This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/dYEcB0f0ECVLwob9ASY-Vl-cNiE.roa
File:                     dYEcB0f0ECVLwob9ASY-Vl-cNiE.roa (raw, json)
Hash identifier:          X1YBtggX7sXN/XI659Z7sShfySUKcJ9Z3YnMpVPGY7o=
Subject key identifier:   75:81:1C:07:47:F4:10:25:4B:C2:86:FD:01:26:3E:56:5F:9C:36:21
Certificate issuer:       /CN=8f3ced30b2852e552c7837467003f175ea59de73
Certificate serial:       019B77C6DFCC1149869D32F5B098067441D3
Authority key identifier: 8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/dYEcB0f0ECVLwob9ASY-Vl-cNiE.roa
Signing time:             Thu 01 Jan 2026 04:18:00 +0000
ROA not before:           Thu 01 Jan 2026 04:18:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197293
IP address blocks:        45.144.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:df:cc:11:49:86:9d:32:f5:b0:98:06:74:41:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3ced30b2852e552c7837467003f175ea59de73
        Validity
            Not Before: Jan  1 04:18:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=75811c0747f410254bc286fd01263e565f9c3621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:65:c2:82:85:fb:b9:b0:48:2c:15:20:f8:
                    f6:20:36:ea:da:54:fa:4f:89:70:ca:7a:92:13:e9:
                    70:07:51:3b:77:91:2f:8d:05:ff:59:76:8a:69:85:
                    71:c9:b1:35:9e:c8:de:2d:a6:3d:29:dc:ca:2b:03:
                    e7:de:b5:b6:df:c9:82:2f:65:34:b5:9d:1c:55:a8:
                    68:12:00:bf:d2:ea:08:f3:af:79:c6:b3:aa:89:45:
                    99:62:c7:de:37:88:b0:ae:cc:ea:a1:8f:c2:10:da:
                    8b:d7:c2:3b:32:05:de:da:f6:23:2c:35:d6:93:86:
                    2a:71:f6:4c:e2:9e:73:c9:42:ea:ee:1f:27:08:b9:
                    b4:a6:0f:2b:93:25:70:e0:87:be:11:fa:f5:f9:cc:
                    fc:0d:ea:7f:b1:ac:ca:57:dc:62:fd:a3:3d:28:1f:
                    8a:b0:8a:99:18:11:2f:cd:fb:2b:ff:e1:f2:03:33:
                    1e:a0:3a:17:43:e5:76:e8:05:01:64:45:e3:65:98:
                    7c:c5:53:7d:35:f7:dc:6b:77:13:40:3b:3c:66:a5:
                    c0:e2:95:ad:23:15:de:86:42:4e:56:63:92:81:0b:
                    db:b2:00:e3:a0:c3:78:0e:8c:f2:59:70:69:ca:c7:
                    7e:35:88:97:48:7d:0f:92:0b:99:28:4a:37:7a:62:
                    9e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:81:1C:07:47:F4:10:25:4B:C2:86:FD:01:26:3E:56:5F:9C:36:21
            X509v3 Authority Key Identifier:
                keyid:8F:3C:ED:30:B2:85:2E:55:2C:78:37:46:70:03:F1:75:EA:59:DE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzztMLKFLlUseDdGcAPxdepZ3nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/dYEcB0f0ECVLwob9ASY-Vl-cNiE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/df9e2d-a033-40c0-a00f-e344fdb722a3/1/jzztMLKFLlUseDdGcAPxdepZ3nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:d6:b2:3c:d7:df:06:d5:0d:9e:0e:cc:8d:48:5e:31:ed:d6:
         32:ee:42:66:ff:a9:90:06:03:c8:29:78:f0:94:7e:2e:af:dd:
         50:87:55:d7:d2:c4:55:9e:17:3b:e9:68:37:2e:1a:23:72:be:
         a6:69:d1:f3:d8:46:ed:0c:c1:3d:72:8d:ee:9b:76:2a:07:5a:
         7d:ae:1a:7b:78:d5:2d:4d:c3:a5:a3:ea:aa:1d:08:fe:8a:26:
         38:aa:ba:44:53:d3:07:b2:4a:08:a2:93:06:65:28:07:19:6e:
         2b:6f:86:58:1b:c7:aa:95:dc:fa:1e:21:f2:de:92:b2:ce:1d:
         92:b5:a7:66:62:0f:94:8d:87:2b:44:6a:2a:b7:2b:35:ba:85:
         8a:3e:0d:44:0c:d1:8b:68:10:6f:86:33:cc:88:21:ab:5a:e3:
         b6:50:35:bc:d7:26:d1:ff:84:1e:b7:d6:fc:e9:48:c2:07:d9:
         fc:49:42:55:2b:10:73:81:f9:00:0a:72:c3:fd:49:db:10:b1:
         8c:70:99:c6:1d:5c:d9:97:49:1f:dc:26:81:b5:a6:c6:ec:a1:
         6e:fc:c8:0f:fd:ea:79:bd:12:f4:4f:26:eb:1b:58:a7:bb:ed:
         d4:71:dd:30:eb:34:f3:99:6a:3e:b8:60:62:19:d5:b4:13:f7:
         15:be:73:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:47 2026 by rpki-client