This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/FaUuFS6TDX1zSostpasPm7Qvifc.roa
File:                     FaUuFS6TDX1zSostpasPm7Qvifc.roa (raw, json)
Hash identifier:          AQyo3IRzMcTTKX0sekpJskKYPPvY2FFoOC49QHNt62o=
Subject key identifier:   15:A5:2E:15:2E:93:0D:7D:73:4A:8B:2D:A5:AB:0F:9B:B4:2F:89:F7
Certificate issuer:       /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial:       019B7C13200205448C232CDDC0B83C60DE6A
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/FaUuFS6TDX1zSostpasPm7Qvifc.roa
Signing time:             Fri 02 Jan 2026 00:19:46 +0000
ROA not before:           Fri 02 Jan 2026 00:19:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213686
IP address blocks:        185.184.172.0/22 maxlen: 22
                          185.184.172.0/23 maxlen: 23
                          185.184.172.0/24 maxlen: 24
                          185.184.173.0/24 maxlen: 24
                          185.184.174.0/23 maxlen: 23
                          185.184.174.0/24 maxlen: 24
                          185.184.175.0/24 maxlen: 24
                          185.191.252.0/22 maxlen: 22
                          185.191.252.0/23 maxlen: 23
                          185.191.252.0/24 maxlen: 24
                          185.191.253.0/24 maxlen: 24
                          185.191.254.0/23 maxlen: 23
                          185.191.254.0/24 maxlen: 24
                          185.191.255.0/24 maxlen: 24
                          185.236.244.0/22 maxlen: 22
                          185.236.244.0/23 maxlen: 23
                          185.236.244.0/24 maxlen: 24
                          185.236.245.0/24 maxlen: 24
                          185.236.246.0/23 maxlen: 23
                          185.236.246.0/24 maxlen: 24
                          185.236.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:20:02:05:44:8c:23:2c:dd:c0:b8:3c:60:de:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
        Validity
            Not Before: Jan  2 00:19:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=15a52e152e930d7d734a8b2da5ab0f9bb42f89f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c5:2a:97:fb:c9:33:14:a4:e7:92:7e:22:64:
                    1e:e4:6b:a9:be:06:c3:e3:3d:a3:67:48:7e:0b:78:
                    f5:47:3a:fd:e2:84:d6:ca:2c:3a:74:b0:ec:a2:c1:
                    ca:84:0c:d5:0b:e7:25:c2:90:1d:08:e4:e2:b1:dd:
                    f5:4b:8b:a9:97:03:5d:8b:df:cb:d0:e2:02:65:36:
                    f9:09:c8:fc:14:8d:40:05:5d:c7:05:76:89:cb:d6:
                    e7:bf:5d:ee:a8:ea:6d:28:e5:fc:df:7a:84:ea:41:
                    1b:13:3d:ef:c6:c5:69:1f:ce:ad:60:49:3d:46:6b:
                    07:8e:24:4d:8b:2f:fd:a9:e6:06:50:30:c5:e5:4f:
                    39:59:99:8a:1e:54:c7:b2:c2:61:10:8f:11:8e:f7:
                    7e:b3:0b:61:f8:96:35:1e:fd:d7:61:ad:9c:40:c3:
                    b0:88:cc:db:38:3d:2a:b6:da:54:32:0e:e4:e7:6f:
                    e0:d0:54:4d:4f:d2:f8:5a:ed:1e:cc:9d:f3:87:68:
                    42:ba:b5:2c:53:8a:9f:db:c8:1d:83:53:24:fd:08:
                    df:37:16:0c:b1:53:ee:fd:23:e4:51:62:15:6f:2f:
                    d0:03:b6:28:ab:0b:3b:0e:63:46:c4:52:28:0e:06:
                    c4:ed:b7:64:0a:c9:77:a6:db:33:2b:6b:8c:f4:6e:
                    30:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A5:2E:15:2E:93:0D:7D:73:4A:8B:2D:A5:AB:0F:9B:B4:2F:89:F7
            X509v3 Authority Key Identifier:
                keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/FaUuFS6TDX1zSostpasPm7Qvifc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.172.0/22
                  185.191.252.0/22
                  185.236.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:23:f0:bb:e7:c8:84:39:d3:22:e8:34:3b:05:cb:f4:58:a4:
         99:a6:56:45:7e:2a:64:b4:c9:cc:bc:79:c6:9d:5c:11:be:89:
         08:2c:d2:a1:3e:83:13:88:57:2a:28:28:00:ad:00:5e:b9:2a:
         aa:eb:d0:38:08:b0:1a:2c:5e:82:4b:af:84:ba:9e:c5:65:ab:
         56:5c:68:53:bf:b3:ff:10:a7:a4:5e:66:97:a0:b6:38:f2:9f:
         5a:b2:ee:b4:f7:bf:79:12:97:3a:f4:4c:be:4c:d9:dc:11:88:
         44:d8:00:fc:9b:37:5d:89:de:ed:4e:95:9e:8a:d2:63:6c:9f:
         1f:d0:aa:62:61:62:f7:4b:de:54:6b:2c:75:fe:64:86:2f:0b:
         0e:11:bd:ad:71:09:ea:29:99:25:d3:25:d6:5e:7e:3c:9e:11:
         ca:76:d7:b0:9d:5f:ef:55:1e:99:72:bf:ba:91:84:25:96:08:
         39:45:3c:39:e2:43:84:31:86:05:77:7b:43:ad:d8:c9:b1:25:
         f2:67:c1:49:2b:d3:46:f6:82:ab:23:c6:d4:0a:25:f5:5c:f4:
         71:a9:32:d7:7a:29:19:53:39:02:e1:8b:a5:99:de:31:b1:c6:
         03:b1:b0:87:3f:9e:d7:4c:7f:57:04:7e:33:ab:20:bf:df:60:
         af:d8:3d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:33:59 2026 by rpki-client