This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/iwkzEw-xYne2_moODPhsHHvfJEE.roa
File:                     iwkzEw-xYne2_moODPhsHHvfJEE.roa (raw, json)
Hash identifier:          e85JS9mOgxQCslqs7Lpvehm/GeHrCKP2QV8UeWsf++I=
Subject key identifier:   8B:09:33:13:0F:B1:62:77:B6:FE:6A:0E:0C:F8:6C:1C:7B:DF:24:41
Certificate issuer:       /CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
Certificate serial:       019B77C74EB9F0C5B6F92A680EF940E054CE
Authority key identifier: FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/iwkzEw-xYne2_moODPhsHHvfJEE.roa
Signing time:             Thu 01 Jan 2026 04:18:29 +0000
ROA not before:           Thu 01 Jan 2026 04:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31034
IP address blocks:        185.5.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:4e:b9:f0:c5:b6:f9:2a:68:0e:f9:40:e0:54:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff56d837fe254fa92e1f3c2f861aa1e485521746
        Validity
            Not Before: Jan  1 04:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8b0933130fb16277b6fe6a0e0cf86c1c7bdf2441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:31:6c:74:b1:9d:a9:4e:f7:a2:8a:0b:ba:
                    72:25:83:52:86:39:58:d3:16:b9:aa:77:65:40:2d:
                    43:63:12:96:a1:87:61:cf:c7:e3:af:79:bf:75:33:
                    2d:ab:a6:d4:4b:aa:ed:0f:ab:ef:25:0b:5e:91:6e:
                    fd:a0:be:9d:31:ef:34:f0:35:65:60:c0:6b:fe:f6:
                    9d:ef:05:d7:00:ed:a2:55:37:b3:7e:27:76:ae:6c:
                    dc:53:aa:ae:09:40:24:5f:40:0a:7c:a2:72:6c:ec:
                    91:32:a2:f4:94:63:71:5c:2a:ae:1d:f6:a5:f1:ea:
                    6a:e8:1b:28:6e:0f:63:b3:18:d8:1d:0b:d7:a6:c2:
                    ad:56:36:a3:f8:18:63:64:bf:b4:4d:3c:8f:d9:df:
                    a6:3a:21:12:96:79:56:ff:82:4e:68:b0:2d:59:7c:
                    d4:2f:26:40:2d:79:f6:28:24:89:e0:80:d3:59:5e:
                    a4:ba:11:ed:90:88:5f:ab:fd:52:18:37:9c:f1:a4:
                    48:b1:b2:76:e2:5a:3e:ee:c7:9d:10:49:c8:49:f7:
                    fd:23:3b:8d:0b:f1:6b:6b:16:75:ff:77:21:28:42:
                    20:ac:87:3f:fc:67:c6:3a:24:af:24:ca:66:e4:d6:
                    53:5c:91:5a:1f:aa:70:1d:53:b8:a8:8c:f7:33:97:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:09:33:13:0F:B1:62:77:B6:FE:6A:0E:0C:F8:6C:1C:7B:DF:24:41
            X509v3 Authority Key Identifier:
                keyid:FF:56:D8:37:FE:25:4F:A9:2E:1F:3C:2F:86:1A:A1:E4:85:52:17:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/iwkzEw-xYne2_moODPhsHHvfJEE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1b3749-9673-412d-b348-50fc4d557d08/1/_1bYN_4lT6kuHzwvhhqh5IVSF0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.5.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:01:b0:91:d5:d8:01:96:e2:7b:7c:53:e0:70:d1:68:89:83:
         70:1a:ad:6b:c7:9c:40:ea:b2:cf:46:f7:98:60:7a:ad:09:9a:
         bd:b5:8b:6a:3d:26:22:87:d5:03:c7:ac:71:d7:74:fa:6c:02:
         34:29:1e:ad:e8:87:24:aa:fb:60:3c:62:8a:83:43:11:19:35:
         4f:f0:15:f6:20:1b:0e:de:9f:ab:a3:e9:21:4d:bb:cf:37:d3:
         1f:19:c0:ee:ea:ca:f3:7f:2c:7e:d5:bf:19:cb:61:ac:cc:eb:
         93:6c:ea:04:1f:48:c4:ce:f4:3c:33:8d:12:c6:ab:5a:6a:d6:
         77:4b:e7:a3:45:60:cd:42:4b:af:b6:fc:e0:1c:aa:cb:76:93:
         0f:4f:d9:43:5b:0d:48:a3:9e:a5:6b:68:a1:80:c1:ef:c1:60:
         0a:9b:5e:cf:3e:e7:a0:f9:b1:b7:23:9d:76:7f:4a:13:61:42:
         18:84:85:d7:bc:26:ae:90:9a:c4:2c:39:20:cf:a4:d3:2b:d8:
         ab:49:72:10:4f:78:cd:04:b0:de:d4:5d:7c:47:e4:87:38:e4:
         af:57:68:14:2c:a7:c7:1b:72:df:52:a8:d6:27:a3:5f:9f:20:
         12:7a:62:2e:b6:05:d5:78:22:5b:cc:33:58:ad:ab:5b:c3:d7:
         47:e0:d7:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3x0658MW2+SpoDvlA4FTOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTZkODM3ZmUyNTRmYTkyZTFmM2MyZjg2MWFhMWU0ODU1
MjE3NDYwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjA5MzMxMzBmYjE2Mjc3YjZmZTZhMGUwY2Y4NmMxYzdiZGYyNDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdsxbHSxnalO96KKC7pyJYNShjlY
0xa5qndlQC1DYxKWoYdhz8fjr3m/dTMtq6bUS6rtD6vvJQtekW79oL6dMe808DVl
YMBr/vad7wXXAO2iVTezfid2rmzcU6quCUAkX0AKfKJybOyRMqL0lGNxXCquHfal
8epq6Bsobg9jsxjYHQvXpsKtVjaj+BhjZL+0TTyP2d+mOiESlnlW/4JOaLAtWXzU
LyZALXn2KCSJ4IDTWV6kuhHtkIhfq/1SGDec8aRIsbJ24lo+7sedEEnISff9IzuN
C/FraxZ1/3chKEIgrIc//GfGOiSvJMpm5NZTXJFaH6pwHVO4qIz3M5d+BwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIsJMxMPsWJ3tv5qDgz4bBx73yRBMB8GA1UdIwQY
MBaAFP9W2Df+JU+pLh88L4YaoeSFUhdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgt
NTBmYzRkNTU3ZDA4LzEvaXdrekV3LXhZbmUyX21vT0RQaHNISHZmSkVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xYjM3NDktOTY3My00MTJkLWIzNDgtNTBmYzRkNTU3ZDA4
LzEvXzFiWU5fNGxUNmt1SHp3dmhocWg1SVZTRjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQVcMA0G
CSqGSIb3DQEBCwUAA4IBAQCHAbCR1dgBluJ7fFPgcNFoiYNwGq1rx5xA6rLPRveY
YHqtCZq9tYtqPSYih9UDx6xx13T6bAI0KR6t6IckqvtgPGKKg0MRGTVP8BX2IBsO
3p+ro+khTbvPN9MfGcDu6srzfyx+1b8Zy2GszOuTbOoEH0jEzvQ8M40SxqtaatZ3
S+ejRWDNQkuvtvzgHKrLdpMPT9lDWw1Io56la2ihgMHvwWAKm17PPueg+bG3I512
f0oTYUIYhIXXvCaukJrELDkgz6TTK9irSXIQT3jNBLDe1F18R+SHOOSvV2gULKfH
G3LfUqjWJ6NfnyASemIutgXVeCJbzDNYratbw9dH4Nev
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:14:50 2026 by rpki-client