:ae:da:
         08:b8:01:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:03:07 2026 by rpki-client