This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/C5jsnVKUNd-QjxAfcYEN208S_pw.roa
File:                     C5jsnVKUNd-QjxAfcYEN208S_pw.roa (raw, json)
Hash identifier:          hPHsfdIlUzljJe1+AZwmO8/boBM8APNo8d6nTn8lWf0=
Subject key identifier:   0B:98:EC:9D:52:94:35:DF:90:8F:10:1F:71:81:0D:DB:4F:12:FE:9C
Certificate issuer:       /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Certificate serial:       019B7D5CA35AAB59A74725624529A8A33C53
Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/C5jsnVKUNd-QjxAfcYEN208S_pw.roa
Signing time:             Fri 02 Jan 2026 06:19:41 +0000
ROA not before:           Fri 02 Jan 2026 06:19:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205042
IP address blocks:        185.78.184.0/22 maxlen: 22
                          188.74.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:a3:5a:ab:59:a7:47:25:62:45:29:a8:a3:3c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
        Validity
            Not Before: Jan  2 06:19:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0b98ec9d529435df908f101f71810ddb4f12fe9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:9f:b2:da:68:65:cf:45:0c:40:f3:cf:9c:
                    c4:00:e2:c6:cd:49:38:83:ec:0c:42:01:3c:f3:2a:
                    d6:e3:42:d1:f5:81:e6:2e:61:27:62:a7:b8:40:24:
                    3b:d0:70:c8:9c:cf:93:dc:d5:a7:e9:a3:8c:3a:5d:
                    04:2f:e6:d3:8c:a6:ce:f6:25:ee:85:5f:a3:a0:12:
                    7d:28:2a:6c:e4:a2:44:d6:3f:d9:a7:6b:fb:5e:bf:
                    73:ee:f1:a4:ec:97:ff:b5:b4:2e:5f:0d:07:1d:4b:
                    77:5b:b0:10:aa:21:ab:39:90:3f:39:a8:01:18:5c:
                    16:4a:a5:79:ab:8a:43:51:8d:1f:95:45:20:a2:39:
                    ef:5f:f5:52:ef:d3:41:90:e5:a4:8c:35:49:1e:de:
                    c0:14:27:62:86:95:a2:5a:41:25:2c:e9:09:b7:ad:
                    cf:c3:0f:27:5a:9a:fb:8e:9b:be:41:9e:a2:74:4b:
                    76:d0:2b:21:cb:1c:b3:c3:d0:0f:20:47:21:04:80:
                    c7:8a:8b:03:4b:09:09:35:19:ed:4a:95:82:d5:94:
                    fa:1d:95:a7:62:95:cc:97:81:19:8b:61:a7:3f:e3:
                    a6:ba:f7:22:a6:a8:98:7c:ac:cb:f0:9e:de:f0:6b:
                    e7:a8:4f:b8:6e:57:03:b4:22:e1:c2:7f:76:92:d3:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:98:EC:9D:52:94:35:DF:90:8F:10:1F:71:81:0D:DB:4F:12:FE:9C
            X509v3 Authority Key Identifier:
                keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/C5jsnVKUNd-QjxAfcYEN208S_pw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.78.184.0/22
                  188.74.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:b1:1d:1f:7d:e5:bc:c5:5a:3d:4e:17:75:5e:49:6b:f0:8b:
         d0:df:a6:65:36:41:22:ec:62:3e:01:e7:42:1a:2d:89:04:97:
         74:d0:88:69:5a:d8:bc:68:b7:52:e7:14:e9:e1:01:fb:43:69:
         97:22:89:c4:22:4c:14:b0:cd:52:f1:bc:c9:e1:a3:57:36:28:
         95:74:2c:b8:de:26:52:d5:46:87:d0:8c:84:78:c2:29:ec:01:
         08:bd:3b:ea:4e:db:c7:f2:34:16:cf:cd:67:a5:2d:16:5f:a9:
         18:7f:f4:25:0e:bd:f0:6b:c6:34:d5:e6:dd:85:07:5d:5f:bc:
         57:ac:ef:b9:ab:6e:26:6b:c5:93:dd:86:c3:1f:5d:25:1e:2c:
         60:6f:f6:89:17:3d:9b:84:5e:50:5a:22:41:5e:78:b8:49:ed:
         a9:b8:9f:00:58:c3:aa:f3:e9:07:05:db:6a:6c:f0:5e:9f:5f:
         84:38:34:b3:1b:a9:31:a4:5f:17:61:9a:09:04:4f:5a:15:b8:
         d0:3f:2b:d5:cd:82:86:5c:6e:4c:f0:a5:3f:d0:1b:47:2c:1d:
         37:4b:11:d6:aa:a3:1b:a6:a3:a9:44:82:72:58:c2:2e:23:99:
         d1:98:16:bd:af:a6:b6:ce:c8:78:4d:81:14:0b:05:4b:99:0b:
         8e:5d:8f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:39 2026 by rpki-client