This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NaDwAMOvKcB7cjAwr0sISvYVivY.roa
File:                     NaDwAMOvKcB7cjAwr0sISvYVivY.roa (raw, json)
Hash identifier:          1+9bgwR0EQoCqvhAtISRAWq3SR6Hc9bItmhiXGzBZlU=
Subject key identifier:   35:A0:F0:00:C3:AF:29:C0:7B:72:30:30:AF:4B:08:4A:F6:15:8A:F6
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       019B7C133C48A2EAA09FDBA9A12DD1C36961
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NaDwAMOvKcB7cjAwr0sISvYVivY.roa
Signing time:             Fri 02 Jan 2026 00:19:53 +0000
ROA not before:           Fri 02 Jan 2026 00:19:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     271915
IP address blocks:        92.118.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 18:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:13:3c:48:a2:ea:a0:9f:db:a9:a1:2d:d1:c3:69:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jan  2 00:19:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=35a0f000c3af29c07b723030af4b084af6158af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:32:03:d7:ce:4a:9e:6a:f3:d9:90:43:c9:0c:
                    b0:ad:f1:a3:3f:dd:41:25:08:30:a3:01:f9:14:69:
                    1b:69:e4:e5:59:f8:e2:89:82:e2:2f:d9:d2:52:4a:
                    0b:ef:6c:44:55:73:29:39:60:8f:00:be:fe:d3:2f:
                    f8:24:44:e3:39:d1:6a:a8:67:16:22:d8:f6:2e:3f:
                    61:80:aa:5f:8f:60:a2:62:44:8e:eb:6a:42:ff:22:
                    65:eb:55:00:44:47:34:e0:c2:42:e9:e4:62:08:ad:
                    29:12:75:94:e3:4f:52:09:d1:b3:35:93:9a:3d:71:
                    7e:1b:18:ea:97:bc:8e:85:3a:f8:68:4f:99:c8:e4:
                    72:46:46:51:f7:30:8c:c1:64:83:24:a3:58:8c:ec:
                    f0:e3:df:ca:1f:56:ae:d9:23:e1:32:2f:2d:43:db:
                    6c:81:6f:68:5e:8f:72:5b:36:4c:85:51:49:ec:6a:
                    79:52:0b:7d:21:9d:62:d6:78:0d:34:3e:97:f2:9d:
                    10:bd:d7:e1:0e:85:21:15:18:cc:a8:fa:31:2d:64:
                    08:19:16:53:bd:29:9b:d5:72:a5:05:77:9b:e9:9b:
                    59:4a:07:45:51:2a:98:b6:23:91:1f:21:79:6a:7f:
                    d3:85:e7:ca:4c:e1:bd:f8:c6:d1:5a:d1:6f:7d:0e:
                    84:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A0:F0:00:C3:AF:29:C0:7B:72:30:30:AF:4B:08:4A:F6:15:8A:F6
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/NaDwAMOvKcB7cjAwr0sISvYVivY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:d2:8a:52:d2:0d:c9:ed:c9:74:ed:21:d8:cf:74:f1:7d:0d:
         fc:63:5e:18:a0:69:81:7e:79:9a:97:6e:e5:d3:8b:c1:ba:91:
         e7:4b:1c:fa:5c:99:34:48:06:7d:1a:ec:ae:bd:e5:cb:bd:c3:
         e4:29:43:45:6a:30:15:2b:6e:9f:e4:81:8a:79:51:7d:2a:25:
         89:26:4f:59:7e:3c:d2:60:ba:a6:9f:dd:f5:f5:4f:93:a9:b0:
         ab:f6:a3:a6:5f:2a:5f:54:bb:a0:cb:8c:54:fb:1c:2d:f9:f4:
         3b:dc:a1:4e:52:26:f1:4e:75:f6:15:de:a8:3c:2a:b2:ec:5d:
         f5:bc:99:08:63:02:9f:34:15:43:1e:5e:73:33:ca:5a:43:da:
         6e:04:1c:5c:38:5b:9a:32:91:85:00:6c:b7:62:1b:79:7a:44:
         72:17:05:b0:eb:bd:92:6b:46:30:5d:41:8b:72:1f:77:13:f4:
         25:4a:e9:52:45:dc:0f:4b:13:d2:d5:8b:9d:95:31:99:8f:cc:
         20:6b:74:75:51:44:2f:d3:bd:01:1d:0b:ab:22:55:a4:4c:c0:
         8f:28:de:c3:e2:b9:25:e9:60:dc:b5:98:aa:9b:a5:f9:73:3f:
         d0:88:3e:4d:66:74:a8:58:68:77:41:1b:57:2d:01:a4:e4:55:
         2a:9e:fa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 21:37:04 2026 by rpki-client