This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/dPdEcI7jEzpHSjeo8wgUWREkHQM.roa
File:                     dPdEcI7jEzpHSjeo8wgUWREkHQM.roa (raw, json)
Hash identifier:          rcD5yBSAhCjvQhv/XgtDsaxuVlraEy56Wuj7SiQFMXY=
Subject key identifier:   74:F7:44:70:8E:E3:13:3A:47:4A:37:A8:F3:08:14:59:11:24:1D:03
Certificate issuer:       /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial:       019B7F850ED486C81EF6E42F18012BE49C9A
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/dPdEcI7jEzpHSjeo8wgUWREkHQM.roa
Signing time:             Fri 02 Jan 2026 16:23:05 +0000
ROA not before:           Fri 02 Jan 2026 16:23:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     30830
IP address blocks:        80.73.128.0/23 maxlen: 24
                          80.73.130.0/23 maxlen: 24
                          80.73.132.0/23 maxlen: 24
                          2a01:5140::/32 maxlen: 32
                          2a01:5140:a::/48 maxlen: 48
                          2a01:5140:b::/48 maxlen: 48
                          2a01:5140:128::/48 maxlen: 48
                          2a01:5140:129::/48 maxlen: 48
                          2a01:5140:130::/48 maxlen: 48
                          2a01:5140:131::/48 maxlen: 48
                          2a01:5140:132::/48 maxlen: 48
                          2a01:5140:133::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:0e:d4:86:c8:1e:f6:e4:2f:18:01:2b:e4:9c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
        Validity
            Not Before: Jan  2 16:23:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=74f744708ee3133a474a37a8f308145911241d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:7d:34:64:24:53:bc:d1:37:79:42:c8:9a:
                    17:97:fd:c4:8d:84:b1:18:2d:28:55:55:d3:e3:4b:
                    bd:d2:1f:13:72:fe:1c:c8:9b:15:aa:84:29:29:97:
                    32:8e:c8:84:a6:9a:e8:fd:2a:6a:a0:6d:68:52:28:
                    98:ac:8f:90:26:03:c7:bf:28:2f:1f:a3:84:67:d4:
                    f7:60:24:13:47:3e:ae:fb:d2:a9:52:09:8d:60:84:
                    0d:64:a5:74:15:4d:94:e0:c7:63:9f:c9:5c:fc:82:
                    5a:f1:c1:b9:1e:2d:9e:5c:d5:4a:7c:78:55:eb:30:
                    09:a3:fe:64:08:ee:a9:8d:d7:2e:78:6e:52:6e:0f:
                    08:a1:ad:2f:e4:6a:c1:2b:33:bd:03:d5:08:59:e5:
                    b3:8b:9c:0f:3f:be:dd:ac:e4:d8:69:e5:04:c0:a8:
                    92:7e:8c:2b:52:92:fc:6c:f9:9d:7d:a2:9e:81:98:
                    57:3f:ed:b8:3f:2d:93:01:39:57:05:f6:03:e2:aa:
                    e3:19:39:31:82:6a:97:31:4e:91:ed:af:46:11:16:
                    95:1b:82:88:59:e9:d7:30:a8:e4:11:45:d1:0e:ca:
                    44:04:31:90:4b:fa:31:54:4e:a3:45:74:d7:bb:84:
                    63:c5:5a:89:77:18:52:40:96:9e:8f:56:e1:78:60:
                    44:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F7:44:70:8E:E3:13:3A:47:4A:37:A8:F3:08:14:59:11:24:1D:03
            X509v3 Authority Key Identifier:
                keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/dPdEcI7jEzpHSjeo8wgUWREkHQM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.128.0-80.73.133.255
                IPv6:
                  2a01:5140::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:52:ae:96:ac:ca:5c:93:d8:2b:83:89:65:b0:b6:20:0d:72:
         17:36:31:c1:8c:bf:50:8d:3b:1d:b9:97:cb:ea:06:92:4a:87:
         4e:13:bd:9a:85:12:87:6d:09:4d:01:37:7d:b2:7b:9e:d5:67:
         f8:b0:e5:cf:1c:c8:97:22:59:3a:5b:a9:4d:ed:14:a3:ee:81:
         fa:4d:7e:e5:0e:da:c8:72:53:7e:46:af:34:ce:d3:b2:66:61:
         af:d9:36:e4:97:cc:64:f0:bd:a5:16:43:d7:50:a9:cd:55:16:
         2e:d2:58:d4:bb:e9:51:e4:6a:9a:3c:67:ab:9e:a7:9f:3f:85:
         f2:ed:7c:98:21:40:1b:b9:1c:c5:53:97:35:93:87:be:b2:73:
         28:b8:9c:b4:83:0c:5a:3d:48:63:27:7d:56:5b:5e:77:08:29:
         5b:55:30:fa:e5:ba:7d:a4:ce:87:3e:7c:ad:cb:c5:19:f0:bb:
         17:68:c2:56:2a:7f:67:81:0b:89:27:df:7b:3f:7d:f9:b2:ef:
         b4:c0:ab:7e:68:00:9a:a1:76:d0:58:b1:69:db:bd:5a:0f:6e:
         a8:a4:74:09:48:ac:5a:87:8d:ae:39:ef:66:f4:18:74:7d:6b:
         8f:fb:65:33:0c:b2:14:53:8e:47:40:dd:6f:1a:69:f9:84:0d:
         54:0a:f8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:44:09 2026 by rpki-client