This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/dTiJsEq_JJ5524hOgqQnN8Ddhhg.roa
File:                     dTiJsEq_JJ5524hOgqQnN8Ddhhg.roa (raw, json)
Hash identifier:          C8qRzW17uM9hsxbqGg5gMXnbyDi7MEbAVWHt31dT0Ag=
Subject key identifier:   75:38:89:B0:4A:BF:24:9E:79:DB:88:4E:82:A4:27:37:C0:DD:86:18
Certificate issuer:       /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial:       019B7AC7B67D275F7045F6846F7A7727A269
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/dTiJsEq_JJ5524hOgqQnN8Ddhhg.roa
Signing time:             Thu 01 Jan 2026 18:17:47 +0000
ROA not before:           Thu 01 Jan 2026 18:17:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215403
IP address blocks:        45.92.12.0/24 maxlen: 24
                          45.92.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c7:b6:7d:27:5f:70:45:f6:84:6f:7a:77:27:a2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
        Validity
            Not Before: Jan  1 18:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=753889b04abf249e79db884e82a42737c0dd8618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:41:24:cf:4a:b2:46:30:e5:34:5b:3d:e8:73:
                    26:12:29:9e:20:5d:86:20:9c:e3:72:14:3d:77:d7:
                    dd:dd:92:3d:18:49:45:07:eb:e9:c4:bf:e4:c7:2f:
                    01:88:ea:18:4b:9c:7d:84:8c:8f:cb:c2:c6:e0:ba:
                    fc:22:39:64:94:ea:b7:de:d9:5a:e4:fe:0e:25:a2:
                    5c:89:ef:ac:db:ba:eb:13:e3:51:33:07:a7:a1:b3:
                    61:d5:f9:8e:eb:74:b6:35:92:c3:10:34:a4:05:0f:
                    bb:74:78:04:f6:e2:75:4e:f5:bb:58:b0:25:f7:c1:
                    85:4f:9c:74:9f:a3:1b:af:39:ce:b9:a2:af:0b:bb:
                    92:db:0b:3f:00:e3:2d:32:9f:f8:75:86:b3:3d:67:
                    96:86:27:91:df:7f:57:99:2e:31:0d:8c:4d:fc:ba:
                    41:0a:49:c8:10:0b:13:9c:39:60:d3:93:37:ce:5e:
                    63:55:4f:0b:42:a7:90:a0:0f:9b:e9:71:0e:de:e7:
                    10:e9:2d:a3:d4:d2:1d:75:49:53:95:ff:54:1b:14:
                    e8:95:ea:ed:d9:85:b2:48:52:cb:22:59:84:82:7e:
                    52:3c:81:a1:32:10:98:7d:9a:c7:e3:59:ce:4f:7c:
                    bf:38:ab:2b:2d:4f:21:26:c3:03:37:44:af:7a:f7:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:38:89:B0:4A:BF:24:9E:79:DB:88:4E:82:A4:27:37:C0:DD:86:18
            X509v3 Authority Key Identifier:
                keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/dTiJsEq_JJ5524hOgqQnN8Ddhhg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:08:7c:f3:f6:60:7e:96:df:9b:4e:8f:f0:e3:1f:51:dc:01:
         ab:da:bb:bc:1a:f7:2d:27:74:fe:33:f6:67:c9:04:4d:c3:5e:
         fe:c3:84:7d:d4:18:c6:b3:e9:76:77:35:29:d5:c9:f4:60:61:
         8a:d4:38:22:e6:44:82:a5:11:62:7c:f7:47:d7:9e:df:0b:e3:
         72:79:b8:a2:27:1b:7e:38:a6:6b:e4:32:c4:30:48:d6:a7:4c:
         0f:a4:ab:0e:c4:11:a4:e9:5d:ba:ae:ff:74:f5:c4:84:bf:d0:
         b9:87:51:05:e3:3f:0c:8f:ea:20:65:4e:7c:a2:f5:bb:73:eb:
         21:06:59:c9:06:ea:e2:f0:c8:55:db:41:ea:c2:7d:f1:e2:39:
         8d:29:83:d4:4f:5b:1d:f3:82:2c:69:c2:46:1e:a8:ed:13:fc:
         74:6a:76:ec:3a:d2:9c:5d:6a:86:2a:ee:8d:1e:e1:34:e3:d3:
         98:6d:49:b4:69:c1:c2:40:b0:e3:de:4f:25:27:7e:21:b7:7b:
         9c:6a:e2:45:4f:a3:f2:52:17:f5:0c:d5:67:a7:c4:91:bd:ef:
         10:1f:dd:9a:26:d4:6e:d7:35:66:ff:41:c4:a7:86:c9:a7:d1:
         3b:11:c6:a5:22:90:ca:3b:ec:5b:2b:a9:1e:3f:93:f4:fc:84:
         09:31:38:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:09:33 2026 by rpki-client