This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/dMeBF-kn-NkRDRRVpgIYc7U7Gzg.roa
File:                     dMeBF-kn-NkRDRRVpgIYc7U7Gzg.roa (raw, json)
Hash identifier:          6oHNnUyVSeR7K0ZmgkLZ6A6vdOgja/OQQJDLB1PEGxU=
Subject key identifier:   74:C7:81:17:E9:27:F8:D9:11:0D:14:55:A6:02:18:73:B5:3B:1B:38
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       019BD0783BCCE8326CD61D20EF0DD45A0D94
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/dMeBF-kn-NkRDRRVpgIYc7U7Gzg.roa
Signing time:             Sun 18 Jan 2026 09:38:19 +0000
ROA not before:           Sun 18 Jan 2026 09:38:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214025
IP address blocks:        188.66.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 19:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d0:78:3b:cc:e8:32:6c:d6:1d:20:ef:0d:d4:5a:0d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Jan 18 09:38:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=74c78117e927f8d9110d1455a6021873b53b1b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:a0:df:f9:5e:d5:f8:42:10:27:21:fe:1a:
                    05:39:c5:fe:ad:8d:55:c9:b5:7a:02:e1:78:9e:e3:
                    31:ae:7e:d7:a2:16:53:58:e8:21:60:87:bf:fa:e7:
                    e9:66:a8:4a:64:95:d9:c2:6a:3f:36:27:dc:53:fd:
                    c9:d7:c8:1e:c1:33:5d:79:da:0e:2c:0e:b1:9f:e3:
                    09:51:34:4b:85:e0:fc:23:8a:3f:fb:93:30:ae:e2:
                    28:e5:f9:a5:75:39:43:34:ee:3b:a1:94:55:03:d0:
                    44:07:c4:a4:8b:d9:b7:83:59:fc:b0:16:2f:29:a2:
                    55:1c:f5:cd:7f:12:54:36:31:d4:5f:4e:30:0c:0a:
                    e0:fa:05:40:42:56:35:7a:55:41:b2:df:cd:e5:c1:
                    3e:17:cf:09:c8:28:e5:6d:4f:c1:f9:45:ea:14:79:
                    aa:6a:c1:e1:fa:fa:d7:ff:35:7c:55:cc:ac:3a:62:
                    57:9c:b6:af:f4:40:72:17:60:1a:f3:27:d0:d8:f5:
                    e9:78:c0:4f:8a:b2:6f:3b:fe:14:e0:6f:cb:0d:e9:
                    69:f8:ae:61:d1:8f:c1:2f:d3:41:c6:b5:f6:24:47:
                    09:58:f8:0d:a8:e5:88:f3:cd:62:e8:4d:dd:2b:0e:
                    40:8c:6c:41:af:e9:47:58:18:22:25:35:59:54:98:
                    ac:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C7:81:17:E9:27:F8:D9:11:0D:14:55:A6:02:18:73:B5:3B:1B:38
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/dMeBF-kn-NkRDRRVpgIYc7U7Gzg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.66.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:85:ed:ee:4c:18:f8:c2:e5:11:b3:75:1f:f7:bb:7b:1f:8e:
         40:ab:04:77:b2:16:b7:ef:90:97:66:9a:6b:b7:e6:ea:96:82:
         d0:d8:b2:1e:bb:c9:75:28:8e:68:ea:c5:8a:49:6e:79:73:50:
         af:42:53:df:28:4f:96:b9:3f:a5:d2:d6:95:38:50:8e:7c:52:
         84:c3:a3:28:35:f0:4b:2a:3f:ff:24:49:54:67:52:80:0b:7c:
         4c:a3:a7:da:47:16:40:3a:44:f0:0d:7b:e3:6e:73:17:b6:be:
         6f:df:de:27:27:9d:16:7a:43:9a:73:fc:11:11:bc:59:f7:63:
         1c:75:71:28:98:4b:5d:3b:e6:a5:d7:3f:ea:66:8c:2c:90:e6:
         14:0e:64:d1:af:e6:4c:45:70:f8:96:44:ea:12:fa:fc:09:31:
         15:58:42:86:f8:6f:05:72:d6:22:fd:86:c1:2d:47:ba:fd:f7:
         61:dd:1a:10:e1:a8:9b:56:96:c8:6d:43:2c:14:f5:e2:2a:64:
         15:36:89:c6:60:7d:3a:d5:e3:44:1a:3c:b4:c3:5a:42:0f:75:
         01:fe:80:2e:db:1f:82:58:25:12:05:9d:31:81:ed:4d:56:ce:
         ea:97:f1:98:4d:cc:67:89:0f:2f:1d:e4:74:fa:93:1e:8b:d4:
         c2:a5:34:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 05:21:50 2026 by rpki-client