This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/_Q4Z6jbF8NYTsaR27vIk58vSUlI.roa
File:                     _Q4Z6jbF8NYTsaR27vIk58vSUlI.roa (raw, json)
Hash identifier:          7qWyZfAO4daLpycwI/J3xaTZkHMp77aXgml30PjFR4w=
Subject key identifier:   FD:0E:19:EA:36:C5:F0:D6:13:B1:A4:76:EE:F2:24:E7:CB:D2:52:52
Certificate issuer:       /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial:       019B7C8088B5D182BFBAA265FB3C9DD29114
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/_Q4Z6jbF8NYTsaR27vIk58vSUlI.roa
Signing time:             Fri 02 Jan 2026 02:19:16 +0000
ROA not before:           Fri 02 Jan 2026 02:19:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210298
IP address blocks:        185.44.200.0/22 maxlen: 22
                          185.44.200.0/23 maxlen: 23
                          185.44.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:88:b5:d1:82:bf:ba:a2:65:fb:3c:9d:d2:91:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
        Validity
            Not Before: Jan  2 02:19:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fd0e19ea36c5f0d613b1a476eef224e7cbd25252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c5:43:b3:1d:a0:e7:62:07:ca:ad:be:4e:b6:
                    22:9a:b0:9e:e0:24:4a:86:34:06:94:d5:ae:49:d3:
                    ac:7f:34:65:32:83:e4:78:fa:0f:c1:a5:bd:63:07:
                    e3:4f:e7:62:6f:10:2b:76:1f:e9:ca:c9:54:c1:92:
                    76:5f:69:c0:6b:d1:2d:9a:4a:47:85:6d:1a:a2:fc:
                    cc:9b:8f:4d:2d:73:56:45:59:00:2c:eb:db:10:4d:
                    ea:cc:1d:e5:c7:14:f4:47:de:d3:0e:b5:80:e1:68:
                    8d:d5:c2:d4:a3:6c:7f:3e:ba:aa:ba:64:a4:fb:fc:
                    99:44:91:c0:52:b8:91:89:12:cf:9c:35:23:19:07:
                    ef:64:86:9f:95:88:b7:66:70:df:bc:50:75:3a:bb:
                    35:d2:dd:5a:6a:67:06:2d:11:93:29:c4:bc:f8:01:
                    24:29:bb:0b:88:3b:69:20:11:22:ae:be:af:eb:43:
                    16:3b:8f:fd:64:24:ab:f7:08:6f:21:12:90:c1:dd:
                    40:67:1e:10:f3:b7:19:76:27:ca:76:9e:4f:03:95:
                    2c:1d:ba:5c:44:12:70:ba:c2:c4:1c:b5:8d:3e:e0:
                    3a:a1:24:b1:c7:b4:63:ab:b1:e0:ed:71:30:a5:31:
                    24:18:e3:c8:98:8b:e5:c5:17:e8:01:68:ec:ec:b1:
                    c1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0E:19:EA:36:C5:F0:D6:13:B1:A4:76:EE:F2:24:E7:CB:D2:52:52
            X509v3 Authority Key Identifier:
                keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/_Q4Z6jbF8NYTsaR27vIk58vSUlI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:c2:b7:6b:9f:21:6b:40:ef:ca:9e:ca:68:4b:af:db:8c:17:
         d4:87:5d:9a:22:98:7a:9a:72:25:92:33:8a:59:bb:5a:35:66:
         00:fa:9a:59:7c:af:eb:e5:f4:79:ea:9d:ed:00:89:c7:a3:f9:
         64:f8:ad:51:b9:2e:d2:84:14:4c:46:e1:98:e1:d5:ce:44:4e:
         3a:0d:de:c9:6b:7b:48:8c:00:04:b8:38:20:a6:10:68:dd:dc:
         d5:49:54:98:3b:30:38:72:09:90:c7:af:2a:aa:cc:8d:78:6b:
         37:5c:9e:f7:45:82:8c:a3:fe:e2:cb:ec:46:20:03:06:34:fb:
         06:1d:3c:00:9c:5b:a9:d7:98:c2:42:5e:18:6f:e1:f8:65:c4:
         09:36:96:15:6b:12:66:e7:bc:51:06:c6:b7:8f:9f:7c:31:7c:
         df:79:6b:f6:d2:cd:ab:cb:90:b9:69:3f:4f:8e:9e:e2:f6:2d:
         f6:02:4b:9f:43:9b:74:14:ae:70:94:9b:f5:50:f3:98:a2:9b:
         ec:ad:85:d4:88:1d:f1:1e:8a:48:e8:dd:94:b0:a1:e2:ec:63:
         3f:9b:89:bf:dc:d3:b9:28:2b:e8:bb:e2:e7:bd:f5:96:56:ab:
         c8:fd:ed:b8:61:59:fd:a6:3f:5c:a4:21:68:2d:c5:49:fa:56:
         d7:b4:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:52:40 2026 by rpki-client