This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/S82EbIGBPvrwBTr33L6baESNSh8.roa
File:                     S82EbIGBPvrwBTr33L6baESNSh8.roa (raw, json)
Hash identifier:          08DqMUNy9twM3/MtGJYse80+j+yhAmD8ZoaDNcqSBuA=
Subject key identifier:   4B:CD:84:6C:81:81:3E:FA:F0:05:3A:F7:DC:BE:9B:68:44:8D:4A:1F
Certificate issuer:       /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial:       019B78A2AF24E6EE1C8D4B373B8C84DADE27
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/S82EbIGBPvrwBTr33L6baESNSh8.roa
Signing time:             Thu 01 Jan 2026 08:18:06 +0000
ROA not before:           Thu 01 Jan 2026 08:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204004
IP address blocks:        92.246.80.0/24 maxlen: 24
                          92.246.81.0/24 maxlen: 24
                          185.117.44.0/22 maxlen: 22
                          185.117.44.0/24 maxlen: 24
                          185.117.45.0/24 maxlen: 24
                          185.117.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:af:24:e6:ee:1c:8d:4b:37:3b:8c:84:da:de:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
        Validity
            Not Before: Jan  1 08:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4bcd846c81813efaf0053af7dcbe9b68448d4a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:4e:c4:63:47:41:fb:af:00:d1:dd:32:9b:
                    b4:50:8d:66:c4:c7:ec:de:02:58:6b:b6:1f:88:03:
                    ac:5d:b3:b9:02:93:49:8b:0f:a8:ac:94:03:a4:83:
                    0b:02:e0:a4:80:c6:ab:90:f5:c0:78:e9:2a:23:aa:
                    d1:a3:bc:8e:ab:e6:fb:4e:2c:c5:6d:1e:d7:ef:17:
                    9e:bd:fe:66:fb:6b:81:29:d1:12:80:d5:ff:71:df:
                    8d:8e:e1:57:12:e1:78:41:8b:48:e2:e9:68:0b:92:
                    c3:c0:9f:05:7b:e1:f6:52:84:c4:9c:bf:2b:8b:44:
                    1a:ac:5a:0b:86:f5:05:ec:42:38:25:9f:e8:42:4e:
                    cb:9e:78:05:9a:7e:77:1d:05:1c:e5:f2:1b:43:86:
                    3d:e7:f8:d9:cf:da:60:7d:dd:ab:70:f0:3f:ab:76:
                    2a:94:dd:65:9b:b9:76:c1:d2:b4:40:34:8c:4f:9f:
                    ed:ab:b0:18:44:5a:53:07:a6:63:b8:a6:dd:f7:e8:
                    12:7d:a1:76:e5:4a:be:dd:3a:da:90:1c:ed:b4:d9:
                    05:ba:81:9c:57:34:35:e4:f0:c0:a5:90:02:db:f1:
                    d0:06:a7:9c:ca:f0:4a:9a:d1:62:4b:b8:6c:a2:d7:
                    d6:c5:09:3d:63:54:0d:8f:06:88:85:b6:f0:a3:68:
                    85:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CD:84:6C:81:81:3E:FA:F0:05:3A:F7:DC:BE:9B:68:44:8D:4A:1F
            X509v3 Authority Key Identifier:
                keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/S82EbIGBPvrwBTr33L6baESNSh8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.246.80.0/23
                  185.117.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:bb:a7:7f:ff:df:91:f6:0e:33:2f:83:cd:3b:cf:96:43:4a:
         7c:ae:f3:51:8a:66:14:f0:c3:b9:67:0f:94:d3:db:c9:ee:5f:
         92:4f:b7:39:3a:99:37:38:5e:ac:6a:b3:91:47:6e:a0:34:eb:
         32:c6:94:19:8c:de:e8:ff:46:1b:f1:bb:f0:6c:47:87:21:e0:
         b6:1f:0f:6d:b7:b9:aa:06:2a:d2:a6:8b:02:af:60:dc:67:cf:
         c8:8c:d2:40:2f:4f:60:c6:5d:66:0a:81:42:cb:e2:a5:f3:35:
         2d:1c:8f:aa:6b:26:68:d3:fa:84:55:b6:ac:0e:bd:9a:e8:6a:
         99:32:81:fc:4a:90:ce:28:05:cb:85:b8:6a:43:f9:0b:01:55:
         01:62:c0:77:9d:6e:fe:41:d3:0b:52:3a:bf:88:54:ed:09:1d:
         8f:65:f4:8d:41:b2:fd:a3:f0:dd:db:04:92:db:12:dc:e5:77:
         52:35:0d:97:e4:ac:2c:18:cf:94:c3:44:e8:fb:18:56:6f:6f:
         17:f4:20:29:eb:2e:e1:99:21:71:f5:dc:49:80:68:af:dd:d5:
         18:56:51:57:bc:0b:30:19:43:34:6c:d3:fd:ee:36:30:54:07:
         e5:4b:41:c1:c4:1f:af:55:1a:93:df:4e:d9:c1:f4:e8:80:af:
         ad:13:a8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:18:22 2026 by rpki-client