This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/TIVgwz2PZE4VS96TvphWGdMjlmc.roa
File:                     TIVgwz2PZE4VS96TvphWGdMjlmc.roa (raw, json)
Hash identifier:          Zu8KI6LT2Zehngw+MVhJOxspHO6nvDUdgoTjHEX//7s=
Subject key identifier:   4C:85:60:C3:3D:8F:64:4E:15:4B:DE:93:BE:98:56:19:D3:23:96:67
Certificate issuer:       /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial:       019B7D5B1A30B1C8E502136011FEBD4EF515
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/TIVgwz2PZE4VS96TvphWGdMjlmc.roa
Signing time:             Fri 02 Jan 2026 06:18:01 +0000
ROA not before:           Fri 02 Jan 2026 06:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201200
IP address blocks:        79.124.55.0/24 maxlen: 24
                          217.174.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:1a:30:b1:c8:e5:02:13:60:11:fe:bd:4e:f5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
        Validity
            Not Before: Jan  2 06:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4c8560c33d8f644e154bde93be985619d3239667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:77:95:d6:aa:12:a7:d7:d8:25:ce:68:46:87:
                    4c:2d:ac:13:f5:a7:6e:f4:82:6f:da:fd:73:a8:27:
                    43:b6:f2:9d:15:09:51:32:db:8f:88:bf:a4:e3:4c:
                    bc:f6:c6:ed:9e:9b:c4:53:df:38:2f:fa:31:3a:5e:
                    0b:c7:93:a6:7b:c8:c1:b8:ba:f1:8d:5d:05:ec:1c:
                    c0:ed:b6:38:0e:b9:db:56:7b:57:ea:51:41:38:bc:
                    d0:f7:d1:90:f7:b1:c3:0e:b9:21:06:cb:1a:89:a8:
                    77:cd:23:de:31:2a:6c:32:c1:94:cc:dc:0a:4a:28:
                    c9:60:fd:c7:f8:da:53:2e:be:e9:10:e1:98:f6:90:
                    b2:36:ba:c1:dd:11:e0:c3:40:d3:fd:04:9f:cf:d3:
                    e6:de:dc:17:ab:06:5b:52:03:d3:9d:17:f6:c0:72:
                    f8:8e:a3:6c:15:ac:2a:6b:67:ae:2b:0e:af:b1:f3:
                    14:3f:94:50:e9:84:88:c8:e9:e7:cf:d9:2e:7b:b6:
                    9c:51:bb:81:21:a6:b6:cc:b3:3f:4f:6e:fd:9e:39:
                    12:7c:58:d9:56:aa:13:f7:37:e9:97:16:42:53:9f:
                    13:e3:08:88:a9:c3:23:3b:1a:e2:49:d3:f1:c9:de:
                    a6:04:50:27:f1:d1:82:96:39:a9:7b:e6:a1:32:ec:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:85:60:C3:3D:8F:64:4E:15:4B:DE:93:BE:98:56:19:D3:23:96:67
            X509v3 Authority Key Identifier:
                keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/TIVgwz2PZE4VS96TvphWGdMjlmc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.124.55.0/24
                  217.174.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:e9:59:c6:a3:62:7a:9f:4b:29:97:c5:ba:e3:37:23:18:e3:
         93:7c:d4:05:e5:e4:b7:59:2b:6a:b9:1f:38:9f:05:f2:69:29:
         bb:72:1c:71:31:2f:66:40:d2:99:f6:7d:27:11:ac:b6:eb:eb:
         0a:09:d9:d3:6f:1c:e0:13:3c:1e:0d:12:cc:9f:35:a5:29:94:
         b4:e0:13:6d:0e:51:8e:cc:3d:c3:dd:3d:2c:9f:2f:4b:2e:f2:
         46:8c:c1:b9:92:b5:9f:73:74:5e:21:9c:75:9a:0f:db:10:89:
         59:eb:0f:e4:65:89:a9:90:25:04:da:97:0e:df:84:32:52:7e:
         db:08:28:4a:ec:33:1a:f6:e6:12:a8:82:ef:c7:08:68:49:f7:
         c4:79:9c:b7:39:86:71:6a:fd:31:87:40:a8:1a:f2:e1:a2:2f:
         65:ff:1e:33:86:ce:78:17:19:09:88:4c:a5:0f:2d:51:68:c2:
         de:35:b0:bf:f1:96:7a:62:dc:f3:a2:e1:80:8d:3f:91:68:b3:
         f1:ee:a0:43:ea:e3:79:2a:32:77:74:81:e1:99:c9:a7:ba:1b:
         d1:5f:19:67:b6:a2:c4:7d:bb:a4:94:74:dd:5c:07:f0:c5:f1:
         84:49:ef:8b:2f:03:99:11:f9:4f:0b:66:8a:99:57:5d:8a:7e:
         b4:8c:45:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:47:57 2026 by rpki-client