This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/1-dlVSJ7JEEPisJQ9EP0HveRpK-4.roa
File:                     1-dlVSJ7JEEPisJQ9EP0HveRpK-4.roa (raw, json)
Hash identifier:          RiIz/j+OmLa7FEdZbMFlKrhGfrujyA65C/HnMjy7A3s=
Subject key identifier:   F9:D9:55:48:9E:C9:10:43:E2:B0:94:3D:10:FD:07:BD:E4:69:2B:EE
Certificate issuer:       /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial:       019B7D5B939AA5E5912FE47A5D7C04BAB7E3
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/1-dlVSJ7JEEPisJQ9EP0HveRpK-4.roa
Signing time:             Fri 02 Jan 2026 06:18:32 +0000
ROA not before:           Fri 02 Jan 2026 06:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     52221
IP address blocks:        188.92.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:93:9a:a5:e5:91:2f:e4:7a:5d:7c:04:ba:b7:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
        Validity
            Not Before: Jan  2 06:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f9d955489ec91043e2b0943d10fd07bde4692bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:31:75:1b:58:9d:c9:32:41:86:65:75:d5:
                    92:db:2c:e5:51:3f:5d:64:66:81:76:2f:89:58:14:
                    a0:0c:c7:e6:22:46:5d:20:db:c8:ff:a1:8a:e5:56:
                    d3:1a:f7:77:4c:91:a7:20:e5:bb:3c:e2:b1:63:21:
                    46:4f:ae:91:a2:0a:2f:8e:cc:db:b8:0a:a4:7b:2c:
                    ed:e1:e1:7b:32:b6:d2:05:ec:e6:ac:35:83:91:ea:
                    9f:42:87:c0:a3:9e:94:1f:f3:31:bb:36:fe:8a:39:
                    a3:0f:44:98:92:f9:e6:4e:b0:3c:02:c2:dd:32:61:
                    19:22:c9:f7:b2:e5:85:39:c0:f0:c0:54:bf:05:1a:
                    03:9f:33:1f:ff:d2:93:bc:5f:3c:ae:81:cd:79:cf:
                    a7:06:ee:23:0b:36:61:ec:04:f0:db:c6:d9:c0:2a:
                    80:41:1e:2b:e6:4d:70:f5:ac:d5:cc:ce:e4:ee:77:
                    e2:09:f7:13:b1:68:11:e4:27:79:be:69:80:55:b2:
                    8c:ab:11:1b:52:9b:1f:d3:43:a2:ab:37:55:fc:02:
                    8a:66:3a:4a:da:82:d2:f1:1c:0c:63:a2:0f:e4:1f:
                    35:cc:ac:e4:cf:3e:c8:03:58:00:d5:cb:4e:8e:e6:
                    82:50:35:10:d7:1d:13:d2:ce:64:11:4b:81:ef:3e:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D9:55:48:9E:C9:10:43:E2:B0:94:3D:10:FD:07:BD:E4:69:2B:EE
            X509v3 Authority Key Identifier:
                keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/1-dlVSJ7JEEPisJQ9EP0HveRpK-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.92.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d5:bd:23:ef:bb:29:eb:cb:7c:dd:63:e0:98:3b:5e:fe:a4:
         c3:ef:aa:1d:5d:62:59:48:32:b0:9d:68:e1:4c:eb:b7:ab:2c:
         ca:b0:06:2c:2a:f9:b0:ee:be:23:f7:3d:64:7f:6c:9f:97:f4:
         ba:f3:ab:95:38:7a:e0:a3:1b:95:db:9e:bb:ab:2d:d9:aa:b9:
         fb:78:41:cf:ce:a1:7c:a0:dd:b6:e2:3d:2d:1c:fb:5c:d5:c1:
         a2:27:f6:5f:b1:4e:54:19:29:ba:41:90:88:76:f8:db:46:fb:
         2a:aa:fc:11:b4:33:3f:ae:97:82:a8:de:44:1e:15:56:36:b5:
         5b:80:a3:02:a0:19:bf:3c:39:c2:70:d5:e9:15:d5:c6:c2:a0:
         86:11:8a:6c:f0:ff:43:50:88:06:68:01:9b:26:b2:13:50:14:
         70:d2:05:4d:48:af:a3:dc:51:70:f2:81:63:e5:13:f4:90:49:
         ee:5a:63:63:4d:c3:20:af:f5:bc:10:bd:28:c1:22:55:a0:40:
         30:35:1a:33:d9:5e:10:49:f9:6b:f7:72:d1:3d:e1:ac:a6:ed:
         a9:b0:23:75:39:c3:5f:ed:90:af:0c:e6:49:1b:32:e0:24:44:
         4e:2d:26:f7:e5:48:ca:26:e3:df:78:51:c0:d2:ff:d5:c2:db:
         e9:8c:1f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:32 2026 by rpki-client