This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/DxAIf_G4bsCHSuF3mUqxe5pwn4w.roa
File:                     DxAIf_G4bsCHSuF3mUqxe5pwn4w.roa (raw, json)
Hash identifier:          QSb3YvRlfaog1Dj3+gzS3BBfYETY8z0tkMgWbxsJbyk=
Subject key identifier:   0F:10:08:7F:F1:B8:6E:C0:87:4A:E1:77:99:4A:B1:7B:9A:70:9F:8C
Certificate issuer:       /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial:       019B79ED12EECB1F08D546C62D4D9E3094E3
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/DxAIf_G4bsCHSuF3mUqxe5pwn4w.roa
Signing time:             Thu 01 Jan 2026 14:18:58 +0000
ROA not before:           Thu 01 Jan 2026 14:18:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48945
IP address blocks:        93.186.144.0/24 maxlen: 24
                          93.186.145.0/24 maxlen: 24
                          93.186.146.0/24 maxlen: 24
                          93.186.147.0/24 maxlen: 24
                          93.186.148.0/22 maxlen: 22
                          93.186.152.0/23 maxlen: 23
                          93.186.154.0/24 maxlen: 24
                          93.186.155.0/24 maxlen: 24
                          93.186.156.0/22 maxlen: 22
                          185.11.36.0/22 maxlen: 22
                          2a03:7e80::/30 maxlen: 30
                          2a03:7e84::/30 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ed:12:ee:cb:1f:08:d5:46:c6:2d:4d:9e:30:94:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
        Validity
            Not Before: Jan  1 14:18:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0f10087ff1b86ec0874ae177994ab17b9a709f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7b:2f:9e:08:a2:2c:6a:9d:27:53:89:ea:19:
                    9e:ea:3d:f5:64:50:03:3b:c2:d9:e1:17:f3:80:c7:
                    72:63:92:a0:90:39:e0:0e:62:26:c1:8b:2b:0b:2f:
                    cd:c2:6e:ac:ad:71:ba:b7:4a:3f:ef:6c:b5:be:81:
                    af:98:34:40:a7:68:ff:8c:7e:93:02:d7:0b:8b:1e:
                    8d:fc:2a:fb:32:c9:06:cf:11:3c:72:91:ba:bf:44:
                    7f:78:84:2c:01:ac:57:ca:7c:ab:78:0e:5f:31:2f:
                    24:f2:18:3b:d6:c0:af:8c:fa:bc:d1:82:43:50:96:
                    8c:f4:11:cb:48:26:8b:19:10:ce:4c:86:85:35:75:
                    21:10:24:f5:60:fa:de:18:7c:fb:a0:62:00:11:8f:
                    fc:0e:35:b8:69:e9:d1:d0:4e:78:05:c6:1b:d5:c2:
                    53:88:90:2e:f1:f6:76:39:65:e9:ec:bf:8b:36:33:
                    c8:a1:69:2d:a4:2a:91:aa:9a:96:51:34:60:e9:28:
                    54:94:3a:ef:4d:7f:97:58:f1:92:d1:53:18:8f:fd:
                    e5:ac:bb:d2:1b:bb:06:04:ff:37:c2:18:a9:2e:70:
                    53:c2:09:1f:75:86:37:a9:d9:6f:d9:7a:2d:90:cb:
                    8f:7b:47:33:1e:08:4b:f4:88:e2:46:3a:df:98:e7:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:10:08:7F:F1:B8:6E:C0:87:4A:E1:77:99:4A:B1:7B:9A:70:9F:8C
            X509v3 Authority Key Identifier:
                keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/DxAIf_G4bsCHSuF3mUqxe5pwn4w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.186.144.0/20
                  185.11.36.0/22
                IPv6:
                  2a03:7e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         5c:f6:9d:af:26:1b:09:4e:d4:cc:5f:37:24:db:da:03:37:f5:
         d5:77:59:66:e2:da:79:1d:5d:66:8e:83:93:a3:13:ed:c3:2c:
         73:8f:0f:74:e8:35:b7:f6:13:ed:bf:a2:8d:1c:95:14:cf:e6:
         d7:28:53:c7:7d:2a:47:f4:b3:82:f6:c8:b2:ae:5b:32:ab:39:
         a3:73:6c:9c:8b:10:21:85:03:bb:37:8a:65:84:c2:11:d8:25:
         d9:72:51:af:ab:ef:78:8d:2f:e2:d5:5b:17:a9:b4:4c:bf:24:
         af:f7:f0:72:23:ee:ec:fc:ed:34:d4:c4:3e:3f:a3:75:80:8e:
         0f:83:d9:ff:f1:07:9a:74:86:c3:26:6c:3f:64:4b:a9:45:b6:
         6b:3a:11:9b:3b:9e:23:75:a1:0b:23:ec:ec:ea:02:6a:49:e4:
         b8:4d:b0:c0:28:3a:8c:97:24:32:87:3b:56:16:90:82:30:3a:
         1c:7e:da:3b:01:c6:74:a0:33:53:e2:5e:08:39:a2:44:d9:1c:
         10:36:a3:04:be:15:a5:09:58:c2:41:dd:9a:e2:21:5b:b4:ae:
         bf:92:b0:c9:8c:f9:0e:15:da:73:2a:a2:e0:b2:07:ba:0e:54:
         bd:d3:c9:6a:5a:79:2b:80:8b:6f:b3:50:df:86:d2:01:44:6d:
         4d:28:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:09:41 2026 by rpki-client