This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/dpdacShsZFgu4QWZ_aybe7E-QGM.roa
File:                     dpdacShsZFgu4QWZ_aybe7E-QGM.roa (raw, json)
Hash identifier:          jvkwOABm8foq9ZOfn9aL0kIeP61iBvdccQx5LatnOYA=
Subject key identifier:   76:97:5A:71:28:6C:64:58:2E:E1:05:99:FD:AC:9B:7B:B1:3E:40:63
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       019B7F1455E2C3A67EC3B90E332E2A217638
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/dpdacShsZFgu4QWZ_aybe7E-QGM.roa
Signing time:             Fri 02 Jan 2026 14:19:57 +0000
ROA not before:           Fri 02 Jan 2026 14:19:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200195
IP address blocks:        193.233.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:55:e2:c3:a6:7e:c3:b9:0e:33:2e:2a:21:76:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Jan  2 14:19:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=76975a71286c64582ee10599fdac9b7bb13e4063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2f:e2:11:04:32:91:0f:57:dc:64:af:cb:d1:
                    ca:77:b9:8a:ef:66:2f:af:85:49:3c:2e:ec:17:c5:
                    1f:1b:02:6e:d5:35:78:f0:01:c2:56:6d:ab:2e:ed:
                    0d:99:36:aa:8f:02:01:47:49:98:9c:3c:a4:01:c4:
                    d9:2e:84:88:18:34:69:fe:b7:6c:12:17:d0:f1:d2:
                    43:1b:ab:37:1e:93:11:87:23:53:db:cb:17:84:eb:
                    8f:0b:64:4c:b0:c6:69:6d:d2:ce:07:42:1e:4a:64:
                    85:4a:63:7e:ff:8e:83:26:2f:09:8b:6d:ef:60:3d:
                    a8:59:82:52:8e:07:f6:bc:34:6d:7e:c2:82:c2:01:
                    7b:53:83:ff:62:cd:e2:07:1c:9b:ce:7f:1a:0e:0f:
                    fb:b6:07:7f:3e:25:2d:c2:3f:3e:8f:ab:c8:a5:de:
                    21:b1:f0:e7:86:33:ab:a4:b5:8f:50:f6:28:4c:e0:
                    5a:be:1b:0a:cb:8c:1b:ab:eb:f0:ca:dd:96:01:61:
                    64:ae:91:da:9a:e5:ed:be:26:bd:b0:69:2f:83:a2:
                    04:28:a5:04:e6:7f:52:d8:a1:93:5d:d5:7f:e3:ba:
                    72:c0:f6:e3:54:65:46:bc:2f:aa:e3:d8:dd:49:2b:
                    bf:7e:e5:15:d0:77:85:2b:3b:93:43:7a:92:c8:eb:
                    1c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:97:5A:71:28:6C:64:58:2E:E1:05:99:FD:AC:9B:7B:B1:3E:40:63
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/dpdacShsZFgu4QWZ_aybe7E-QGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:2e:44:8c:63:e2:24:d2:db:f3:30:c2:7e:33:88:c0:d8:4e:
         5c:38:81:8b:8a:b7:4d:6e:26:dd:7a:f0:5f:4b:d0:25:75:6d:
         7f:9b:96:d3:fb:79:47:87:7d:e0:6f:05:8b:90:41:74:8e:67:
         6b:9e:2c:34:ea:8e:11:b6:e1:17:aa:9b:61:47:93:7c:07:3b:
         81:8d:f5:4e:e2:6e:2d:f2:04:f3:65:24:a5:eb:0a:87:fc:0a:
         29:9c:12:f3:fc:74:ba:98:7f:57:52:56:15:18:5a:aa:8e:e1:
         8c:9d:07:9a:49:91:1b:70:99:10:eb:98:08:89:de:b3:58:e0:
         87:6f:14:66:ec:5c:bf:42:04:f3:e9:c9:ae:c8:d4:d5:f8:7f:
         06:c0:33:72:a9:4e:cf:18:79:cf:02:8b:7f:6b:0e:2c:47:24:
         4a:4a:97:37:9f:49:a5:4d:f5:d7:b9:88:45:b1:a1:db:64:a5:
         5a:c1:10:a6:98:ee:38:c0:fb:72:ef:03:bd:e9:39:d0:a3:1c:
         2d:dd:54:f2:e4:58:f4:6b:39:de:72:0a:b4:07:39:05:07:95:
         4f:1b:08:44:ed:d4:c6:be:22:0e:0a:2a:ee:91:10:3c:1c:50:
         72:3f:76:4d:a1:70:43:ca:11:3b:a6:c7:aa:d3:a3:03:0b:48:
         bd:49:ca:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FFXiw6Z+w7kOMy4qIXY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjYwMTAyMTQxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Njk3NWE3MTI4NmM2NDU4MmVlMTA1OTlmZGFjOWI3YmIxM2U0MDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji/iEQQykQ9X3GSvy9HKd7mK72Yv
r4VJPC7sF8UfGwJu1TV48AHCVm2rLu0NmTaqjwIBR0mYnDykAcTZLoSIGDRp/rds
EhfQ8dJDG6s3HpMRhyNT28sXhOuPC2RMsMZpbdLOB0IeSmSFSmN+/46DJi8Ji23v
YD2oWYJSjgf2vDRtfsKCwgF7U4P/Ys3iBxybzn8aDg/7tgd/PiUtwj8+j6vIpd4h
sfDnhjOrpLWPUPYoTOBavhsKy4wbq+vwyt2WAWFkrpHamuXtvia9sGkvg6IEKKUE
5n9S2KGTXdV/47pywPbjVGVGvC+q49jdSSu/fuUV0HeFKzuTQ3qSyOscdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHaXWnEobGRYLuEFmf2sm3uxPkBjMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvZHBkYWNTaHNaRmd1NFFXWl9heWJlN0UtUUdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwemHMA0G
CSqGSIb3DQEBCwUAA4IBAQA9LkSMY+Ik0tvzMMJ+M4jA2E5cOIGLirdNbibdevBf
S9AldW1/m5bT+3lHh33gbwWLkEF0jmdrniw06o4RtuEXqpthR5N8BzuBjfVO4m4t
8gTzZSSl6wqH/AopnBLz/HS6mH9XUlYVGFqqjuGMnQeaSZEbcJkQ65gIid6zWOCH
bxRm7Fy/QgTz6cmuyNTV+H8GwDNyqU7PGHnPAot/aw4sRyRKSpc3n0mlTfXXuYhF
saHbZKVawRCmmO44wPty7wO96TnQoxwt3VTy5Fj0aznecgq0BzkFB5VPGwhE7dTG
viIOCirukRA8HFByP3ZNoXBDyhE7pseq06MDC0i9Scr+
-----END CERTIFICATE-----
Generated at Tue Jan 20 11:09:51 2026 by rpki-client