This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/8T_L6iEGijgsOFAP__TyTkzacD4.roa
File:                     8T_L6iEGijgsOFAP__TyTkzacD4.roa (raw, json)
Hash identifier:          lT4gyxVqqODirySdjQ4sbRLQmQNb+GEiL/V4cJzYViM=
Subject key identifier:   F1:3F:CB:EA:21:06:8A:38:2C:38:50:0F:FF:F4:F2:4E:4C:DA:70:3E
Certificate issuer:       /CN=1822551876a3a626599f467c7ae709b81c14df49
Certificate serial:       019B7CEDD2F35B0A5C6E4CE456E955337CF8
Authority key identifier: 18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/8T_L6iEGijgsOFAP__TyTkzacD4.roa
Signing time:             Fri 02 Jan 2026 04:18:39 +0000
ROA not before:           Fri 02 Jan 2026 04:18:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     13213
IP address blocks:        185.225.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ed:d2:f3:5b:0a:5c:6e:4c:e4:56:e9:55:33:7c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822551876a3a626599f467c7ae709b81c14df49
        Validity
            Not Before: Jan  2 04:18:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f13fcbea21068a382c38500ffff4f24e4cda703e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:5d:aa:89:c3:0e:82:ec:5c:67:7f:f1:af:
                    c3:9b:3e:1b:d0:d0:99:89:ac:4e:22:59:54:95:2d:
                    5c:c1:b6:be:54:73:01:66:a1:c0:8e:c2:0c:65:a1:
                    50:6a:07:ed:9f:1e:8f:cb:c9:59:7d:d4:e2:71:69:
                    da:8a:a0:b0:42:dc:93:f9:7f:a0:18:cc:5e:3f:88:
                    45:4f:41:77:e6:85:5d:3c:5c:81:09:8c:f1:b4:d9:
                    56:92:c6:37:2b:34:ec:30:7b:70:66:36:5b:64:7e:
                    35:81:b5:8a:ad:d6:c4:91:82:2a:ec:3b:72:cf:28:
                    36:f2:da:58:7d:fe:20:2e:01:f2:9b:8c:5e:96:63:
                    dc:04:0a:83:63:7a:08:07:10:fb:06:9e:61:6c:ec:
                    8b:60:1c:cd:0f:70:a5:d5:0c:6d:2d:07:cb:10:44:
                    04:b8:20:8f:80:df:95:46:ab:f3:c9:ef:b5:a9:02:
                    7a:10:92:13:2b:ed:e2:fc:16:16:bf:70:2f:75:b1:
                    38:69:10:12:d4:d1:31:c8:58:0d:e3:38:2e:3e:42:
                    d0:56:8b:c6:e1:39:98:71:89:cc:4a:cc:d3:1d:8c:
                    89:ba:95:2e:72:68:83:5b:f9:97:3c:bc:6d:e1:6d:
                    91:52:da:71:ff:75:2f:fb:a7:cc:07:8e:e2:40:47:
                    94:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3F:CB:EA:21:06:8A:38:2C:38:50:0F:FF:F4:F2:4E:4C:DA:70:3E
            X509v3 Authority Key Identifier:
                keyid:18:22:55:18:76:A3:A6:26:59:9F:46:7C:7A:E7:09:B8:1C:14:DF:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJVGHajpiZZn0Z8eucJuBwU30k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/8T_L6iEGijgsOFAP__TyTkzacD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc6694-1417-49fe-b4c5-412b4767ac45/1/GCJVGHajpiZZn0Z8eucJuBwU30k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:51:c7:de:fc:d0:ac:f0:da:08:85:4b:c8:e9:27:4f:30:ce:
         cf:b3:43:1d:ab:be:1d:65:a3:56:94:3b:4c:d2:5a:d1:c0:e2:
         2f:b2:b1:e6:d6:36:a3:e2:c0:8e:cb:62:6b:9d:c4:1d:6a:87:
         cb:cf:c7:48:88:32:f7:91:91:59:bd:8a:49:c5:eb:e4:1b:70:
         1b:f9:c3:ed:29:72:81:ba:57:8f:23:eb:f5:3d:8f:e8:bf:cb:
         5d:17:b9:52:b3:78:16:cb:56:ad:cd:bd:19:ed:11:e2:d9:39:
         df:ec:a0:c9:64:4e:51:ad:12:32:5d:02:de:c0:2c:e7:b8:4a:
         5c:94:46:4a:5b:dd:a2:e7:96:49:e4:32:00:e5:c9:fa:f3:0b:
         6c:f4:ae:54:1a:d8:88:d4:a3:c7:fe:d5:49:f0:4b:e1:b9:f4:
         ac:f9:d3:d6:c6:6b:56:cd:f6:45:49:6e:6c:37:e8:99:c2:ae:
         8d:a4:f3:00:9b:b0:64:14:34:53:a7:c1:bb:7f:6f:cf:33:9c:
         f0:56:a3:d2:7c:4a:76:0e:60:48:62:04:1f:94:b0:fa:5c:84:
         f6:a5:56:a8:a8:93:5d:3d:66:d9:ce:8b:c6:ec:a1:ce:77:fe:
         de:1f:94:44:21:43:a1:c4:76:ee:b0:d8:f2:e2:ce:7e:67:ee:
         48:09:9e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:40:22 2026 by rpki-client