This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4WLRwhJOxK42p4s3y8Pi-f-uwGg.roa
File:                     4WLRwhJOxK42p4s3y8Pi-f-uwGg.roa (raw, json)
Hash identifier:          towBJONDWlEy1Ghtn/h9pt+Tf2v85Qo/Obp+rcJdKYc=
Subject key identifier:   E1:62:D1:C2:12:4E:C4:AE:36:A7:8B:37:CB:C3:E2:F9:FF:AE:C0:68
Certificate issuer:       /CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Certificate serial:       019B76EB463361CCEA8B2E5A1AF053C92621
Authority key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4WLRwhJOxK42p4s3y8Pi-f-uwGg.roa
Signing time:             Thu 01 Jan 2026 00:18:08 +0000
ROA not before:           Thu 01 Jan 2026 00:18:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200849
IP address blocks:        185.92.200.0/24 maxlen: 24
                          185.92.201.0/24 maxlen: 24
                          185.92.202.0/24 maxlen: 24
                          185.92.203.0/24 maxlen: 24
                          2a03:8d20::/32 maxlen: 32
                          2a03:8d20:1186::/48 maxlen: 48
                          2a03:8d20:1188::/48 maxlen: 48
                          2a03:8d20:2282::/48 maxlen: 48
                          2a03:8d20:7286::/48 maxlen: 48
                          2a03:8d20:9000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:46:33:61:cc:ea:8b:2e:5a:1a:f0:53:c9:26:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
        Validity
            Not Before: Jan  1 00:18:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e162d1c2124ec4ae36a78b37cbc3e2f9ffaec068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:e5:2a:3f:42:32:53:e2:ee:a7:25:d5:44:
                    0d:ef:05:cf:c7:db:a0:29:2c:ee:da:01:79:41:71:
                    04:17:04:7c:d0:f0:da:65:64:27:71:a8:2d:ab:5d:
                    90:f8:5c:d5:e1:fb:81:0e:cd:12:fc:8d:2d:db:3c:
                    f3:3a:2e:88:9c:91:1c:f7:8f:e1:57:6f:87:9c:5a:
                    73:29:6d:fe:24:45:2b:7e:ff:40:a4:4f:80:46:fa:
                    6c:1e:3d:92:9d:9a:57:67:98:53:13:51:3d:dc:43:
                    39:82:65:d1:83:96:1e:82:a7:23:7f:ce:43:ad:a8:
                    40:f6:66:05:be:6c:05:4c:2d:20:89:fc:d1:88:5e:
                    12:04:6e:be:ff:9a:6d:52:b0:c5:ad:43:a3:32:ed:
                    6d:c9:fa:08:61:d9:d7:9e:d7:d3:b6:29:e8:0a:41:
                    a5:43:8c:21:da:9a:c6:95:17:2b:23:4c:29:a5:aa:
                    7f:41:55:13:6a:e1:05:09:f5:ec:45:d9:53:b0:dc:
                    04:14:05:91:2a:f6:49:81:d4:04:1d:7e:1a:f1:d4:
                    74:f7:f2:9e:32:13:84:8c:6d:b7:f3:06:29:5d:92:
                    38:10:4f:2a:f2:86:f3:c1:2b:bb:41:8a:f8:50:7b:
                    44:97:5c:62:81:a7:39:71:17:53:f9:ef:1a:05:58:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:62:D1:C2:12:4E:C4:AE:36:A7:8B:37:CB:C3:E2:F9:FF:AE:C0:68
            X509v3 Authority Key Identifier:
                keyid:E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4WLRwhJOxK42p4s3y8Pi-f-uwGg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.200.0/22
                IPv6:
                  2a03:8d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:e2:e3:bb:2b:fa:80:45:07:fc:ed:8d:5c:e9:a8:7b:5c:be:
         26:e5:72:c0:de:4c:d0:72:1a:0a:fe:ba:8a:1d:d0:b4:60:e3:
         c9:c1:4e:3c:9f:34:92:80:0d:ec:b9:8c:2b:fa:e5:3f:2b:5a:
         88:b8:ba:e8:fb:19:ce:37:85:c3:6e:76:9b:80:e8:6b:fd:c4:
         6d:a1:c1:5e:c4:e8:d5:c3:70:8f:38:b9:68:b4:4a:8e:11:f1:
         f5:03:d7:e9:fd:3a:1e:bf:97:87:fa:75:a5:53:5b:c3:4e:f1:
         d4:b2:af:96:87:e7:6c:24:69:56:b6:7b:95:e3:62:29:d1:1d:
         01:85:72:77:7d:1f:e9:0f:15:da:ac:b0:1a:e1:4d:40:24:5a:
         c6:48:bf:09:e3:54:a4:64:4c:8e:59:c1:54:10:78:9f:fd:dd:
         0e:27:58:84:b6:30:7b:08:89:2c:7d:4c:11:56:ba:c5:ca:b3:
         79:11:58:4d:32:7e:f4:e1:30:e4:3b:ff:61:41:17:1d:0c:c5:
         cc:3a:45:31:d7:e8:c0:e6:8c:9d:10:db:73:ba:5a:17:10:49:
         22:86:51:10:a3:85:b8:58:e7:8a:f0:27:f1:8f:87:4c:5a:47:
         f8:f3:25:ec:7b:a4:cd:5b:28:2b:a3:23:14:b1:b5:da:7e:81:
         e9:0d:41:3b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZt260YzYczqiy5aGvBTySYhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyODNjNGFkMmZkODcyNGE4YzdkNWVhZjQzMTgxNGNiM2Qx
NTEyN2UwHhcNMjYwMTAxMDAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTYyZDFjMjEyNGVjNGFlMzZhNzhiMzdjYmMzZTJmOWZmYWVjMDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhLlKj9CMlPi7qcl1UQN7wXPx9ug
KSzu2gF5QXEEFwR80PDaZWQncagtq12Q+FzV4fuBDs0S/I0t2zzzOi6InJEc94/h
V2+HnFpzKW3+JEUrfv9ApE+ARvpsHj2SnZpXZ5hTE1E93EM5gmXRg5Yegqcjf85D
rahA9mYFvmwFTC0gifzRiF4SBG6+/5ptUrDFrUOjMu1tyfoIYdnXntfTtinoCkGl
Q4wh2prGlRcrI0wppap/QVUTauEFCfXsRdlTsNwEFAWRKvZJgdQEHX4a8dR09/Ke
MhOEjG238wYpXZI4EE8q8obzwSu7QYr4UHtEl1xigac5cRdT+e8aBViieQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOFi0cISTsSuNqeLN8vD4vn/rsBoMB8GA1UdIwQY
MBaAFOKDxK0v2HJKjH1er0MYFMs9FRJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYt
NjFjMWVjYWFiNTVmLzEvNFdMUndoSk94SzQycDRzM3k4UGktZi11d0dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iOGNjNjYtY2M2NS00ZGMyLWFlODYtNjFjMWVjYWFiNTVm
LzEvNG9QRXJTX1lja3FNZlY2dlF4Z1V5ejBWRW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVzIMA0E
AgACMAcDBQAqA40gMA0GCSqGSIb3DQEBCwUAA4IBAQAf4uO7K/qARQf87Y1c6ah7
XL4m5XLA3kzQchoK/rqKHdC0YOPJwU48nzSSgA3suYwr+uU/K1qIuLro+xnON4XD
bnabgOhr/cRtocFexOjVw3CPOLlotEqOEfH1A9fp/Toev5eH+nWlU1vDTvHUsq+W
h+dsJGlWtnuV42Ip0R0BhXJ3fR/pDxXarLAa4U1AJFrGSL8J41SkZEyOWcFUEHif
/d0OJ1iEtjB7CIksfUwRVrrFyrN5EVhNMn704TDkO/9hQRcdDMXMOkUx1+jA5oyd
ENtzuloXEEkihlEQo4W4WOeK8Cfxj4dMWkf48yXse6TNWygroyMUsbXafoHpDUE7
-----END CERTIFICATE-----
Generated at Thu Jan 1 12:27:33 2026 by rpki-client