This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/NGjdUubhTaDpN7BWGdqVsarGKK4.roa
File:                     NGjdUubhTaDpN7BWGdqVsarGKK4.roa (raw, json)
Hash identifier:          WEVoIWeksgLWhIoYIU2Xs8oUAeGV+4dGK/PL2s/49yo=
Subject key identifier:   34:68:DD:52:E6:E1:4D:A0:E9:37:B0:56:19:DA:95:B1:AA:C6:28:AE
Certificate issuer:       /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial:       019C1AF32EC23829F5EA3F2017DD71BCF3FD
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/NGjdUubhTaDpN7BWGdqVsarGKK4.roa
Signing time:             Sun 01 Feb 2026 20:44:30 +0000
ROA not before:           Sun 01 Feb 2026 20:44:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133153
IP address blocks:        212.66.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 09:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1a:f3:2e:c2:38:29:f5:ea:3f:20:17:dd:71:bc:f3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
        Validity
            Not Before: Feb  1 20:44:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3468dd52e6e14da0e937b05619da95b1aac628ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:59:3f:7c:2b:84:ee:8a:18:7c:3e:6f:7d:
                    39:cb:84:e9:a1:94:20:da:bf:33:30:21:82:5e:43:
                    e2:ea:5a:e6:05:83:a5:9a:6d:f0:6b:3b:70:c6:d7:
                    0f:ca:69:2f:22:da:51:0f:14:23:06:43:72:d6:f3:
                    5e:a0:8c:56:80:c9:f7:f7:e4:61:20:35:c4:2b:7e:
                    dc:76:14:c2:b7:12:6e:51:0b:b2:ce:0c:03:63:f1:
                    b8:cb:0d:b5:c7:ce:5f:f4:23:f9:32:dd:ec:59:03:
                    d5:82:66:7b:a4:12:9d:bf:3c:3c:2a:29:4c:c0:32:
                    38:95:d6:8f:c7:df:b0:0b:db:00:48:22:fe:8e:c4:
                    e7:aa:f0:1a:e0:a5:23:8a:ff:e6:af:91:16:79:b1:
                    0e:cf:22:9f:8b:ee:ab:54:bc:69:ca:63:40:44:45:
                    0f:1c:d9:72:2c:0e:77:92:43:8e:ed:dd:db:99:a0:
                    8c:29:23:23:1b:f1:4a:30:59:19:39:43:8a:4c:dd:
                    21:b1:e4:de:a6:15:35:3e:7a:84:45:10:f0:d2:77:
                    b9:32:a0:e7:e7:5b:1b:dc:63:44:11:54:7a:69:9f:
                    24:7f:f6:8e:8c:c9:01:7b:50:ee:41:b8:85:e4:00:
                    49:84:ce:f3:50:1f:8d:16:fc:37:1e:51:13:a3:05:
                    46:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:68:DD:52:E6:E1:4D:A0:E9:37:B0:56:19:DA:95:B1:AA:C6:28:AE
            X509v3 Authority Key Identifier:
                keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/NGjdUubhTaDpN7BWGdqVsarGKK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.66.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:5c:2d:54:68:de:c5:15:dd:ba:a7:c2:f0:9c:08:72:fe:1f:
         bb:54:0e:1f:e7:fd:a0:77:66:c5:26:cc:9b:ea:39:dc:f7:4c:
         1a:e6:d1:e8:c6:a5:1b:3b:48:eb:d4:e2:27:09:d5:37:72:9f:
         5d:4a:c1:5a:0d:31:a7:cd:84:f0:1e:d5:e3:4e:ff:8b:68:b2:
         a1:64:ec:00:9d:6f:2e:02:19:04:3c:f9:d0:98:dc:32:24:66:
         b5:70:24:7c:92:28:a6:c1:95:1e:c0:9c:10:b4:ba:9b:14:68:
         11:85:77:a3:a5:89:fa:f7:f3:e7:bb:d3:28:17:42:79:1c:66:
         8f:8b:42:7b:7b:f8:16:53:8f:57:9f:70:34:56:9f:87:5b:a6:
         3c:e4:f9:2e:da:3a:e4:19:a9:5d:2c:06:c6:70:19:6d:ca:94:
         52:7f:ac:87:cc:2f:9c:33:f0:49:eb:6d:e4:21:16:7f:61:1c:
         ab:0f:84:6f:2a:d0:9b:76:c8:fa:c0:fe:28:2f:3e:6d:83:56:
         3e:80:eb:a6:f5:fc:98:5d:77:55:4b:19:fe:6c:66:7f:ad:66:
         8e:6a:a9:10:fb:b9:7f:5b:6b:57:48:3d:68:bb:e2:7a:d4:85:
         8d:09:4a:3b:c8:4f:b1:49:f4:e6:3f:40:15:69:b2:d0:37:00:
         96:0f:e4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 15:43:43 2026 by rpki-client