This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/0V0swpWjFjeVPqWf_UnTN_5aN_c.roa
File:                     0V0swpWjFjeVPqWf_UnTN_5aN_c.roa (raw, json)
Hash identifier:          yyF6Vx5pBt9ed5ZOE5ouGaUbQamlPSAGeUtJJ2Wer1E=
Subject key identifier:   D1:5D:2C:C2:95:A3:16:37:95:3E:A5:9F:FD:49:D3:37:FE:5A:37:F7
Certificate issuer:       /CN=3b363e09bd6942adab42415999f979990ab96682
Certificate serial:       019B7B35E8680517F972581C6582A13BA8D6
Authority key identifier: 3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/0V0swpWjFjeVPqWf_UnTN_5aN_c.roa
Signing time:             Thu 01 Jan 2026 20:18:09 +0000
ROA not before:           Thu 01 Jan 2026 20:18:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211140
IP address blocks:        149.255.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:e8:68:05:17:f9:72:58:1c:65:82:a1:3b:a8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b363e09bd6942adab42415999f979990ab96682
        Validity
            Not Before: Jan  1 20:18:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d15d2cc295a31637953ea59ffd49d337fe5a37f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:bc:eb:3b:fe:18:2d:1d:fb:02:64:74:f5:
                    31:1f:06:4a:da:dc:47:11:a6:5e:0b:e9:f8:23:9e:
                    58:53:27:93:c7:ce:13:0a:1b:f8:de:81:a9:c0:9d:
                    9d:8f:3e:f8:9d:e1:9c:87:ed:1c:1e:81:0f:1f:f0:
                    79:58:61:fc:e4:57:3b:f4:35:43:e5:f4:33:b1:b8:
                    30:28:8d:03:15:df:1d:a3:52:f6:aa:42:32:90:b4:
                    7e:23:ff:28:07:b6:26:9c:15:ec:b4:e8:fa:63:dd:
                    f2:96:3c:00:7b:1e:7a:e2:be:13:e1:cc:2e:ea:8f:
                    48:fa:7d:30:33:05:8b:b6:36:db:11:65:0a:1d:6e:
                    fb:b4:fe:ea:3f:6e:e2:c0:4a:aa:2a:fa:82:9f:27:
                    d6:f4:d8:7b:46:b1:fd:42:fa:f4:72:7e:c5:25:52:
                    6a:b5:8f:ea:d2:d7:0f:54:05:66:a9:da:41:68:18:
                    b7:eb:52:86:17:4e:cd:2e:c7:6a:28:3f:b3:e2:03:
                    be:fc:d2:e7:45:be:ee:0c:3f:37:e4:bd:14:71:1a:
                    56:f1:9e:30:bc:4a:82:16:7c:69:f1:33:c6:82:d4:
                    f0:0f:95:b2:2b:42:d3:48:b1:69:31:bf:1e:49:44:
                    5e:fc:4c:dd:ca:15:e8:6d:bc:e7:69:76:04:06:9a:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5D:2C:C2:95:A3:16:37:95:3E:A5:9F:FD:49:D3:37:FE:5A:37:F7
            X509v3 Authority Key Identifier:
                keyid:3B:36:3E:09:BD:69:42:AD:AB:42:41:59:99:F9:79:99:0A:B9:66:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/0V0swpWjFjeVPqWf_UnTN_5aN_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a721a0-edba-476d-8be3-141422940385/1/OzY-Cb1pQq2rQkFZmfl5mQq5ZoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.255.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:83:d0:7f:d6:45:cf:fa:3e:ba:18:7a:c8:75:5c:98:bd:b0:
         33:44:c5:09:62:d3:7a:f9:25:10:14:10:34:c5:1e:ba:d7:2a:
         e5:f8:82:a6:b7:f1:cf:cb:f2:8f:03:4a:78:15:70:dc:2d:2e:
         45:b1:b2:2e:0c:b5:13:c6:58:dc:66:9b:ec:9f:25:8b:45:d9:
         4e:e2:7a:d5:5a:fb:48:28:76:00:fc:1a:7b:16:cd:00:5e:cc:
         09:5e:b9:e1:c4:1f:7c:46:e5:0d:8a:d2:c8:e3:20:db:5e:a6:
         0d:a2:b2:49:b6:56:b4:f4:43:15:4e:ca:2d:14:4e:cd:27:8c:
         dd:1a:be:2d:22:83:ad:d9:6e:15:37:11:e4:7e:63:e5:ef:14:
         64:9e:4d:3f:44:56:18:1e:d2:5e:1a:f9:34:13:aa:e0:5c:2a:
         56:b8:ee:4f:3d:3b:91:7f:84:3e:d2:f7:8f:89:09:d3:5d:d1:
         a4:b9:6c:d4:83:8f:26:65:2f:a5:3d:da:31:71:50:b6:24:12:
         f4:cb:95:ee:21:d4:14:8a:5e:ba:8d:3e:93:06:06:ef:05:b6:
         1e:6f:b5:35:48:c6:32:6e:f2:60:81:2b:f5:ff:37:a9:b5:3b:
         ef:cc:84:fe:51:01:10:10:c8:5d:e0:24:4b:8c:38:17:e3:bd:
         2f:80:bd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:25:30 2026 by rpki-client