This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/DneugekopIxK304C8pLImv6Qcv0.roa
File:                     DneugekopIxK304C8pLImv6Qcv0.roa (raw, json)
Hash identifier:          +cGEhJmcpfO0fbmJYvL9sDH0f2ClBmDUFG+o22CeZUs=
Subject key identifier:   0E:77:AE:81:E9:28:A4:8C:4A:DF:4E:02:F2:92:C8:9A:FE:90:72:FD
Certificate issuer:       /CN=66b76ce7feef6956f8dfb9f8bc3a228861b99f2e
Certificate serial:       019BFA4007F9BE0AAC2DB88A4488179767B5
Authority key identifier: 66:B7:6C:E7:FE:EF:69:56:F8:DF:B9:F8:BC:3A:22:88:61:B9:9F:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/DneugekopIxK304C8pLImv6Qcv0.roa
Signing time:             Mon 26 Jan 2026 12:20:58 +0000
ROA not before:           Mon 26 Jan 2026 12:20:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     3209
IP address blocks:        194.113.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:40:07:f9:be:0a:ac:2d:b8:8a:44:88:17:97:67:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66b76ce7feef6956f8dfb9f8bc3a228861b99f2e
        Validity
            Not Before: Jan 26 12:20:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0e77ae81e928a48c4adf4e02f292c89afe9072fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:00:59:9e:1e:4c:81:30:12:31:0f:c6:07:fc:
                    96:37:7d:38:50:44:c5:2f:a9:1f:f8:6a:85:17:9c:
                    40:18:12:f5:cf:85:ea:21:aa:34:2a:aa:fc:bb:3b:
                    81:9c:57:6f:87:2b:fa:c9:d6:45:ee:1d:e5:81:dd:
                    f5:64:da:a7:57:e3:46:5b:b7:b2:d3:36:c8:b8:c9:
                    e3:7e:e3:4d:e5:54:6d:50:df:0c:e9:e4:f8:47:1b:
                    02:c3:16:8d:3e:86:49:7d:af:a3:54:e3:90:77:fc:
                    1c:cf:e0:d2:ee:8e:6e:4a:a3:46:82:5c:e9:ea:ad:
                    6e:5d:37:e4:a4:8d:c5:5b:44:d1:02:d5:fc:40:53:
                    a8:62:16:04:0a:74:3a:2f:7c:08:24:e5:fd:73:ff:
                    72:e5:a8:48:08:ea:d0:3b:31:4d:b3:a3:f4:ce:57:
                    42:bb:3c:8d:03:f9:fb:2d:0d:d2:67:77:53:85:20:
                    43:57:c7:60:dc:9d:4f:41:fd:55:22:7c:87:5a:bb:
                    9f:5b:93:25:76:2c:73:3b:91:d2:4a:85:c1:92:ba:
                    35:95:6d:ed:67:c7:e1:9c:07:f3:18:6b:06:12:dd:
                    fd:ca:55:8e:5d:50:1e:89:37:07:4e:15:2f:85:d8:
                    80:4a:ae:88:6c:5e:b0:81:87:bb:ad:a6:4c:04:ad:
                    d4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:77:AE:81:E9:28:A4:8C:4A:DF:4E:02:F2:92:C8:9A:FE:90:72:FD
            X509v3 Authority Key Identifier:
                keyid:66:B7:6C:E7:FE:EF:69:56:F8:DF:B9:F8:BC:3A:22:88:61:B9:9F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zrds5_7vaVb437n4vDoiiGG5ny4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/DneugekopIxK304C8pLImv6Qcv0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/a4cf1b-4db6-4c3f-9694-a06864ef061c/1/Zrds5_7vaVb437n4vDoiiGG5ny4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.113.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:26:a1:b9:62:8f:d9:44:ff:1a:0e:ce:31:18:81:4a:3b:b0:
         6c:74:89:05:10:ca:48:81:03:56:93:af:98:0d:d9:44:45:35:
         b1:bc:8b:22:8b:93:a9:0b:57:98:1a:e4:8b:58:7c:03:08:be:
         89:12:d2:a1:ba:14:1d:f6:ba:dc:fd:50:24:57:ac:34:fa:42:
         f0:d0:80:c7:dd:76:42:fe:08:cd:7f:de:1e:56:b1:8b:63:fb:
         5c:65:ff:e1:95:7a:51:b0:11:28:67:67:1a:94:c4:b8:76:d8:
         f7:26:ff:20:3f:f9:e2:84:31:b2:ac:78:47:85:10:5a:d0:07:
         c5:be:9b:93:e9:a2:49:de:02:a7:36:bc:21:05:7e:e0:19:34:
         bc:9d:58:72:7d:c7:8a:f9:df:47:25:fc:0f:49:80:5d:44:86:
         9c:ff:fd:b9:a2:5f:1b:2c:ff:3f:aa:82:5c:15:9a:77:ed:d1:
         f6:f2:b4:f8:81:ae:b4:67:fa:ba:9b:51:73:92:f3:65:3d:21:
         05:31:ef:ec:4c:6c:b9:a9:14:c0:22:68:9a:a0:cb:ea:e6:af:
         c8:5f:8f:8d:e2:35:e7:b6:24:7e:ad:70:af:67:d6:5f:b5:54:
         c2:58:6c:4e:c0:4b:71:87:95:fb:ac:b2:fb:ec:26:4c:61:fd:
         cb:21:01:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:34:12 2026 by rpki-client