This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/Ine_1lLdl47bEMn6aiw9Axcdsgo.roa
File:                     Ine_1lLdl47bEMn6aiw9Axcdsgo.roa (raw, json)
Hash identifier:          S/r8lpXeW/d857boj4AgP81lqUx6Xba1Zs9uDln2Uuk=
Subject key identifier:   22:77:BF:D6:52:DD:97:8E:DB:10:C9:FA:6A:2C:3D:03:17:1D:B2:0A
Certificate issuer:       /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial:       019B7CEDE5F10FB7D21961A51D9EC0FA0132
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/Ine_1lLdl47bEMn6aiw9Axcdsgo.roa
Signing time:             Fri 02 Jan 2026 04:18:44 +0000
ROA not before:           Fri 02 Jan 2026 04:18:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203735
IP address blocks:        185.239.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:e5:f1:0f:b7:d2:19:61:a5:1d:9e:c0:fa:01:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
        Validity
            Not Before: Jan  2 04:18:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2277bfd652dd978edb10c9fa6a2c3d03171db20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e7:58:44:57:21:d7:51:b7:51:03:6b:13:5c:
                    d2:de:39:5e:27:b3:4e:f0:d9:89:87:24:1f:d8:1a:
                    d9:6f:0f:f9:f5:81:32:ae:64:dd:a1:33:4a:71:2c:
                    12:27:bc:cb:54:f1:52:96:6b:b1:7f:c0:ce:b2:30:
                    c5:b8:4c:08:79:59:15:0d:45:35:e0:4d:65:ef:07:
                    9d:0b:2d:21:8d:78:d2:97:e9:61:a8:0a:a6:04:28:
                    e3:8c:95:e7:5a:d4:5e:3f:4b:cc:3e:41:5e:5e:c9:
                    90:00:f2:0d:c7:42:5d:6d:39:b4:aa:2f:21:a3:5c:
                    31:59:20:12:5e:d8:d0:f3:76:c3:bb:eb:85:67:31:
                    ac:ae:3f:6f:f1:0f:2c:48:67:6d:02:86:1c:0c:9c:
                    7b:80:4f:62:65:a3:80:a1:a7:6a:a0:19:75:8a:63:
                    cd:19:18:71:7d:dd:c5:3b:f4:d0:0e:4b:d0:ea:20:
                    a5:b4:26:fe:66:8d:66:fc:ca:d6:a5:03:d8:b0:c2:
                    43:4f:68:ad:cf:1c:e3:64:a2:19:df:b5:2c:f3:3d:
                    1f:a5:1f:3c:e1:3d:87:db:cb:05:c7:b2:12:cb:e3:
                    c4:c7:08:94:fb:33:d1:30:7b:4f:a6:58:d4:66:c9:
                    a6:a8:85:47:35:0c:d5:04:a6:9a:08:45:b5:d1:3a:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:77:BF:D6:52:DD:97:8E:DB:10:C9:FA:6A:2C:3D:03:17:1D:B2:0A
            X509v3 Authority Key Identifier:
                keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/Ine_1lLdl47bEMn6aiw9Axcdsgo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.239.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:65:e0:ff:1f:84:34:03:40:58:de:b1:54:9a:e9:a4:7b:e5:
         cd:a3:99:02:a4:ba:d2:ed:b8:6e:00:29:5d:2c:64:14:cc:86:
         ac:4d:66:ae:d5:a6:00:3e:e4:9f:f8:02:33:58:12:17:e2:a1:
         65:e7:12:3c:d2:b7:57:a7:6b:d2:84:f3:89:38:cd:e2:f7:8f:
         f4:5e:2a:9f:4b:0e:7f:be:da:f9:4f:16:87:d6:38:48:4c:e9:
         84:bd:8a:72:00:ac:3a:e4:62:2c:92:1f:06:39:51:55:0d:19:
         17:1d:26:5a:1d:11:af:80:b9:51:49:e8:d3:5e:a5:86:a8:a8:
         38:33:01:f3:ed:1b:54:8f:ca:45:8b:00:95:cb:c6:fb:8c:0d:
         47:d0:dd:4b:46:16:02:59:9e:fe:75:60:0b:40:23:76:43:a0:
         f6:f7:e5:f7:5a:50:86:79:25:60:00:e7:c5:47:a2:77:5d:04:
         79:f9:63:ad:6d:ca:1a:53:59:56:8e:e2:32:52:07:5a:ba:d4:
         69:87:4b:90:f1:8d:1e:9b:ec:61:fd:ee:d6:5e:2d:fe:b3:9f:
         9a:e4:78:df:78:85:3f:a1:f3:02:41:04:72:f3:0e:59:e3:bf:
         fe:28:87:3d:58:e5:b2:ca:2a:43:b3:10:e7:f4:78:57:2b:cc:
         0c:28:10:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt87eXxD7fSGWGlHZ7A+gEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Nzg1NzczZGYzMTNiOTE3MTFiZjZiYzViMTQ5ZWNjMjQ2
YjllODkwHhcNMjYwMTAyMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjc3YmZkNjUyZGQ5NzhlZGIxMGM5ZmE2YTJjM2QwMzE3MWRiMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+dYRFch11G3UQNrE1zS3jleJ7NO
8NmJhyQf2BrZbw/59YEyrmTdoTNKcSwSJ7zLVPFSlmuxf8DOsjDFuEwIeVkVDUU1
4E1l7wedCy0hjXjSl+lhqAqmBCjjjJXnWtReP0vMPkFeXsmQAPINx0JdbTm0qi8h
o1wxWSASXtjQ83bDu+uFZzGsrj9v8Q8sSGdtAoYcDJx7gE9iZaOAoadqoBl1imPN
GRhxfd3FO/TQDkvQ6iCltCb+Zo1m/MrWpQPYsMJDT2itzxzjZKIZ37Us8z0fpR88
4T2H28sFx7ISy+PExwiU+zPRMHtPpljUZsmmqIVHNQzVBKaaCEW10Trx8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCJ3v9ZS3ZeO2xDJ+mosPQMXHbIKMB8GA1UdIwQY
MBaAFKZ4V3PfMTuRcRv2vFsUnswka56JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEt
ZDc1ODY5YzBjNzFlLzEvSW5lXzFsTGRsNDdiRU1uNmFpdzlBeGNkc2dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hZTkyMTEtYzUyZC00ODBkLWE1OTEtZDc1ODY5YzBjNzFl
LzEvcG5oWGM5OHhPNUZ4R19hOFd4U2V6Q1Jybm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue+zMA0G
CSqGSIb3DQEBCwUAA4IBAQCuZeD/H4Q0A0BY3rFUmumke+XNo5kCpLrS7bhuACld
LGQUzIasTWau1aYAPuSf+AIzWBIX4qFl5xI80rdXp2vShPOJOM3i94/0XiqfSw5/
vtr5TxaH1jhITOmEvYpyAKw65GIskh8GOVFVDRkXHSZaHRGvgLlRSejTXqWGqKg4
MwHz7RtUj8pFiwCVy8b7jA1H0N1LRhYCWZ7+dWALQCN2Q6D29+X3WlCGeSVgAOfF
R6J3XQR5+WOtbcoaU1lWjuIyUgdautRph0uQ8Y0em+xh/e7WXi3+s5+a5HjfeIU/
ofMCQQRy8w5Z47/+KIc9WOWyyipDsxDn9HhXK8wMKBAm
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:22:16 2026 by rpki-client