This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/Bt0xMHy61A7htWo3HwQx0xRHYvM.roa
File:                     Bt0xMHy61A7htWo3HwQx0xRHYvM.roa (raw, json)
Hash identifier:          NFwVkcrwORwq5qtsr2xFeijRYhFUAx9h0rzS5lfRuF4=
Subject key identifier:   06:DD:31:30:7C:BA:D4:0E:E1:B5:6A:37:1F:04:31:D3:14:47:62:F3
Certificate issuer:       /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial:       019B76EB7B4EB1CCC9ED1D4FC1E3D0148A16
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/Bt0xMHy61A7htWo3HwQx0xRHYvM.roa
Signing time:             Thu 01 Jan 2026 00:18:22 +0000
ROA not before:           Thu 01 Jan 2026 00:18:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209281
IP address blocks:        185.163.132.0/22 maxlen: 24
                          185.163.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:eb:7b:4e:b1:cc:c9:ed:1d:4f:c1:e3:d0:14:8a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
        Validity
            Not Before: Jan  1 00:18:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=06dd31307cbad40ee1b56a371f0431d3144762f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:08:fd:83:34:19:87:60:a4:a9:62:3d:63:ae:
                    05:e0:23:29:09:1b:c3:e3:3b:92:24:7f:6e:de:ce:
                    f2:90:5d:77:33:6d:cb:29:b0:77:d0:d3:3c:b9:06:
                    2a:da:a4:91:19:1b:0c:76:b1:86:80:dc:4a:f4:84:
                    79:9b:ee:a5:24:85:a8:3f:24:ca:49:f2:ff:7a:f1:
                    1d:fb:ff:cd:09:4b:7b:b3:f6:21:f3:29:19:24:23:
                    72:50:6c:ee:36:38:f9:02:ec:38:f5:55:71:61:0a:
                    27:0a:a2:f6:44:f0:41:fd:e9:9b:31:bf:67:91:9d:
                    e4:0c:06:2d:e9:39:86:98:f3:bf:78:32:84:43:78:
                    20:0f:74:3d:4f:8b:e5:4f:8e:bd:0c:57:92:46:b4:
                    af:0a:40:47:f6:b9:11:08:77:2a:ad:e1:1c:b4:13:
                    c9:2f:6b:14:44:25:64:67:61:b2:3d:62:b8:e3:f4:
                    73:80:fb:5f:4c:aa:2f:7d:97:ff:03:87:12:b1:22:
                    83:15:b2:ee:d1:59:3c:4a:4e:e3:29:21:5e:a9:ea:
                    1c:3e:c3:42:24:cf:16:3e:c8:82:bc:5f:40:b8:33:
                    6d:f3:03:1a:e3:8e:82:34:f8:32:7e:18:02:09:99:
                    b6:94:84:04:f5:61:2c:30:27:6a:43:35:63:09:b5:
                    1f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DD:31:30:7C:BA:D4:0E:E1:B5:6A:37:1F:04:31:D3:14:47:62:F3
            X509v3 Authority Key Identifier:
                keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/Bt0xMHy61A7htWo3HwQx0xRHYvM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.163.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:fa:f9:cf:9b:75:21:98:a9:65:03:a8:9d:f0:14:8e:c8:b2:
         44:ba:00:7e:78:ce:56:d8:b2:5b:ab:4e:44:4d:56:a8:0c:a6:
         2f:a3:0b:c6:ec:4f:00:1e:54:fa:ad:8a:f9:63:bb:57:05:e8:
         bb:23:89:be:1a:7e:d0:7e:f3:0b:69:ee:34:4f:51:2a:99:33:
         27:a2:20:b5:2e:8e:d1:8b:07:10:0c:d4:02:a4:4f:be:47:0d:
         e3:18:0d:57:99:ed:80:f5:4f:4b:66:ad:38:33:cb:5f:c7:01:
         fb:fc:ef:8a:a6:c5:06:74:2d:62:73:1b:cd:4e:71:5f:a9:c2:
         ed:13:a1:9d:1c:f4:01:50:b3:73:71:47:f6:a2:73:4a:2d:5d:
         8a:4d:d3:1a:db:96:2a:7e:5f:fe:68:30:92:4d:87:6d:7c:74:
         63:b4:be:e8:c0:cb:f5:09:f3:ff:7e:d9:ab:17:3c:1d:c4:df:
         a5:70:7f:ea:52:8a:dc:59:48:23:b5:55:55:21:9c:d8:5b:32:
         6d:31:67:bf:44:1f:f2:47:6a:d5:99:e0:54:bd:68:81:3f:18:
         9d:e7:00:81:eb:0c:4d:4e:ef:06:5d:2e:43:35:5b:9f:d3:cc:
         1b:85:cb:32:09:27:8c:f1:99:ca:25:5b:63:f1:23:45:74:01:
         ed:9b:0f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:23:08 2026 by rpki-client