This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/v1Ls96V1zjsh1cJAh9fcfiBoz04.roa
File:                     v1Ls96V1zjsh1cJAh9fcfiBoz04.roa (raw, json)
Hash identifier:          K2Z1NaizuYGxA2pOO4UnwtkbIj7uIzf2ACRcsZQKJoM=
Subject key identifier:   BF:52:EC:F7:A5:75:CE:3B:21:D5:C2:40:87:D7:DC:7E:20:68:CF:4E
Certificate issuer:       /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial:       019B7D5B16C15ACC7B4DC413BF6BE2813434
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/v1Ls96V1zjsh1cJAh9fcfiBoz04.roa
Signing time:             Fri 02 Jan 2026 06:18:00 +0000
ROA not before:           Fri 02 Jan 2026 06:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198228
IP address blocks:        82.118.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:16:c1:5a:cc:7b:4d:c4:13:bf:6b:e2:81:34:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
        Validity
            Not Before: Jan  2 06:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bf52ecf7a575ce3b21d5c24087d7dc7e2068cf4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:36:9d:3f:20:b9:c2:9e:c1:08:c4:a0:f3:
                    ff:15:58:ed:d7:d1:31:86:54:40:24:07:ae:92:46:
                    f5:87:23:04:68:6f:5e:20:c6:b6:54:ff:22:80:e8:
                    b1:25:b9:ac:9f:21:e9:e9:24:7d:4f:43:8b:1c:d5:
                    f7:00:40:b8:05:ac:ac:ce:38:4b:88:e9:42:00:2f:
                    e6:50:53:fc:5c:b7:6b:99:a5:15:16:a1:66:97:4d:
                    84:74:ec:b3:dc:e3:31:a5:83:72:9d:68:de:3b:2d:
                    49:89:dd:7a:ed:62:19:58:fb:15:d1:cd:21:cf:e0:
                    c9:63:77:3f:5f:55:d9:2f:76:78:4c:ad:e7:8f:a1:
                    9e:b2:a8:5d:cf:5c:ec:6b:71:1e:cf:3b:43:dd:0c:
                    19:8c:8a:80:8a:a8:d8:86:e5:05:66:cd:8b:dc:dc:
                    47:43:07:59:fa:76:f7:86:df:64:c9:7c:6b:a0:ee:
                    85:f5:2a:80:73:36:eb:8b:1a:e4:c3:f7:d1:5a:ff:
                    db:ab:49:a5:c0:98:d1:b1:c2:ec:dd:d0:5b:7a:53:
                    6c:e7:c1:85:60:f6:b7:72:c7:9b:27:74:3a:43:c3:
                    0e:3d:4a:ce:1c:c9:24:26:27:f6:5a:a7:c8:a8:86:
                    61:ed:a1:bf:c4:95:2e:63:23:35:10:d8:c8:8d:aa:
                    29:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:52:EC:F7:A5:75:CE:3B:21:D5:C2:40:87:D7:DC:7E:20:68:CF:4E
            X509v3 Authority Key Identifier:
                keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/v1Ls96V1zjsh1cJAh9fcfiBoz04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.118.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:c1:0c:05:9f:df:d5:50:64:13:b5:b0:a7:1d:c7:74:34:29:
         e6:e2:c7:2e:42:b3:a7:09:d3:2f:68:eb:f4:12:1b:d2:a9:6b:
         f5:c7:36:8d:74:df:24:53:1b:1f:e7:8d:7c:5b:03:e6:d0:8f:
         e4:20:4e:a0:53:c8:9c:d4:30:a4:04:24:be:c8:5e:a2:23:e5:
         40:2b:ee:1d:50:99:3d:cd:63:be:af:13:a2:cf:98:01:91:f4:
         8a:97:f4:46:ac:c6:6f:d4:b8:8a:69:d2:7b:f6:ef:c9:ac:27:
         ad:c7:bc:6e:ec:55:80:ed:16:8a:b9:81:48:cf:a9:bc:b4:5b:
         40:58:1f:13:7a:cb:dc:45:7a:61:59:b7:84:90:a7:a4:1e:52:
         29:a5:a7:96:a1:12:0e:40:03:3c:87:31:f9:3e:4b:34:8c:7a:
         b6:07:ab:6b:b0:1d:f6:d2:f1:e1:2f:e2:29:1a:e5:1c:88:d4:
         a7:c4:d7:23:7a:ce:35:c9:4c:c4:21:36:8e:0c:e4:f9:94:dd:
         87:d7:5a:e6:66:e8:27:eb:c0:27:b3:e5:76:c7:4e:86:93:79:
         6f:59:74:8f:12:45:08:2e:74:d7:85:a3:fe:5b:bf:8e:cd:56:
         12:4c:98:a4:11:d6:3e:e7:a6:c5:94:5a:83:74:37:79:e8:ac:
         12:f6:70:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 18:49:36 2026 by rpki-client