This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/263aCZuGSnOQtZUuvPPijDVTZSc.roa
File:                     263aCZuGSnOQtZUuvPPijDVTZSc.roa (raw, json)
Hash identifier:          DAj4P0HCku/MmHa3cvQupHFR7QX9AGvlQEPPvscGm7A=
Subject key identifier:   DB:AD:DA:09:9B:86:4A:73:90:B5:95:2E:BC:F3:E2:8C:35:53:65:27
Certificate issuer:       /CN=128119ac178e37989036ea29a2c0f4630696cfe8
Certificate serial:       019B44EB999A21BE4FC367FAD1183A2353BE
Authority key identifier: 12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/263aCZuGSnOQtZUuvPPijDVTZSc.roa
Signing time:             Mon 22 Dec 2025 07:17:29 +0000
ROA not before:           Mon 22 Dec 2025 07:17:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     203468
IP address blocks:        213.177.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 10:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:44:eb:99:9a:21:be:4f:c3:67:fa:d1:18:3a:23:53:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128119ac178e37989036ea29a2c0f4630696cfe8
        Validity
            Not Before: Dec 22 07:17:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=dbadda099b864a7390b5952ebcf3e28c35536527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2c:a8:46:99:70:30:46:4e:22:d6:90:9f:89:
                    3f:00:e9:62:08:46:02:92:4b:25:7d:f2:76:e3:a7:
                    fb:df:1a:f9:74:dc:9e:d8:65:2d:2e:a2:b7:bd:d6:
                    dc:cc:32:d8:87:4c:a7:5f:91:8a:d5:b6:58:ea:23:
                    b8:3b:0d:d1:07:15:80:d7:72:3d:51:bc:47:03:f2:
                    0f:8a:18:f7:8e:71:0b:4d:cc:e4:65:1a:5d:3c:a8:
                    18:73:d4:23:66:ee:4a:4d:86:8a:99:c7:2e:1f:d3:
                    30:43:c3:2b:a5:46:44:d1:40:4a:cd:81:02:e3:1c:
                    46:78:ff:0e:ca:f0:4b:81:f9:d0:c2:c9:43:ed:a4:
                    f0:ac:da:2e:f7:e8:ed:93:8b:29:c8:c4:94:0c:b4:
                    08:0b:96:58:21:b1:c8:d4:2f:7d:a9:35:5f:27:55:
                    03:a6:55:1d:11:54:db:23:0d:f9:a8:7a:ca:38:e6:
                    65:68:87:3b:c7:49:e1:a2:23:39:fb:ef:7c:97:e2:
                    48:ce:dc:86:c5:0a:7f:cb:ad:f8:86:3e:a9:40:a8:
                    d1:b3:76:54:c3:28:64:94:59:67:52:ae:ec:83:49:
                    e7:cb:b7:7d:31:d2:c0:25:e1:f8:c6:a2:90:3c:70:
                    fb:0b:8b:cc:13:73:80:07:8e:6e:d7:6a:f8:cb:37:
                    f4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AD:DA:09:9B:86:4A:73:90:B5:95:2E:BC:F3:E2:8C:35:53:65:27
            X509v3 Authority Key Identifier:
                keyid:12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/263aCZuGSnOQtZUuvPPijDVTZSc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.177.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:20:4f:a0:a5:81:21:8d:9f:2b:e6:f6:71:47:1b:c2:35:42:
         da:b9:c9:d4:69:17:57:7e:2d:ae:97:9c:b3:3b:d6:7d:0d:b0:
         bf:9b:db:2b:13:73:a6:92:5d:b8:9a:c8:30:95:40:71:0d:ed:
         df:66:3f:0a:9f:69:0a:56:d8:3e:58:24:2c:2b:75:79:c4:dd:
         bf:b6:ab:63:03:d2:6b:05:24:cd:b3:1f:5b:a7:26:a3:29:0c:
         c4:f4:f2:a2:9e:f1:32:14:5a:57:27:ee:98:c9:ef:38:4e:09:
         ab:e6:02:f1:ff:eb:8f:3b:c5:99:09:38:45:37:57:43:bb:52:
         d4:00:ed:94:8c:8c:f8:f3:05:8a:70:62:ca:a6:7b:50:34:fd:
         65:57:4b:f0:e4:5a:85:81:d2:cf:80:7d:ed:b0:de:aa:a3:83:
         da:55:ce:e6:24:dc:f2:80:92:39:ce:9a:b5:74:15:33:10:5e:
         dc:ea:db:b0:99:22:cf:69:eb:08:c3:a7:3f:86:46:8e:c0:21:
         24:a7:51:13:5c:1a:e8:61:53:cb:c4:21:bf:9e:a7:b3:ad:b8:
         cc:23:f6:3c:93:b1:d5:c1:4b:80:ea:6f:92:55:7d:73:ae:f8:
         e9:dd:f6:e0:f9:68:9f:68:0a:f1:1c:6b:6b:04:19:b2:77:90:
         62:c9:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 17:16:32 2025 by rpki-client