This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/p1kohFb8KaXP2aXevlAW3obI0Mk.roa
File:                     p1kohFb8KaXP2aXevlAW3obI0Mk.roa (raw, json)
Hash identifier:          MKXlqSCkYNLylyaZtd9Jo14Ge5qgIHgpKhvpsO+gzd4=
Subject key identifier:   A7:59:28:84:56:FC:29:A5:CF:D9:A5:DE:BE:50:16:DE:86:C8:D0:C9
Certificate issuer:       /CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
Certificate serial:       019B7CEE0EBEF82DDAC0FC11F258BCF53DEB
Authority key identifier: E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/p1kohFb8KaXP2aXevlAW3obI0Mk.roa
Signing time:             Fri 02 Jan 2026 04:18:54 +0000
ROA not before:           Fri 02 Jan 2026 04:18:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205262
IP address blocks:        185.246.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:0e:be:f8:2d:da:c0:fc:11:f2:58:bc:f5:3d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e858338dea6ae4ddbb24850a0707f43aa1794c3f
        Validity
            Not Before: Jan  2 04:18:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a759288456fc29a5cfd9a5debe5016de86c8d0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:92:7b:55:ca:84:f3:44:b8:09:c9:3a:ff:0d:
                    f2:67:aa:04:e2:9f:2b:53:eb:2d:b4:57:3c:9c:c9:
                    97:76:ce:47:b0:58:14:b7:1f:e1:37:20:13:76:08:
                    05:89:61:92:50:82:d8:6c:c7:eb:e6:9e:4f:e1:2a:
                    f3:be:85:d3:ca:3d:ef:37:d5:bd:45:1d:75:97:d4:
                    7f:bd:42:1e:dc:10:82:8c:f3:7f:10:64:89:d0:ce:
                    dc:5b:8b:89:75:b1:f0:00:98:98:2a:39:27:47:9d:
                    44:e6:5a:00:0a:1d:e5:2d:a6:2b:5e:e3:33:b3:37:
                    c0:c3:8b:8a:32:42:8a:a0:9c:07:f8:d1:db:81:d8:
                    68:54:39:75:9c:46:c6:d5:69:e7:07:9d:d9:26:7d:
                    93:cf:23:b9:30:73:4e:6f:26:57:ef:df:15:d5:b3:
                    3c:4a:3d:00:8e:ac:e1:d3:4c:1e:e3:ed:a9:70:e2:
                    5f:0c:33:d4:71:16:84:7a:10:a8:44:54:4e:6e:f5:
                    65:b6:d8:fb:6f:9b:0e:18:a4:49:6c:68:34:cf:cf:
                    41:b7:56:6a:4b:1f:7c:36:67:cc:ca:37:3f:8a:6d:
                    b1:a8:0a:0f:39:80:a0:5e:65:03:25:62:1c:f5:07:
                    a9:56:38:1d:30:0f:e1:68:ff:3f:cc:f0:85:3a:17:
                    e0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:59:28:84:56:FC:29:A5:CF:D9:A5:DE:BE:50:16:DE:86:C8:D0:C9
            X509v3 Authority Key Identifier:
                keyid:E8:58:33:8D:EA:6A:E4:DD:BB:24:85:0A:07:07:F4:3A:A1:79:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Fgzjepq5N27JIUKBwf0OqF5TD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/p1kohFb8KaXP2aXevlAW3obI0Mk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/376662-87eb-4c97-9373-a1dce6ad150c/1/6Fgzjepq5N27JIUKBwf0OqF5TD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.246.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:1c:98:e1:00:dd:ed:0f:7d:16:92:e4:d3:c6:21:27:e7:00:
         0e:cd:1c:dd:6d:4c:39:85:b2:35:14:79:89:7d:32:f7:44:34:
         6c:9f:ff:6a:b6:2c:62:e6:6c:10:bd:13:5f:cf:91:f8:7e:ba:
         2e:0f:f1:4f:f0:b4:9a:2a:9d:e9:45:33:35:a9:2c:40:5e:6d:
         14:12:2f:e6:45:c0:50:d4:04:7e:d4:5e:04:3d:1f:41:d2:e7:
         8d:f3:ed:e5:cb:58:2c:20:05:a2:ec:6c:e7:6a:76:3f:36:f0:
         ae:e7:19:1d:bb:94:d3:51:92:a9:3e:81:aa:ff:5b:69:6b:58:
         8a:b8:e2:a1:29:bc:f1:10:7c:f1:e1:36:16:6d:98:6f:6c:ed:
         3f:9d:3e:88:c5:dd:f4:10:66:b0:42:95:84:9a:f0:0f:93:f3:
         8d:9e:c1:d1:c4:b2:09:cc:f8:0b:47:a6:ab:c1:96:73:71:dc:
         04:f2:e7:14:55:94:8e:8e:dc:df:eb:44:86:c3:7a:32:7d:73:
         e0:e5:8b:09:4e:63:d0:2b:06:b8:3a:4d:18:41:64:b6:46:65:
         91:8d:d3:2a:71:f5:a0:64:d3:91:13:2e:9d:8b:86:56:bd:1b:
         43:9d:ba:b7:23:f1:78:d5:40:90:eb:a5:3a:b7:28:1e:9c:bc:
         64:6e:ed:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:31:58 2026 by rpki-client