This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/RnV5hShXIae0lSnUpt8VMyIMXCE.roa
File:                     RnV5hShXIae0lSnUpt8VMyIMXCE.roa (raw, json)
Hash identifier:          pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=
Subject key identifier:   46:75:79:85:28:57:21:A7:B4:95:29:D4:A6:DF:15:33:22:0C:5C:21
Certificate issuer:       /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial:       019B7A5B6E78B46479658622E88B624670F8
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/RnV5hShXIae0lSnUpt8VMyIMXCE.roa
Signing time:             Thu 01 Jan 2026 16:19:30 +0000
ROA not before:           Thu 01 Jan 2026 16:19:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39176
IP address blocks:        185.86.52.0/23 maxlen: 23
                          185.86.52.0/24 maxlen: 24
                          185.86.53.0/24 maxlen: 24
                          185.86.54.0/24 maxlen: 24
                          185.86.55.0/24 maxlen: 24
                          2a05:b500:52::/48 maxlen: 48
                          2a05:b500:53::/48 maxlen: 48
                          2a05:b500:54::/48 maxlen: 48
                          2a05:b500:55::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:6e:78:b4:64:79:65:86:22:e8:8b:62:46:70:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
        Validity
            Not Before: Jan  1 16:19:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=46757985285721a7b49529d4a6df1533220c5c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:81:8f:ef:2f:a3:06:f9:63:79:57:e4:da:
                    cb:fb:1b:6f:dd:6c:83:c8:a7:1d:b5:be:3a:f1:3f:
                    88:1d:77:c4:44:d3:78:af:e4:4f:31:54:8b:df:19:
                    01:ba:6f:d4:35:dd:52:1e:a9:51:98:6e:27:75:19:
                    1f:cd:30:3c:06:a1:5f:c7:38:9d:52:98:c3:85:8c:
                    00:fb:ef:cb:a2:6a:1d:3b:c3:cd:59:42:2e:37:81:
                    72:ab:1d:90:74:fe:71:32:66:03:3b:d5:f1:ec:4e:
                    98:76:24:f4:ae:55:75:dd:43:32:71:96:ec:d9:7d:
                    21:2d:2e:04:ad:a3:73:3f:83:01:a2:7f:79:93:16:
                    1f:cc:1a:77:cc:16:4d:28:a0:7d:05:e1:2c:dd:1c:
                    ea:5a:40:88:7f:a1:06:7f:2e:18:06:46:43:e8:8a:
                    e7:7c:e5:33:ac:3b:e2:ec:19:a6:92:da:e2:c7:fb:
                    ab:02:46:09:61:d1:2b:5a:b5:68:54:e6:ac:5c:42:
                    49:b7:af:3f:f6:8b:0b:26:3f:61:41:26:f9:d9:a4:
                    3f:a9:23:02:db:b4:71:36:60:4f:a9:56:20:c3:22:
                    20:97:4d:67:8c:b8:f6:c7:1d:ec:de:74:1f:3a:b0:
                    7e:37:03:3f:a3:39:d1:8f:1d:f9:96:0a:48:e1:6e:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:75:79:85:28:57:21:A7:B4:95:29:D4:A6:DF:15:33:22:0C:5C:21
            X509v3 Authority Key Identifier:
                keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/RnV5hShXIae0lSnUpt8VMyIMXCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.86.52.0/22
                IPv6:
                  2a05:b500:52::-2a05:b500:55:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         b0:bb:7d:ec:a1:8f:19:e7:50:e3:f0:f6:bd:ae:a1:61:05:91:
         62:64:50:92:55:e3:5f:c0:62:b2:76:33:d6:89:55:7d:dd:aa:
         2e:75:87:45:b0:1d:58:e4:4d:21:24:1a:b9:5a:e5:1d:d9:97:
         0b:50:bd:b5:9d:e0:08:82:b1:fd:45:7f:89:ed:0c:f2:a8:ea:
         0e:bd:e2:94:a4:69:3e:5d:9c:7a:ab:6d:90:c2:b8:96:7b:f6:
         12:0d:26:cc:46:2a:8a:e1:8c:3f:0d:5f:4f:c3:ac:91:ca:b3:
         92:ec:08:0b:d1:60:b1:c6:41:be:04:cd:c3:d0:d1:f3:ff:f6:
         f4:92:53:5e:e7:08:bd:88:1d:23:03:7a:af:94:fc:42:39:af:
         8b:9a:b9:25:13:74:10:ea:e1:4a:ae:c5:8e:d3:59:b2:a3:8e:
         d2:f1:32:8e:f4:0a:e4:47:81:56:be:11:68:33:53:e8:ac:d5:
         2d:b5:22:3a:b6:a6:aa:56:5f:1e:2f:04:6c:4e:d0:30:e2:90:
         1f:3f:cd:60:8f:ea:c1:37:eb:98:76:e1:e9:3c:04:0f:a0:68:
         69:de:ce:59:9c:80:4d:a0:75:ee:9f:24:59:93:9a:99:b0:03:
         b8:02:67:ef:02:c2:49:3f:fe:69:39:c5:e2:75:2d:73:c8:b5:
         d0:46:2a:13
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZt6W254tGR5ZYYi6ItiRnD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzMyYjk4NWY4ZjYzZmY4YWU4ZWFjN2M3MDgzMmIzMGNl
ZTgwYWQwHhcNMjYwMTAxMTYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Njc1Nzk4NTI4NTcyMWE3YjQ5NTI5ZDRhNmRmMTUzMzIyMGM1YzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqKBj+8vowb5Y3lX5NrL+xtv3WyD
yKcdtb468T+IHXfERNN4r+RPMVSL3xkBum/UNd1SHqlRmG4ndRkfzTA8BqFfxzid
UpjDhYwA++/LomodO8PNWUIuN4Fyqx2QdP5xMmYDO9Xx7E6YdiT0rlV13UMycZbs
2X0hLS4EraNzP4MBon95kxYfzBp3zBZNKKB9BeEs3RzqWkCIf6EGfy4YBkZD6Irn
fOUzrDvi7Bmmktrix/urAkYJYdErWrVoVOasXEJJt68/9osLJj9hQSb52aQ/qSMC
27RxNmBPqVYgwyIgl01njLj2xx3s3nQfOrB+NwM/oznRjx35lgpI4W60aQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEZ1eYUoVyGntJUp1KbfFTMiDFwhMB8GA1UdIwQY
MBaAFARzK5hfj2P/iujqx8cIMrMM7oCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDct
YWRhMjcwODI1MjE4LzEvUm5WNWhTaFhJYWUwbFNuVXB0OFZNeUlNWENFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDctYWRhMjcwODI1MjE4
LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQCuVY0MBoE
AgACMBQwEgMHASoFtQAAUgMHASoFtQAAVDANBgkqhkiG9w0BAQsFAAOCAQEAsLt9
7KGPGedQ4/D2va6hYQWRYmRQklXjX8BisnYz1olVfd2qLnWHRbAdWORNISQauVrl
HdmXC1C9tZ3gCIKx/UV/ie0M8qjqDr3ilKRpPl2ceqttkMK4lnv2Eg0mzEYqiuGM
Pw1fT8OskcqzkuwIC9FgscZBvgTNw9DR8//29JJTXucIvYgdIwN6r5T8Qjmvi5q5
JRN0EOrhSq7FjtNZsqOO0vEyjvQK5EeBVr4RaDNT6KzVLbUiOramqlZfHi8EbE7Q
MOKQHz/NYI/qwTfrmHbh6TwED6Boad7OWZyATaB17p8kWZOambADuAJn7wLCST/+
aTnF4nUtc8i10EYqEw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:04:40 2026 by rpki-client