This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/AU0mK3kvJWDL6WvTMDBwruIk9Yo.roa
File:                     AU0mK3kvJWDL6WvTMDBwruIk9Yo.roa (raw, json)
Hash identifier:          UJ521U9kX8KbpPJ5yoTgLuBYMW8RZw/CsvE9VFkznzw=
Subject key identifier:   01:4D:26:2B:79:2F:25:60:CB:E9:6B:D3:30:30:70:AE:E2:24:F5:8A
Certificate issuer:       /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial:       019B7834C11051D10500E1CF14CA4E9E1779
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/AU0mK3kvJWDL6WvTMDBwruIk9Yo.roa
Signing time:             Thu 01 Jan 2026 06:18:01 +0000
ROA not before:           Thu 01 Jan 2026 06:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136787
IP address blocks:        185.183.212.0/24 maxlen: 24
                          185.183.213.0/24 maxlen: 24
                          185.183.214.0/24 maxlen: 24
                          185.183.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:c1:10:51:d1:05:00:e1:cf:14:ca:4e:9e:17:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
        Validity
            Not Before: Jan  1 06:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=014d262b792f2560cbe96bd3303070aee224f58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:9b:7a:f3:e1:3c:13:11:94:37:e9:11:51:4d:
                    25:dc:aa:11:1a:7e:f8:32:ee:85:6c:e3:05:76:8e:
                    87:72:f8:34:99:74:29:b3:1b:52:47:4c:33:70:f7:
                    2b:5f:45:00:a8:d8:32:86:1c:ff:89:7a:6e:13:da:
                    af:6c:f1:af:fe:bc:3f:27:ab:d2:6e:96:8b:52:2b:
                    a2:04:34:a5:80:bf:a3:ed:38:77:c3:a4:69:cc:83:
                    8c:65:03:18:9e:89:a4:2f:22:c8:5c:82:a6:cc:1a:
                    eb:ad:43:06:d0:5d:dd:dd:a7:c9:a1:78:19:d1:4e:
                    12:eb:6b:90:69:ee:1e:8d:cc:02:3a:f3:81:75:20:
                    7e:5a:48:d1:2a:d2:ac:1c:1f:e4:a7:08:61:98:b3:
                    bd:32:33:e2:8f:b4:37:2c:99:d4:64:a1:67:e5:86:
                    52:86:c3:7a:28:0e:e5:19:dc:9b:bc:87:da:bc:00:
                    01:7e:7d:87:c2:11:b8:36:3e:c1:35:fe:70:85:0b:
                    a8:6b:58:6b:b6:cd:2f:75:46:e6:86:76:b2:3a:09:
                    09:fb:59:6b:5d:78:43:5c:45:0b:de:39:6f:9c:34:
                    83:9c:aa:d4:63:dd:ec:75:a7:07:4b:58:17:5a:5b:
                    4c:a7:57:98:84:2a:10:e6:66:30:64:bd:cd:cd:31:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4D:26:2B:79:2F:25:60:CB:E9:6B:D3:30:30:70:AE:E2:24:F5:8A
            X509v3 Authority Key Identifier:
                keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/AU0mK3kvJWDL6WvTMDBwruIk9Yo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:96:a2:a2:91:90:9a:54:a5:ba:06:a5:f3:fa:ba:8c:13:29:
         7b:5f:0d:5e:da:b1:2f:d4:98:19:09:ac:5f:88:d2:fc:5a:ac:
         a8:75:ba:e1:29:67:87:dd:4c:86:56:f0:a0:1e:ea:65:98:45:
         83:38:88:45:05:bd:c9:9b:b0:85:26:07:e1:81:26:22:49:4d:
         55:6a:68:72:74:87:51:70:79:a6:5d:92:de:18:bb:82:68:7c:
         08:a7:ce:9e:03:e5:f0:72:92:93:13:56:d6:46:22:60:17:fa:
         52:f9:4b:bc:7b:9e:10:ae:27:95:2e:a0:97:10:e9:59:fe:34:
         bd:dc:db:5e:f3:15:bc:7d:06:07:5d:11:f7:71:06:7e:9b:83:
         af:16:31:4f:12:18:7d:44:bb:3f:05:3f:eb:be:e6:3b:e0:9d:
         e3:1a:48:19:86:f1:94:a1:de:dc:4f:e5:5c:4e:57:08:62:4f:
         df:43:8f:a8:d5:5e:14:39:1a:6e:b0:31:25:64:9d:f9:39:f3:
         f9:04:f6:54:4c:45:9e:d3:a8:ff:bf:2f:e6:1f:60:0e:af:2a:
         cf:8f:b2:79:d7:a7:9f:08:fd:a0:c8:66:0d:4d:0a:0d:c5:af:
         bc:dc:d2:18:85:3f:9f:95:48:54:10:10:e0:c6:68:0d:84:02:
         4e:c3:54:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:34:44 2026 by rpki-client