This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa
File:                     DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (raw, json)
Hash identifier:          yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=
Subject key identifier:   0D:CA:D1:26:0A:91:36:9B:E8:09:64:4F:26:AF:A0:7D:9F:5C:4D:27
Certificate issuer:       /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial:       019B775958608F6A1AA11B9B93113B0E1837
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa
Signing time:             Thu 01 Jan 2026 02:18:22 +0000
ROA not before:           Thu 01 Jan 2026 02:18:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199479
IP address blocks:        185.14.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Feb 2026 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:58:60:8f:6a:1a:a1:1b:9b:93:11:3b:0e:18:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
        Validity
            Not Before: Jan  1 02:18:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0dcad1260a91369be809644f26afa07d9f5c4d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:0e:6c:37:e7:81:6c:6a:b2:48:c0:a8:0b:
                    ae:ca:fa:a9:b6:c0:41:f5:25:b5:5d:90:3d:a2:4c:
                    2e:6d:96:86:27:f3:4a:3d:35:69:cc:d3:0e:f1:d0:
                    9b:7f:af:c3:b8:5c:a1:89:6c:33:a3:e5:85:4c:02:
                    b6:a8:be:64:76:f0:64:c2:c5:15:b4:ca:37:a8:85:
                    c9:7a:c4:49:2c:8d:ee:a1:30:b7:45:f4:e2:09:22:
                    34:43:64:7f:da:30:a5:21:e4:1d:47:52:08:8c:2e:
                    8a:3c:9f:54:16:84:06:f9:25:40:96:ac:97:01:91:
                    8a:25:fd:77:68:5e:7a:2d:e4:fa:e5:ab:ae:21:d8:
                    62:59:41:30:32:f8:0a:f9:41:45:47:13:8e:19:01:
                    56:3e:17:2f:77:4a:04:f8:5a:18:cf:9f:e1:f8:d9:
                    79:bf:a0:7c:cd:6d:fb:00:7b:44:b2:00:71:5b:6c:
                    f3:42:50:5d:50:49:02:5f:fc:10:80:61:d6:5d:0d:
                    50:58:d2:76:a2:74:ae:fa:61:e2:1b:ac:59:eb:b5:
                    c1:05:e3:93:12:92:22:01:68:4d:40:09:e0:84:f4:
                    d0:58:13:02:93:12:98:74:ea:60:0b:62:26:62:90:
                    43:cb:35:d7:73:2c:c8:79:54:b1:7a:e6:f4:fc:d7:
                    03:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CA:D1:26:0A:91:36:9B:E8:09:64:4F:26:AF:A0:7D:9F:5C:4D:27
            X509v3 Authority Key Identifier:
                keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.14.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:56:f1:b9:27:2e:b5:b2:79:3f:ba:d5:fc:9a:2e:5f:7d:68:
         03:6f:fe:d7:77:8e:b5:89:29:e0:f1:7e:04:fe:98:20:16:27:
         d8:c4:c2:5d:f5:0a:27:f2:bf:95:b3:cd:4d:bf:1c:64:a1:cd:
         d4:96:56:fb:92:51:58:9e:fe:22:8c:bd:cc:ba:1a:f6:cf:e0:
         bf:bd:e3:85:12:aa:a5:b0:ca:27:8a:fd:c5:c2:29:cd:6f:20:
         16:97:a4:a5:d8:5a:41:f6:00:e4:24:3e:65:cd:0e:73:3a:05:
         2d:72:a8:9a:61:4a:59:d0:e3:36:ab:fd:26:81:62:28:fa:01:
         c7:e0:0b:3f:56:5e:02:79:3a:11:20:bc:21:33:a5:ba:30:01:
         d6:4b:82:93:59:cf:9c:7f:87:b6:d2:b7:6c:7a:35:46:7f:9d:
         7f:0e:dc:37:98:e0:c9:c6:0f:de:ea:41:6a:50:d1:c6:c2:24:
         c9:20:29:a2:51:63:c5:a6:a9:bc:b2:69:68:ed:9d:b4:e6:24:
         45:ea:88:c4:0b:37:c4:f4:7e:22:e5:50:a1:b8:13:84:92:9b:
         fa:f9:76:d4:28:d4:68:e0:8d:04:81:e0:9e:fc:35:7b:84:16:
         e8:17:75:ba:da:2c:18:2a:bc:a8:cf:0c:58:a1:77:9d:ba:ed:
         26:c8:9f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 13 11:26:46 2026 by rpki-client