This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/85Rvc3_9ZASD2vobCL9t5-c1aU4.roa
File:                     85Rvc3_9ZASD2vobCL9t5-c1aU4.roa (raw, json)
Hash identifier:          vTKkBjgSvXm0Sbl7IC7WJ5hSm/4pkOxSRKg6DOoQUAQ=
Subject key identifier:   F3:94:6F:73:7F:FD:64:04:83:DA:FA:1B:08:BF:6D:E7:E7:35:69:4E
Certificate issuer:       /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial:       019B7E37DA36DF2B60FEAD47CC07D58D93AC
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/85Rvc3_9ZASD2vobCL9t5-c1aU4.roa
Signing time:             Fri 02 Jan 2026 10:19:08 +0000
ROA not before:           Fri 02 Jan 2026 10:19:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210392
IP address blocks:        95.38.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:da:36:df:2b:60:fe:ad:47:cc:07:d5:8d:93:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
        Validity
            Not Before: Jan  2 10:19:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f3946f737ffd640483dafa1b08bf6de7e735694e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a1:6b:cc:ca:2b:cc:79:07:8e:13:c4:61:ff:
                    6f:dc:73:cb:f8:23:8f:b8:6d:9a:50:58:d6:93:df:
                    bd:4a:25:3d:de:73:2d:df:e6:f4:57:4c:0d:55:5c:
                    81:e5:89:33:a7:d7:ec:17:b9:2a:72:97:dc:e5:1d:
                    e5:5e:0f:30:9c:e8:21:dd:cb:68:65:ab:42:63:5d:
                    32:71:b8:52:d9:61:10:56:3e:80:c2:e9:b8:2f:ec:
                    1f:d4:83:8c:47:3e:53:d7:c8:3c:ef:02:f9:c9:94:
                    83:a0:75:cf:30:fc:55:be:71:f1:df:87:4e:18:42:
                    c7:b3:88:66:fd:51:5b:b5:3a:ec:40:1b:16:d5:38:
                    6e:fd:fe:ca:aa:a4:2c:96:0d:63:e2:72:48:09:49:
                    6b:d9:73:12:7f:d3:bf:22:22:ec:c6:d4:06:12:bf:
                    ce:ab:a6:aa:55:55:aa:36:12:af:60:cf:0a:af:10:
                    be:7d:43:cf:49:8e:39:68:5a:c2:eb:cd:2e:c3:d8:
                    f5:25:29:7c:cc:73:c0:f8:be:9f:f9:fc:6c:12:12:
                    c3:b6:2d:37:0a:c1:49:63:19:01:d2:91:82:ee:99:
                    14:6f:17:47:14:e5:42:be:ec:f5:b1:8d:50:47:23:
                    c4:b8:8f:99:d6:08:1a:32:18:1a:e6:33:60:5b:b0:
                    d7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:94:6F:73:7F:FD:64:04:83:DA:FA:1B:08:BF:6D:E7:E7:35:69:4E
            X509v3 Authority Key Identifier:
                keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/85Rvc3_9ZASD2vobCL9t5-c1aU4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.38.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:d7:3f:1e:2e:33:67:e2:52:b8:71:0d:2d:f1:63:5b:b5:
         3b:ae:d8:a6:d0:93:a7:40:7f:dd:d8:c3:88:da:45:19:c5:76:
         ec:b1:0c:bc:75:21:f2:0d:d6:f6:f9:65:5f:a4:c9:3d:27:ac:
         ca:50:50:a8:83:bb:09:ec:a8:af:23:10:12:be:23:4d:41:43:
         9e:28:64:01:99:d9:1c:d2:b5:e3:33:f1:41:d8:4e:d9:36:74:
         f7:c6:3d:1c:a6:85:bd:f5:08:ff:fb:15:9e:cb:c5:e2:46:c3:
         6e:54:58:22:8b:93:de:1d:ea:80:39:e7:37:31:6b:f6:86:6a:
         0f:a6:b7:61:ce:d0:04:48:ce:6e:90:30:cb:85:4b:1b:c4:92:
         61:df:61:2f:28:77:2c:c9:8c:0d:6a:96:3e:25:2a:20:95:d6:
         9b:fc:fc:c3:a8:37:52:3f:c5:2a:1b:bc:47:32:7f:be:f6:47:
         fa:ec:aa:c4:59:d3:35:45:3e:04:7c:7b:a7:9d:d8:8e:ca:43:
         a8:17:c2:a2:a5:c1:51:7b:4e:cd:b2:02:1a:de:79:28:e9:ec:
         5a:07:bf:a2:19:f5:cc:fa:ee:86:47:d4:15:43:bc:d5:94:84:
         6a:d7:d4:90:ca:40:1c:64:99:96:fb:d3:b9:09:4d:9b:10:3c:
         39:00:e5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:48 2026 by rpki-client