This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/deTEkBZi5H7AIejV16ysjHwAbxY.roa
File:                     deTEkBZi5H7AIejV16ysjHwAbxY.roa (raw, json)
Hash identifier:          l0JbGg+HLxrf5Ag/2z2pTojVken0ajBmDjhItX+Hm3I=
Subject key identifier:   75:E4:C4:90:16:62:E4:7E:C0:21:E8:D5:D7:AC:AC:8C:7C:00:6F:16
Certificate issuer:       /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial:       019C002ACBEE152131B2C078E0E8E58A6416
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/deTEkBZi5H7AIejV16ysjHwAbxY.roa
Signing time:             Tue 27 Jan 2026 15:55:30 +0000
ROA not before:           Tue 27 Jan 2026 15:55:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210538
IP address blocks:        45.133.36.0/24 maxlen: 24
                          185.169.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:00:2a:cb:ee:15:21:31:b2:c0:78:e0:e8:e5:8a:64:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
        Validity
            Not Before: Jan 27 15:55:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=75e4c4901662e47ec021e8d5d7acac8c7c006f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:a9:2a:48:36:19:cf:13:c2:65:7d:fc:b0:
                    d2:a2:23:74:56:c5:18:f4:7c:58:ff:2e:b4:e1:74:
                    bc:f1:19:c5:59:e8:8b:e7:9b:a9:a9:eb:45:c0:48:
                    36:ec:fc:54:76:99:f6:5b:ab:50:a9:92:5d:8e:d7:
                    b0:bd:a1:12:cd:66:f4:33:6d:2d:9d:b3:cb:8f:73:
                    c9:80:94:8f:e3:c0:89:e4:61:d8:38:b4:8e:ba:82:
                    3c:b5:a6:4e:20:50:99:b7:59:9d:0a:04:c8:61:24:
                    59:9b:33:73:85:32:33:66:67:65:e5:11:a5:ef:55:
                    49:47:94:cf:c4:18:87:4f:60:f4:54:88:73:d7:71:
                    0c:f1:04:32:62:6c:8b:07:7e:bd:c6:a2:f6:fb:51:
                    f5:91:c2:6f:a9:f6:6a:cd:6c:84:82:42:8c:dd:54:
                    e2:20:7b:0e:55:5b:8a:69:30:0d:cb:47:36:45:57:
                    d4:a4:99:2a:ce:48:72:75:09:3a:ed:10:c9:03:8f:
                    c4:28:98:4b:89:59:4a:df:43:80:aa:03:8c:11:93:
                    ac:62:3c:25:a3:ca:fe:bc:c0:ab:a3:bb:57:99:bc:
                    63:9f:26:ed:7b:e0:c9:34:12:b0:1a:47:ab:53:08:
                    b9:d6:22:24:a4:34:1b:1d:d5:84:cb:d9:ec:4b:50:
                    e6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E4:C4:90:16:62:E4:7E:C0:21:E8:D5:D7:AC:AC:8C:7C:00:6F:16
            X509v3 Authority Key Identifier:
                keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/deTEkBZi5H7AIejV16ysjHwAbxY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.36.0/24
                  185.169.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:16:e1:7d:c4:c8:b8:67:df:22:d5:10:b7:1f:e2:c4:c2:1b:
         c5:42:0d:1b:6d:9a:bf:f2:59:17:93:51:46:a1:7f:6f:c4:83:
         10:3f:de:b0:87:dc:05:b4:32:03:8d:13:3b:44:31:50:eb:80:
         48:e0:93:42:4a:06:3b:78:b3:af:90:e1:b5:3f:5f:b6:1c:43:
         c7:b7:42:5e:44:03:bd:47:bd:5a:d9:c9:07:c7:ec:e5:cc:ad:
         ca:1f:45:ea:75:9f:55:21:3e:7a:10:b9:76:8f:39:fa:88:2b:
         a1:96:35:95:ce:c4:27:92:9b:fe:fc:cf:56:b8:11:3b:b4:74:
         c2:53:12:84:ab:59:b1:c1:57:dc:c4:39:9f:26:35:1e:2b:ee:
         0a:a8:75:0f:bb:8b:3a:17:44:20:13:01:8f:a8:0a:d0:fa:3d:
         3d:ce:0a:37:c5:12:83:f7:cc:47:1e:03:c3:5b:fa:fc:0e:9e:
         da:4f:17:f4:8c:51:0d:9a:a3:19:a6:b2:7a:ba:45:0d:a8:c8:
         21:0b:43:14:9b:e6:70:34:8b:d9:c7:e7:6b:8e:02:aa:b0:8d:
         38:f5:bc:cd:fb:96:d0:bb:e3:75:ee:77:ed:51:71:d3:5e:cc:
         78:33:51:16:88:90:7a:a5:8f:78:db:b2:81:58:8e:b6:ef:37:
         a5:86:90:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZwAKsvuFSExssB44OjlimQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3
MjAyZDUwHhcNMjYwMTI3MTU1NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWU0YzQ5MDE2NjJlNDdlYzAyMWU4ZDVkN2FjYWM4YzdjMDA2ZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyOpKkg2Gc8TwmV9/LDSoiN0VsUY
9HxY/y604XS88RnFWeiL55upqetFwEg27PxUdpn2W6tQqZJdjtewvaESzWb0M20t
nbPLj3PJgJSP48CJ5GHYOLSOuoI8taZOIFCZt1mdCgTIYSRZmzNzhTIzZmdl5RGl
71VJR5TPxBiHT2D0VIhz13EM8QQyYmyLB369xqL2+1H1kcJvqfZqzWyEgkKM3VTi
IHsOVVuKaTANy0c2RVfUpJkqzkhydQk67RDJA4/EKJhLiVlK30OAqgOMEZOsYjwl
o8r+vMCro7tXmbxjnybte+DJNBKwGkerUwi51iIkpDQbHdWEy9nsS1DmiQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHXkxJAWYuR+wCHo1desrIx8AG8WMB8GA1UdIwQY
MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct
YzUxNWYzNTRjYzVhLzEvZGVURWtCWmk1SDdBSWVqVjE2eXNqSHdBYnhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh
LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYUkAwQA
uam0MA0GCSqGSIb3DQEBCwUAA4IBAQA2FuF9xMi4Z98i1RC3H+LEwhvFQg0bbZq/
8lkXk1FGoX9vxIMQP96wh9wFtDIDjRM7RDFQ64BI4JNCSgY7eLOvkOG1P1+2HEPH
t0JeRAO9R71a2ckHx+zlzK3KH0XqdZ9VIT56ELl2jzn6iCuhljWVzsQnkpv+/M9W
uBE7tHTCUxKEq1mxwVfcxDmfJjUeK+4KqHUPu4s6F0QgEwGPqArQ+j09zgo3xRKD
98xHHgPDW/r8Dp7aTxf0jFENmqMZprJ6ukUNqMghC0MUm+ZwNIvZx+drjgKqsI04
9bzN+5bQu+N17nftUXHTXsx4M1EWiJB6pY9427KBWI627zelhpBQ
-----END CERTIFICATE-----
Generated at Tue Feb 3 17:43:17 2026 by rpki-client