This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/IDDMpCjqYwAGI-peC47tdVFpVME.roa
File:                     IDDMpCjqYwAGI-peC47tdVFpVME.roa (raw, json)
Hash identifier:          Wn6wDDm3PxHp8jcuiJeMcmVpL1iWQEDeRHHD8I7chpQ=
Subject key identifier:   20:30:CC:A4:28:EA:63:00:06:23:EA:5E:0B:8E:ED:75:51:69:54:C1
Certificate issuer:       /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial:       019B7E38DFF85E061E1D3BA8EDE0C7F46115
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/IDDMpCjqYwAGI-peC47tdVFpVME.roa
Signing time:             Fri 02 Jan 2026 10:20:15 +0000
ROA not before:           Fri 02 Jan 2026 10:20:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211908
IP address blocks:        185.194.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:df:f8:5e:06:1e:1d:3b:a8:ed:e0:c7:f4:61:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
        Validity
            Not Before: Jan  2 10:20:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=2030cca428ea63000623ea5e0b8eed75516954c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:10:8c:4a:41:1c:03:ed:72:7b:e6:e2:19:
                    12:37:81:76:75:a5:cb:f6:ec:e1:35:9f:5f:c7:3c:
                    50:01:c1:16:b8:ad:87:fd:94:b9:2c:c4:79:e7:b6:
                    92:42:6c:33:61:88:b7:a0:6d:a8:96:f9:37:f7:62:
                    2c:7b:82:3d:99:7e:88:0b:84:4f:cc:eb:a5:15:d8:
                    d2:ac:11:e0:a1:fb:09:fe:5c:c4:83:fc:bf:87:25:
                    22:17:eb:e2:9b:d3:a1:b6:b8:d2:5e:79:98:d7:30:
                    c4:c7:a8:58:e7:be:9a:77:0e:7b:d2:4b:89:bd:10:
                    f3:1a:26:a6:cb:de:9a:b4:bb:b4:d1:4d:eb:6c:60:
                    16:70:84:33:d6:72:8e:e5:7e:06:61:82:36:34:93:
                    4a:01:c6:f2:11:05:7e:5d:93:d5:08:94:1e:0d:3f:
                    cb:c0:bc:93:f0:b0:41:be:b7:aa:a2:e8:f2:b0:8c:
                    01:65:10:d9:ef:a4:5f:22:19:c8:fc:0f:a6:ec:c0:
                    94:19:e5:d9:78:40:2c:9e:91:99:be:e1:7f:27:82:
                    bb:a3:2e:9f:6e:07:38:b5:9b:c0:c4:23:c2:f6:5b:
                    fa:74:58:ac:5b:9e:80:54:4f:03:d7:a3:8b:1a:27:
                    d1:75:03:89:b2:3f:c4:d6:42:86:5a:05:b2:49:f2:
                    70:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:30:CC:A4:28:EA:63:00:06:23:EA:5E:0B:8E:ED:75:51:69:54:C1
            X509v3 Authority Key Identifier:
                keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/IDDMpCjqYwAGI-peC47tdVFpVME.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.194.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:e5:a3:d3:83:91:e5:8f:7e:1b:fa:fc:9d:37:cc:85:25:b0:
         c3:d0:77:76:46:0a:d7:0c:43:0b:a3:68:dd:00:f5:ef:7b:66:
         76:8f:c0:db:01:e0:18:4a:55:1c:88:d3:54:52:35:18:24:e4:
         09:a0:4c:8a:be:9a:2f:35:38:32:5a:e6:47:84:f6:0f:a8:8a:
         b5:e5:b0:a6:39:15:b7:f5:0a:a3:d1:62:b7:64:5d:af:05:3c:
         52:19:6e:eb:2c:22:bc:c1:35:31:84:6d:13:d5:af:f1:0d:c8:
         40:39:6e:33:36:bf:39:de:81:59:63:60:01:b4:05:9f:3e:98:
         24:ad:fa:46:ee:b4:85:5f:c1:9a:b2:ba:89:3f:d3:e8:49:36:
         64:c5:01:96:8d:00:21:55:14:5b:ec:e2:09:35:fd:b7:83:d9:
         1f:30:51:44:fb:b6:b4:52:c5:d8:ad:91:c6:18:a9:0f:8d:85:
         a2:30:d7:d4:c0:4e:0b:8c:2b:a7:00:2e:e6:de:8d:51:d1:ce:
         2d:39:aa:17:44:f6:e7:ab:8a:70:78:cf:1c:a8:da:2a:f0:d3:
         c0:4d:7c:c6:da:b9:d4:44:f8:8b:1d:98:ee:32:65:d7:0e:19:
         4a:ad:b4:31:24:a4:f9:3c:53:3e:0a:6f:d7:51:e7:c5:ad:86:
         de:cb:1f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:46:42 2026 by rpki-client