This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/01aDFcgwpP0gaeNsCEBXvu9EqVo.roa
File:                     01aDFcgwpP0gaeNsCEBXvu9EqVo.roa (raw, json)
Hash identifier:          X2qj0FduSAsiEFG0pH2Wl6RB6wezxtiHDycSdWfuHyg=
Subject key identifier:   D3:56:83:15:C8:30:A4:FD:20:69:E3:6C:08:40:57:BE:EF:44:A9:5A
Certificate issuer:       /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial:       019B7E37D77BA6761369D5419B0E53774709
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/01aDFcgwpP0gaeNsCEBXvu9EqVo.roa
Signing time:             Fri 02 Jan 2026 10:19:07 +0000
ROA not before:           Fri 02 Jan 2026 10:19:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38955
IP address blocks:        81.19.144.0/20 maxlen: 27
                          178.23.80.0/21 maxlen: 23
                          185.16.188.0/22 maxlen: 24
                          185.16.188.0/24 maxlen: 32
                          185.16.190.0/24 maxlen: 24
                          185.115.184.0/23 maxlen: 23
                          185.115.186.0/23 maxlen: 23
                          185.164.4.0/23 maxlen: 23
                          185.164.6.0/23 maxlen: 23
                          185.173.140.0/22 maxlen: 24
                          2a00:1a68::/32 maxlen: 34
                          2a0a:7c00::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:d7:7b:a6:76:13:69:d5:41:9b:0e:53:77:47:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
        Validity
            Not Before: Jan  2 10:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d3568315c830a4fd2069e36c084057beef44a95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b8:7c:bd:30:70:c1:13:6f:23:06:aa:bd:5b:
                    b9:56:24:41:38:91:19:02:e4:7a:04:f8:ac:22:9c:
                    82:78:e4:ef:43:80:64:61:f7:a2:6f:4c:c6:86:de:
                    3d:d0:8b:bf:36:9e:d4:44:43:76:3b:4f:6c:89:0a:
                    0a:75:81:4e:2f:ef:51:b3:38:23:52:ff:59:cc:e9:
                    f2:16:37:df:55:d8:f7:24:8a:5e:d1:f7:29:cb:1d:
                    7b:63:62:7e:de:b3:db:25:38:c3:a7:ac:d5:6c:dd:
                    8f:e9:bf:3b:c9:ea:6d:c7:96:31:70:82:d5:53:7f:
                    0f:ac:da:0f:a0:f4:fc:5e:e4:94:7a:c9:c9:b4:6c:
                    9f:2b:d0:26:a6:d0:55:c0:8b:b1:ba:77:c5:dd:44:
                    50:16:dd:6a:e6:29:86:7f:03:a0:a4:1d:53:0f:12:
                    75:10:91:33:65:4f:58:51:53:12:1a:60:60:9d:98:
                    34:79:a4:bb:b4:c0:c2:8f:31:53:63:7a:fe:3f:55:
                    05:3d:8f:ae:ec:76:b7:f6:58:90:90:fe:d3:8f:0b:
                    d9:63:ba:b1:4f:2c:40:a0:cb:3d:dd:ec:90:67:8c:
                    42:14:ac:57:cd:e1:f0:59:ae:af:da:a1:b6:a4:09:
                    3d:11:bb:cc:66:a9:22:29:ca:65:f7:6c:96:28:69:
                    e4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:56:83:15:C8:30:A4:FD:20:69:E3:6C:08:40:57:BE:EF:44:A9:5A
            X509v3 Authority Key Identifier:
                keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/01aDFcgwpP0gaeNsCEBXvu9EqVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.19.144.0/20
                  178.23.80.0/21
                  185.16.188.0/22
                  185.115.184.0/22
                  185.164.4.0/22
                  185.173.140.0/22
                IPv6:
                  2a00:1a68::/32
                  2a0a:7c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         54:01:dd:65:c3:e2:f6:ee:98:f5:1c:43:ab:13:b4:b3:96:5b:
         58:bd:42:21:65:3f:58:5d:72:ca:e6:a0:b8:a2:9d:56:34:28:
         08:c3:05:dc:9e:6a:af:d7:36:81:b7:04:73:e4:8d:11:63:e9:
         7e:6e:9c:9f:db:dd:b0:a6:b4:6b:c0:e0:67:81:17:2b:b0:4d:
         41:f7:c1:3f:ec:28:ca:8b:18:f5:15:58:f4:dd:54:71:5d:42:
         a5:ca:4f:0a:14:f7:ac:03:39:58:b4:df:99:50:79:27:d6:a6:
         97:ce:6d:95:fe:b2:71:12:53:3a:14:d7:9c:31:9b:12:c7:05:
         b0:a7:a5:91:bc:61:ad:f1:f2:a2:17:5e:30:d8:bf:78:3f:d3:
         33:c8:d9:23:0a:f0:3e:33:0e:63:57:b7:fc:57:50:53:46:4a:
         fc:0f:17:ee:02:29:6f:6c:2c:76:80:b3:81:f6:10:d9:7d:ee:
         21:d1:3b:76:7c:c2:39:5d:b4:62:91:02:26:9f:a7:e0:41:d1:
         19:0e:ed:71:57:d2:73:52:99:b0:b4:a5:7e:80:a1:22:c0:77:
         90:3e:ae:93:47:5f:9d:c0:ad:fd:c5:e3:74:79:3f:98:35:21:
         c8:b4:47:0a:1d:6a:be:7b:c6:9f:6f:07:79:c5:1b:e1:93:3c:
         31:f3:42:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:25 2026 by rpki-client