This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/PNlvPpdKGViCkd-loMG48lLdREo.roa
File:                     PNlvPpdKGViCkd-loMG48lLdREo.roa (raw, json)
Hash identifier:          Q9pqH6DPGzLeAA09QK8w4mO7pVx6baktv8cxPd31hEA=
Subject key identifier:   3C:D9:6F:3E:97:4A:19:58:82:91:DF:A5:A0:C1:B8:F2:52:DD:44:4A
Certificate issuer:       /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial:       019C40AEA3E63E7809574FD85610E5D7101A
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/PNlvPpdKGViCkd-loMG48lLdREo.roa
Signing time:             Mon 09 Feb 2026 04:35:12 +0000
ROA not before:           Mon 09 Feb 2026 04:35:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     984
IP address blocks:        144.56.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:40:ae:a3:e6:3e:78:09:57:4f:d8:56:10:e5:d7:10:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
        Validity
            Not Before: Feb  9 04:35:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3cd96f3e974a19588291dfa5a0c1b8f252dd444a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:9e:a7:64:c9:50:f1:e4:a2:69:4a:50:a3:
                    81:ce:27:ef:78:97:2f:7a:7c:51:b7:7c:82:0c:1c:
                    cd:aa:13:7b:05:d8:03:92:19:82:8f:ba:b6:f9:39:
                    b2:e3:fc:18:14:60:d0:88:03:01:99:0b:f4:3c:78:
                    4b:2d:23:93:38:b9:9e:a0:00:0e:32:9f:11:6f:84:
                    f2:65:18:79:94:02:d3:63:c9:5a:f6:4b:0e:f6:76:
                    82:e5:3d:b3:d1:92:d3:3e:a7:08:41:08:3c:78:70:
                    cb:5c:dc:90:30:25:6f:b8:cc:1f:e9:2f:16:75:3c:
                    69:93:19:2d:e3:73:40:72:b4:ef:7a:f6:72:e5:8a:
                    44:fe:64:a9:b2:00:fc:5f:aa:56:b6:2e:66:35:0c:
                    09:34:d6:fe:c8:d0:cb:8c:e1:41:8c:7c:5a:7e:3c:
                    59:59:a4:ca:2f:52:04:15:e5:23:2d:1d:4a:03:4d:
                    65:d9:34:0f:69:ca:09:76:9d:eb:a5:0f:e3:0c:9c:
                    10:bf:9d:5b:21:38:17:0d:71:c7:f5:d4:99:7e:14:
                    00:10:b8:2f:89:e2:d9:e2:f1:44:29:a4:bd:26:c8:
                    1b:1a:97:de:ff:4d:1b:fa:5a:25:75:b6:ba:6a:89:
                    1c:2a:53:13:34:b9:16:b4:50:96:d3:f7:2b:35:d2:
                    63:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D9:6F:3E:97:4A:19:58:82:91:DF:A5:A0:C1:B8:F2:52:DD:44:4A
            X509v3 Authority Key Identifier:
                keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/PNlvPpdKGViCkd-loMG48lLdREo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.56.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:00:2a:86:80:6b:62:3e:69:dc:d2:cb:2b:70:5a:3f:88:5d:
         e6:eb:5a:3f:41:59:f0:3a:90:47:97:2e:a3:93:42:ef:26:0d:
         e6:d8:a8:b8:80:e4:dd:3f:ef:cc:45:aa:8a:fe:6a:57:23:ac:
         e4:6c:c2:44:cd:16:b5:28:cc:b2:27:e5:a3:df:11:37:ae:14:
         f5:93:1d:60:95:b1:c8:9b:c8:12:3e:a0:b4:a4:72:3b:00:43:
         5f:c6:7d:f1:50:ae:97:97:38:df:76:24:e7:74:c5:33:c5:09:
         d1:0b:07:c9:25:5c:32:1f:ca:b7:9a:8d:16:f7:cf:af:29:c3:
         71:70:c4:44:d9:13:1e:f5:31:7f:d1:2a:c2:01:56:c7:b9:7f:
         06:88:26:06:d5:14:df:bb:de:73:21:28:5e:71:0e:aa:27:50:
         fd:b5:04:7b:e9:0b:3c:de:76:51:05:f1:96:d5:aa:07:c3:1a:
         4c:1d:b2:c3:b9:28:c1:e6:d6:e5:f7:3a:31:f1:65:a6:2a:8e:
         09:c6:44:7c:45:e3:2b:2e:2f:be:c0:fd:60:aa:45:af:dd:fd:
         c4:eb:70:7a:08:6c:21:38:a3:9f:99:bc:97:c0:6f:f1:a2:9d:
         de:37:e3:fe:27:91:02:ef:06:18:9e:53:62:86:27:ce:db:f2:
         09:c0:86:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:51:53 2026 by rpki-client