This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/vI0I4kP4iBS-MXXMKDhVF_XKf7Q.roa
File:                     vI0I4kP4iBS-MXXMKDhVF_XKf7Q.roa (raw, json)
Hash identifier:          VPn4BdBIJroCps/v1nH2+yo8aRlxWPoX7wGg/avedFw=
Subject key identifier:   BC:8D:08:E2:43:F8:88:14:BE:31:75:CC:28:38:55:17:F5:CA:7F:B4
Certificate issuer:       /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial:       019B7C805B414C80BAD1C504A2929E83D2FC
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/vI0I4kP4iBS-MXXMKDhVF_XKf7Q.roa
Signing time:             Fri 02 Jan 2026 02:19:05 +0000
ROA not before:           Fri 02 Jan 2026 02:19:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206108
IP address blocks:        185.170.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:5b:41:4c:80:ba:d1:c5:04:a2:92:9e:83:d2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
        Validity
            Not Before: Jan  2 02:19:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bc8d08e243f88814be3175cc28385517f5ca7fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:fa:0f:84:2f:e5:eb:96:29:89:88:c9:c9:
                    06:4c:c6:1f:bf:f9:1c:70:87:f2:92:a7:a2:83:04:
                    5c:41:e2:63:d4:34:14:49:5c:a0:59:b9:9c:54:29:
                    52:be:8a:15:66:3f:15:7d:e2:0b:f4:5d:51:47:95:
                    dc:eb:cc:db:3a:eb:c1:6d:e6:c1:07:23:1a:9b:39:
                    79:72:49:e8:54:3c:38:2d:45:ef:07:3d:46:36:8c:
                    a2:2f:65:2e:c3:b3:f5:07:60:7e:06:e5:ca:a9:90:
                    61:80:3a:b6:eb:05:54:d1:18:61:9c:ea:2c:53:11:
                    c5:c5:4c:88:fd:95:01:13:fe:b2:39:9a:dc:22:2f:
                    a9:2d:3a:d8:44:b9:45:7b:a1:dc:e5:13:18:a4:97:
                    20:56:1b:be:29:fe:08:9e:da:ed:36:2b:ac:64:f5:
                    2e:4f:e6:8f:b8:36:58:19:52:e6:15:da:d4:8d:d9:
                    78:cb:2a:7c:fd:19:f7:1b:8f:b9:09:00:82:af:15:
                    94:b0:5b:85:db:e1:66:5d:d2:62:24:b5:b9:f2:09:
                    39:d1:2e:15:0b:d9:12:17:89:88:18:8e:1d:6b:d4:
                    df:63:e7:5e:00:ed:03:2f:99:ff:b1:9c:c5:48:99:
                    b3:15:99:68:24:8e:85:b3:75:99:20:ef:0e:f4:10:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8D:08:E2:43:F8:88:14:BE:31:75:CC:28:38:55:17:F5:CA:7F:B4
            X509v3 Authority Key Identifier:
                keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/vI0I4kP4iBS-MXXMKDhVF_XKf7Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.170.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:5a:cf:c3:11:7a:ef:b3:bc:09:5f:6c:bd:a7:35:ce:7d:5c:
         e7:7a:a5:ff:cd:b4:e7:17:2f:ec:01:e5:e8:34:83:2e:c0:58:
         c2:a3:97:9c:e9:53:c5:8e:0a:44:60:d7:bd:89:f5:c3:b2:05:
         d2:5f:b4:69:36:33:fa:e4:d0:c4:a5:a5:93:11:01:bd:cf:b6:
         ee:f4:3c:70:4a:e6:8e:ba:0f:d1:df:1e:dd:e6:7d:b4:31:7f:
         8c:c3:68:1a:cc:68:0a:ee:12:4a:63:96:e2:2e:cb:5d:16:6b:
         20:4f:5f:2e:ea:67:12:31:df:85:14:be:a0:27:22:e4:e8:df:
         78:8d:d1:0d:dd:de:f4:19:d5:c6:36:16:2c:5a:37:ba:14:c5:
         d4:ea:94:56:1b:ce:2c:6f:12:8b:fd:70:b4:99:af:8c:e4:f2:
         ee:89:b8:f6:59:58:94:5d:0c:2c:d6:5d:e0:81:a3:67:7d:67:
         03:46:2d:98:82:94:80:71:19:d9:a2:b9:5d:39:8a:b5:a9:4c:
         35:26:bc:78:e5:0e:e3:a2:51:88:cb:60:43:80:c3:52:ac:d3:
         55:63:3f:15:3b:fb:46:63:83:7e:03:74:37:3e:24:73:9c:e9:
         92:07:59:60:c7:c9:e3:01:82:f8:43:2a:7d:d5:7a:14:1b:28:
         9d:e7:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:14:51 2026 by rpki-client