This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/dcD055JlPzhE0U2Qu8hWMM72FWA.roa
File:                     dcD055JlPzhE0U2Qu8hWMM72FWA.roa (raw, json)
Hash identifier:          VvO/JKNnyrO6XN2rhJSdnSkuG3gPwZdp3tAvVmkyLo8=
Subject key identifier:   75:C0:F4:E7:92:65:3F:38:44:D1:4D:90:BB:C8:56:30:CE:F6:15:60
Certificate issuer:       /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial:       019B77C6F2B6CFD04ABDAF938DD5E7648706
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/dcD055JlPzhE0U2Qu8hWMM72FWA.roa
Signing time:             Thu 01 Jan 2026 04:18:05 +0000
ROA not before:           Thu 01 Jan 2026 04:18:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        62.164.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:f2:b6:cf:d0:4a:bd:af:93:8d:d5:e7:64:87:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
        Validity
            Not Before: Jan  1 04:18:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=75c0f4e792653f3844d14d90bbc85630cef61560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a1:26:ea:78:34:06:2c:b3:bd:47:7c:81:12:
                    5b:72:1d:cd:43:30:59:df:b0:dd:54:1f:d4:9b:a8:
                    e4:61:5d:2b:03:69:d7:b4:4b:bf:44:69:7b:3a:f2:
                    c7:aa:59:23:e8:65:a6:10:78:4c:e4:8a:df:9e:cb:
                    44:62:1e:2d:ca:f0:90:04:13:b5:20:71:cf:57:c4:
                    df:38:3e:54:0c:ef:e3:7a:97:0b:3c:71:dc:01:ab:
                    59:f7:37:ac:21:74:79:7b:6d:33:37:2f:14:bd:b6:
                    87:83:41:f9:e7:a8:26:1f:a6:db:f0:11:29:19:6b:
                    45:9a:be:d3:e3:3b:a5:c4:a4:09:70:f5:97:d5:5c:
                    eb:7f:cb:7e:a6:2f:fa:77:a9:15:75:40:3d:61:90:
                    ee:ed:48:c1:fe:da:f3:af:19:58:b0:c8:06:f1:53:
                    46:9b:68:c4:40:3b:8c:d4:dd:dc:12:b0:66:b5:0d:
                    4b:4b:f1:46:e6:e3:88:73:54:0a:1a:6b:6b:6d:b4:
                    78:a1:8c:50:37:e4:39:d7:da:48:43:e8:bf:bd:73:
                    35:43:f2:df:41:54:78:78:d0:7d:cc:b9:8b:ef:6a:
                    83:b5:87:ac:02:0d:63:03:55:5a:ed:0e:2b:6c:b0:
                    c3:54:80:80:62:05:6d:a5:cc:4d:4a:f9:e0:a0:02:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C0:F4:E7:92:65:3F:38:44:D1:4D:90:BB:C8:56:30:CE:F6:15:60
            X509v3 Authority Key Identifier:
                keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/dcD055JlPzhE0U2Qu8hWMM72FWA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.164.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:a6:c6:94:49:88:5c:1a:39:27:aa:a2:9c:27:c6:51:8b:18:
         e2:89:ab:e0:11:98:2a:86:17:e3:30:0d:4f:86:24:6e:44:f5:
         be:c3:2c:25:85:5a:b3:14:3c:1a:2a:e5:ed:23:cf:b7:4a:b9:
         27:e1:74:88:ad:59:02:4c:29:b7:cd:82:df:22:6f:5f:6d:a3:
         9e:87:41:90:e2:55:c4:d3:74:cc:bc:ab:95:4b:b6:d6:6e:94:
         87:10:97:23:32:5b:44:66:85:37:c7:1b:1b:22:f6:eb:64:28:
         20:f4:87:5e:c4:a9:eb:1f:60:8e:6e:03:ae:1c:12:94:b8:53:
         04:51:63:16:17:e8:8f:d4:0d:6c:ca:99:a8:a4:ef:c5:96:f3:
         f1:2d:f8:e2:f0:3b:a2:10:bf:70:ae:85:e7:8b:f6:af:d1:a1:
         42:d5:96:4c:9c:8a:21:11:96:3a:be:f7:51:fc:66:7f:8e:46:
         85:b3:c7:80:38:91:62:b1:92:70:66:63:d8:df:c6:0c:52:0b:
         ce:49:f2:a8:87:69:2e:c9:19:01:27:55:32:c6:a2:6e:2e:0f:
         3b:b9:4c:d1:38:bf:bf:97:52:ee:5d:fd:a1:f2:59:f3:07:35:
         5e:e5:c8:4b:06:4c:36:45:f3:ac:4d:16:d4:c8:d7:09:1d:65:
         80:a6:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 15:29:37 2026 by rpki-client