This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/19p6fOMgkkdWHAD5wYa8YcanOJg.roa
File:                     19p6fOMgkkdWHAD5wYa8YcanOJg.roa (raw, json)
Hash identifier:          rnGvgMcdZ1KAFRQm/4KwKtGviKPEPWD+02A2Ol/U/dw=
Subject key identifier:   D7:DA:7A:7C:E3:20:92:47:56:1C:00:F9:C1:86:BC:61:C6:A7:38:98
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       019B7E393058D0C37BDF7D651538827C9E96
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/19p6fOMgkkdWHAD5wYa8YcanOJg.roa
Signing time:             Fri 02 Jan 2026 10:20:35 +0000
ROA not before:           Fri 02 Jan 2026 10:20:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198831
IP address blocks:        163.5.59.0/24 maxlen: 24
                          185.253.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 13:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:30:58:d0:c3:7b:df:7d:65:15:38:82:7c:9e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jan  2 10:20:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d7da7a7ce3209247561c00f9c186bc61c6a73898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:0f:9e:70:8a:e2:6d:83:fb:3f:0a:09:94:
                    96:2f:98:4a:b7:92:70:bb:ce:3d:02:bc:d8:e3:a7:
                    df:35:4a:ad:f1:33:5c:c8:4b:b1:f5:37:50:46:b1:
                    3b:78:21:4e:d9:be:5f:60:cb:c5:dd:40:b4:80:04:
                    05:8d:54:7f:9d:e7:b1:99:b4:ef:46:e2:39:f4:33:
                    7e:85:7f:02:e1:d6:87:f7:58:e8:ce:72:4e:c5:59:
                    26:1e:f7:31:24:82:79:2a:ba:d8:2b:a6:05:34:59:
                    9d:08:39:81:f4:c5:95:10:a8:0a:df:a9:08:9a:53:
                    c2:01:e5:64:36:65:df:56:e7:ed:5f:91:6d:09:82:
                    e2:45:d7:4d:35:ec:9d:3e:4f:58:10:8d:ad:56:30:
                    59:6f:aa:a1:e4:3b:87:cc:8b:28:b7:00:cc:8f:2e:
                    0c:d3:69:f8:82:45:93:0b:7f:a4:ec:dd:a7:5c:93:
                    1a:3e:74:0a:5c:de:83:6a:06:13:79:78:e2:89:23:
                    30:97:b6:0c:8e:9f:6f:40:cc:a7:ca:44:06:cc:49:
                    97:6d:18:95:85:4d:cb:0f:16:67:38:42:f7:3e:4d:
                    7b:2e:f8:36:1e:43:44:04:0b:62:18:b5:27:88:1b:
                    45:d0:ea:1b:23:fc:4b:09:87:96:8b:21:c4:d6:98:
                    0d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DA:7A:7C:E3:20:92:47:56:1C:00:F9:C1:86:BC:61:C6:A7:38:98
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/19p6fOMgkkdWHAD5wYa8YcanOJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.59.0/24
                  185.253.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:cb:55:83:85:d5:2a:3f:3c:39:08:4b:80:b9:32:bd:37:ca:
         8f:69:27:f1:f5:a8:ca:17:81:e9:a6:38:09:9a:c8:cd:18:f6:
         96:71:ea:a3:58:10:09:fc:8a:c6:e5:6c:f7:24:0a:ba:2c:bc:
         c3:1f:2c:60:62:bc:06:43:63:8a:a3:5a:c9:58:e5:fa:4b:2f:
         28:e4:50:87:c2:38:91:89:c8:51:f8:6f:d1:03:ad:ff:60:fb:
         1b:c0:da:cf:23:bf:f8:bb:a1:e0:39:36:d1:ca:c9:02:38:98:
         d7:98:40:87:e1:8d:2b:ca:cf:aa:dd:a9:00:90:6c:bd:d8:13:
         fd:49:ad:46:17:38:8f:e8:71:61:b6:9b:57:ac:85:0a:1f:59:
         f5:36:ac:92:0e:f3:27:36:b6:90:82:01:b6:fc:a4:ee:b6:17:
         45:66:03:e3:dc:97:2a:46:66:65:02:93:ca:95:ba:12:1a:98:
         c4:c9:f7:6b:c9:1d:3f:4b:ad:b0:19:9c:31:95:8a:1b:32:7a:
         d6:a7:1f:1d:aa:2b:df:9c:8d:2d:17:50:c7:d3:b6:5c:04:62:
         1f:ef:79:3b:d8:0f:51:96:25:e1:53:46:7c:22:ac:e7:ed:69:
         d5:78:04:a1:9b:45:a2:ba:7b:b3:d5:cd:a8:12:79:29:1e:51:
         1d:55:3b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 19:57:58 2026 by rpki-client