This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/M2jHykXP5tshdup3cmW0BBbfpFc.roa
File:                     M2jHykXP5tshdup3cmW0BBbfpFc.roa (raw, json)
Hash identifier:          GerABurddckbNTOvcsAmSJXKIfhdD87hJkB99cOoWFw=
Subject key identifier:   33:68:C7:CA:45:CF:E6:DB:21:76:EA:77:72:65:B4:04:16:DF:A4:57
Certificate issuer:       /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial:       019B797E236830C3F664AFAD08717928183A
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/M2jHykXP5tshdup3cmW0BBbfpFc.roa
Signing time:             Thu 01 Jan 2026 12:17:48 +0000
ROA not before:           Thu 01 Jan 2026 12:17:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206596
IP address blocks:        185.181.180.0/22 maxlen: 22
                          185.181.180.0/23 maxlen: 23
                          185.181.180.0/24 maxlen: 24
                          185.181.180.0/25 maxlen: 25
                          185.181.180.128/25 maxlen: 25
                          185.181.181.0/24 maxlen: 24
                          185.181.182.0/23 maxlen: 23
                          185.181.182.0/24 maxlen: 24
                          185.181.183.0/24 maxlen: 24
                          2a06:1cc0::/48 maxlen: 48
                          2a06:1cc0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:23:68:30:c3:f6:64:af:ad:08:71:79:28:18:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
        Validity
            Not Before: Jan  1 12:17:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3368c7ca45cfe6db2176ea777265b40416dfa457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8a:96:36:24:db:14:87:38:91:a6:d0:f9:93:
                    b2:c4:23:a8:71:0a:2c:c4:39:97:23:6c:95:6d:83:
                    eb:b7:e0:16:fa:06:98:e6:95:cf:c1:0a:d7:92:d7:
                    9f:f3:1e:27:f2:d7:f3:a8:1e:ba:c5:d6:b2:68:62:
                    65:e0:e9:b3:41:b7:5e:85:6f:0a:1d:5d:e8:85:c4:
                    ea:3e:7d:67:e5:fe:d9:03:b8:05:75:1c:3c:c1:b9:
                    a3:93:4c:e7:a5:06:d6:7d:5a:03:46:08:6e:64:ca:
                    b4:5b:ac:1d:29:ab:18:f5:58:69:0e:53:29:43:1d:
                    96:12:d5:c9:4c:c7:8c:7d:de:11:c1:67:91:c3:81:
                    08:17:03:88:a3:92:0d:90:21:5a:7e:20:b8:97:60:
                    54:88:74:8b:1d:13:6c:44:07:65:f9:64:52:1b:db:
                    0a:b2:e7:2d:d6:8f:77:d8:2f:87:8a:8e:3e:c0:64:
                    67:a6:a2:9a:1e:3a:26:b2:06:91:9b:94:e6:2c:58:
                    0b:36:15:ec:8f:2b:01:4e:11:14:93:21:ee:f1:d7:
                    f8:ea:5a:8d:77:c1:a2:25:60:9c:0e:ae:7e:22:24:
                    64:39:33:62:c5:d3:e2:cc:06:40:36:af:37:2a:86:
                    d8:d2:b5:dd:e0:d5:14:d0:16:73:74:9c:43:21:c9:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:68:C7:CA:45:CF:E6:DB:21:76:EA:77:72:65:B4:04:16:DF:A4:57
            X509v3 Authority Key Identifier:
                keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/M2jHykXP5tshdup3cmW0BBbfpFc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.181.180.0/22
                IPv6:
                  2a06:1cc0::/47

    Signature Algorithm: sha256WithRSAEncryption
         73:e3:a9:2f:f9:64:66:5c:2f:ec:1f:88:2e:c5:25:38:75:c4:
         17:78:6f:59:60:0a:0a:06:e9:68:8f:a2:e3:bd:41:a4:76:90:
         70:d4:a9:7d:f1:81:78:a7:33:ff:9e:8a:28:a0:1e:d8:cd:f2:
         76:ad:1c:a8:e6:39:7a:b2:ef:3a:9a:07:83:ea:10:88:69:8e:
         60:91:d7:4b:07:78:e1:93:ae:dd:c4:dd:d0:fd:ca:17:ef:33:
         22:f6:20:42:b7:53:d5:9c:66:c0:46:39:aa:61:a4:de:1d:cd:
         37:9e:d8:a7:96:9e:4c:8a:68:c5:2e:47:f2:7e:a6:a8:e5:9e:
         dc:ef:d6:56:68:54:fc:f1:55:d5:cf:b3:4a:54:49:01:a6:1a:
         fa:27:f4:fb:70:76:f1:59:01:e3:d3:7d:49:99:4b:29:59:90:
         4a:b4:1b:24:5e:91:97:70:ff:28:61:ac:99:44:a0:61:ab:bd:
         e3:26:6c:75:68:fa:48:a8:a5:f1:a2:82:db:12:d1:4b:d2:a5:
         85:6a:47:b5:1c:49:7f:da:7d:3e:bd:75:53:b6:8d:d4:e2:c1:
         c8:27:72:25:cd:a4:06:bb:2b:ad:1e:57:7a:a5:05:87:45:da:
         d8:76:21:8c:cd:ed:f5:57:30:98:29:9b:f4:3d:17:92:1f:a4:
         8a:91:d3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:05:58 2026 by rpki-client