This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/_OkMfangRHHR3pkyqVAWkqY7mag.roa
File:                     _OkMfangRHHR3pkyqVAWkqY7mag.roa (raw, json)
Hash identifier:          4q+Nhgpids6AoAL8lqsvtN3qpgNozHDLR3s1mrSSncQ=
Subject key identifier:   FC:E9:0C:7D:A9:E0:44:71:D1:DE:99:32:A9:50:16:92:A6:3B:99:A8
Certificate issuer:       /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial:       019B7B35A100ABEB0364A295FA4735599320
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/_OkMfangRHHR3pkyqVAWkqY7mag.roa
Signing time:             Thu 01 Jan 2026 20:17:50 +0000
ROA not before:           Thu 01 Jan 2026 20:17:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208689
IP address blocks:        185.92.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:a1:00:ab:eb:03:64:a2:95:fa:47:35:59:93:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
        Validity
            Not Before: Jan  1 20:17:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=fce90c7da9e04471d1de9932a9501692a63b99a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:b6:55:4a:3c:3b:f4:ef:6e:13:59:30:2f:
                    8f:72:ea:37:ee:33:6c:2c:80:03:6b:8d:aa:e8:17:
                    cb:18:2c:5a:b3:3a:5d:31:a4:cf:21:d1:b7:ff:67:
                    c7:eb:68:33:48:b3:8d:36:46:44:15:f8:35:95:84:
                    d6:a2:71:d7:84:ca:5f:0b:1e:67:c9:06:9e:4d:27:
                    9b:9f:41:41:b9:20:de:60:7b:b1:3c:a5:99:2e:55:
                    5f:cb:26:9f:3e:c3:45:af:6b:6b:83:dc:4d:06:60:
                    31:f7:ef:6b:03:d6:da:52:d1:e2:e9:e2:ff:a5:d7:
                    e3:c1:93:97:a2:08:e0:18:82:3b:50:48:fd:f1:fa:
                    26:1b:1c:6a:f3:78:38:1e:61:fe:da:b0:4d:0f:8b:
                    2e:d8:25:67:b5:e0:f4:6a:02:31:25:86:f5:4e:f8:
                    c3:3b:4c:e7:03:bc:12:b8:f3:bb:86:ce:80:eb:30:
                    8a:d2:ae:f7:15:63:4a:f4:06:12:ef:70:a2:45:d3:
                    51:a5:e1:db:17:56:00:ec:86:0a:a6:6e:1d:9a:c0:
                    26:46:9a:8f:d0:a8:c3:49:79:40:96:c8:24:15:e7:
                    4c:e5:77:e5:ec:06:82:c3:e4:22:97:2b:87:a4:b5:
                    59:38:d6:ce:d0:79:b9:61:21:89:c4:01:5d:53:cc:
                    7b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E9:0C:7D:A9:E0:44:71:D1:DE:99:32:A9:50:16:92:A6:3B:99:A8
            X509v3 Authority Key Identifier:
                keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/_OkMfangRHHR3pkyqVAWkqY7mag.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:08:fc:73:9a:9d:81:b0:cf:0c:b7:e9:f9:f6:49:f8:eb:9a:
         5e:30:8f:ea:a1:67:b6:c3:9b:22:9c:79:a7:8f:df:e9:f8:90:
         b9:ac:88:b4:bc:dc:ab:d5:fe:27:c1:65:30:7a:bb:2c:3b:1b:
         81:6d:62:28:7f:9a:4a:cf:9e:ad:6f:82:a3:99:3a:34:86:1f:
         c5:61:87:29:da:aa:b7:ba:3e:55:88:bd:8b:e0:48:52:8c:d6:
         29:88:c5:bf:b2:3f:14:16:be:3e:42:e1:a3:15:a1:25:22:68:
         02:e2:a4:1d:ca:61:86:8f:56:c0:85:09:f3:dd:3c:28:4a:0a:
         42:3e:47:97:37:d9:5e:1f:e3:e3:99:0b:ae:32:1a:e8:25:aa:
         16:58:7c:c4:0e:8d:cf:f3:d1:f5:de:39:7c:a0:2e:99:62:d0:
         f2:e8:8e:78:9c:56:62:c4:be:f7:22:8c:a3:27:81:1f:bf:d6:
         c0:29:c7:63:25:66:08:2a:ce:d6:1c:db:d0:b9:de:bd:4f:ff:
         ab:f9:2d:ad:ed:57:fc:8b:56:3d:37:a2:20:b4:71:9c:d1:12:
         c6:90:fd:d3:fa:4d:8e:9f:c4:1f:e5:e4:57:8f:e9:30:6f:14:
         f8:85:91:50:a1:d9:da:b2:6f:30:26:30:a1:3e:14:44:6f:9d:
         56:3b:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:36:47 2026 by rpki-client