This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dcW6MBDQBhpbhrw39OhE-8rKWWc.roa
File:                     dcW6MBDQBhpbhrw39OhE-8rKWWc.roa (raw, json)
Hash identifier:          l5Fg3mxBhx8pPX9K0xDf9RmB0LJC8A6sKkJ7RCtcq30=
Subject key identifier:   75:C5:BA:30:10:D0:06:1A:5B:86:BC:37:F4:E8:44:FB:CA:CA:59:67
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       019B7F854F89A26F70FE5E8A921196E0835B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dcW6MBDQBhpbhrw39OhE-8rKWWc.roa
Signing time:             Fri 02 Jan 2026 16:23:21 +0000
ROA not before:           Fri 02 Jan 2026 16:23:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48207
IP address blocks:        193.124.45.0/24 maxlen: 24
                          194.135.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 13:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:4f:89:a2:6f:70:fe:5e:8a:92:11:96:e0:83:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jan  2 16:23:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=75c5ba3010d0061a5b86bc37f4e844fbcaca5967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4f:48:ea:60:ee:09:f5:ca:f0:9a:41:13:d6:
                    9d:99:7c:7b:ae:56:31:20:b7:9a:34:06:ed:e3:28:
                    d0:74:00:da:87:18:62:a8:62:4a:b6:1d:70:39:9a:
                    93:35:1d:21:bf:fe:ba:70:e8:2f:82:36:9c:57:b5:
                    f0:37:62:74:41:a1:bb:b5:8b:5a:18:ae:a0:3d:bd:
                    e3:2d:92:84:d0:2d:a6:7c:cc:b4:13:ad:dc:0d:67:
                    34:b2:f3:58:d7:5a:bd:af:ff:b4:33:ef:22:9a:3e:
                    75:fa:80:8f:c5:b3:54:44:9c:5a:f3:d8:e0:4f:04:
                    98:45:c4:66:f4:84:f6:35:e8:3f:ac:ce:36:bb:63:
                    5e:71:56:23:64:e0:4b:24:40:b7:0b:91:3f:b9:0b:
                    2e:c2:6a:8d:e1:36:29:88:a1:0b:8b:95:01:95:80:
                    29:52:26:eb:28:31:0e:51:f8:92:84:73:6b:35:39:
                    23:47:6c:54:f5:30:2a:71:c1:f7:81:91:7a:43:c0:
                    31:42:bc:2c:53:b5:9d:05:bd:28:37:0f:d4:fe:e4:
                    9c:b9:a8:f2:1b:35:b9:28:2d:3e:13:8a:c9:a7:76:
                    39:c9:e4:e7:95:f7:26:c1:4b:60:02:1a:6d:f7:ce:
                    b8:89:a3:b8:25:d1:ff:4a:a1:f7:c6:2e:81:fa:6a:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C5:BA:30:10:D0:06:1A:5B:86:BC:37:F4:E8:44:FB:CA:CA:59:67
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dcW6MBDQBhpbhrw39OhE-8rKWWc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.124.45.0/24
                  194.135.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:60:49:be:f1:38:f8:be:91:27:d2:0a:11:d6:80:67:5e:49:
         75:dc:34:a1:66:76:e4:ad:c2:64:f2:43:40:47:d5:ca:37:43:
         8b:58:7d:b1:21:2a:55:af:73:fe:e9:9e:18:ec:e1:7c:6f:a2:
         06:37:ed:e4:50:5b:b4:5b:26:22:7c:a7:ed:35:ef:14:ea:12:
         ad:58:da:b7:04:d0:ae:4c:d6:9c:0e:04:37:d3:66:d6:9e:c3:
         2c:f5:82:1c:0d:80:31:23:40:e2:9a:be:b5:9e:66:54:89:b7:
         6c:15:8f:ba:1f:56:3d:46:bf:cf:2d:4f:fd:cf:4f:16:b7:1d:
         3f:23:a5:53:2f:33:20:ac:1b:a1:d0:98:83:ed:fd:bd:0c:3a:
         13:30:36:5f:19:12:3e:d1:4b:4f:b2:80:55:a5:cd:e6:5b:06:
         a3:41:0d:85:79:c7:13:c6:71:97:09:d8:57:64:ef:cd:2c:dd:
         01:52:37:a6:ac:47:3b:37:cd:83:c8:0d:d9:64:bb:26:46:19:
         c9:49:bf:9b:11:f8:4a:a5:87:52:da:8c:7e:cd:bd:8b:f3:d5:
         e4:90:59:e7:4c:28:6a:f9:4f:a9:75:5a:f0:d6:38:ba:40:7c:
         75:e9:93:42:48:83:33:2a:62:21:8b:29:8b:4d:0e:25:37:f1:
         bb:c8:6f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:59:31 2026 by rpki-client