This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/DElIG2I4poXxTLyxmk8qHhToIrc.roa
File:                     DElIG2I4poXxTLyxmk8qHhToIrc.roa (raw, json)
Hash identifier:          EymYSA7xmGhavoS2+cvnhWPb/p1asE537I39DsH2QsI=
Subject key identifier:   0C:49:48:1B:62:38:A6:85:F1:4C:BC:B1:9A:4F:2A:1E:14:E8:22:B7
Certificate issuer:       /CN=76bdb809f4dde44c82a9e5bd8b7712d6d763bf0b
Certificate serial:       019C28C11C4148B606414C0E68A7DBA0AAB3
Authority key identifier: 76:BD:B8:09:F4:DD:E4:4C:82:A9:E5:BD:8B:77:12:D6:D7:63:BF:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/DElIG2I4poXxTLyxmk8qHhToIrc.roa
Signing time:             Wed 04 Feb 2026 13:04:30 +0000
ROA not before:           Wed 04 Feb 2026 13:04:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203042
IP address blocks:        195.242.192.0/23 maxlen: 23
                          2a0f:1dc0::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:28:c1:1c:41:48:b6:06:41:4c:0e:68:a7:db:a0:aa:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76bdb809f4dde44c82a9e5bd8b7712d6d763bf0b
        Validity
            Not Before: Feb  4 13:04:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0c49481b6238a685f14cbcb19a4f2a1e14e822b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b0:08:28:6c:b1:eb:0c:30:bc:eb:04:b0:23:
                    c9:32:2d:6a:c3:c6:35:9a:0b:24:35:ee:70:2a:9e:
                    0d:b7:5c:39:5b:64:c6:16:9f:47:e7:50:c3:67:e7:
                    3b:38:dd:02:e8:53:47:dc:43:b7:e6:ce:ae:74:ac:
                    e1:47:21:40:94:05:64:55:79:57:c1:61:d2:77:09:
                    16:d5:7a:2a:20:fc:3d:bc:83:dc:ff:da:9b:93:5e:
                    20:49:09:56:59:ea:ac:25:d0:b0:da:0b:15:f1:96:
                    4c:7d:86:58:02:18:8a:8f:37:a6:ce:7e:10:76:eb:
                    49:a8:67:ff:d9:81:f7:aa:d8:0e:4f:f8:38:77:fd:
                    3e:8d:74:a1:61:01:b9:37:76:70:14:88:04:e3:05:
                    86:08:c1:d8:be:df:99:42:c7:51:d5:23:40:9e:44:
                    df:46:3e:32:cc:82:84:63:bf:75:49:ad:c3:44:a4:
                    67:e6:fd:8c:39:46:89:99:e7:f1:c9:f7:4f:f5:8f:
                    56:fa:4c:c0:d6:4f:9b:89:2c:8a:73:c7:c6:0c:4e:
                    ea:43:97:73:15:4a:bf:44:c9:e0:a3:24:b8:5c:6d:
                    5a:b4:50:51:68:ea:45:6a:ef:20:57:e3:f4:c0:49:
                    dc:bd:c3:ec:01:86:f1:c3:2e:43:1c:5b:5d:ff:58:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:49:48:1B:62:38:A6:85:F1:4C:BC:B1:9A:4F:2A:1E:14:E8:22:B7
            X509v3 Authority Key Identifier:
                keyid:76:BD:B8:09:F4:DD:E4:4C:82:A9:E5:BD:8B:77:12:D6:D7:63:BF:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/DElIG2I4poXxTLyxmk8qHhToIrc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.242.192.0/23
                IPv6:
                  2a0f:1dc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:11:ff:b3:b8:0a:b1:16:a3:54:43:c7:f4:88:64:1a:68:ac:
         33:ca:71:4c:b8:f2:09:b5:b5:e7:7d:19:ca:58:66:30:c0:89:
         a3:8a:56:c9:65:13:2d:69:94:3a:e5:7b:8e:f4:83:aa:e0:ff:
         77:df:46:d4:a2:31:fc:52:df:03:a9:b5:46:33:f3:16:b8:66:
         dc:be:17:fa:14:a0:cc:06:82:9b:dc:47:1d:c4:e3:17:31:4f:
         53:b3:91:97:b9:e3:0a:40:84:98:01:90:33:ff:63:60:33:f8:
         89:12:b7:e8:86:60:02:cb:4b:04:84:5d:2a:f5:d0:0d:53:aa:
         09:12:44:bb:e9:d5:ab:17:69:6c:e1:36:a5:45:1c:55:b3:5a:
         a5:2b:da:df:c2:89:d8:68:82:66:66:bf:6e:38:78:7a:34:2c:
         d9:08:14:18:b4:e4:3a:ad:52:42:25:c9:33:b6:a6:9d:01:05:
         80:ed:26:9a:23:91:3b:ea:a2:9a:f6:83:56:c9:95:f8:1a:3d:
         4c:cd:fd:4b:22:2f:15:22:e3:57:09:69:28:80:fa:56:74:15:
         d2:fd:8f:6a:50:a6:47:20:88:46:85:b0:2a:59:ea:7b:4c:31:
         7b:97:ef:14:0a:eb:10:80:25:dc:9a:45:aa:a9:a6:9f:e8:cf:
         e4:21:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:48:49 2026 by rpki-client