This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/DpOMCYeoEFCfPd4BCOC7ze9jGAQ.roa
File:                     DpOMCYeoEFCfPd4BCOC7ze9jGAQ.roa (raw, json)
Hash identifier:          OOgXzfysjVkL+7heZlt7KwaUVEvk1p9KU0fRwZotWCk=
Subject key identifier:   0E:93:8C:09:87:A8:10:50:9F:3D:DE:01:08:E0:BB:CD:EF:63:18:04
Certificate issuer:       /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial:       019B7B3623C72C67034F2002FF7E096F1CAA
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/DpOMCYeoEFCfPd4BCOC7ze9jGAQ.roa
Signing time:             Thu 01 Jan 2026 20:18:24 +0000
ROA not before:           Thu 01 Jan 2026 20:18:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211325
IP address blocks:        92.61.180.0/22 maxlen: 22
                          2a13:f480::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:23:c7:2c:67:03:4f:20:02:ff:7e:09:6f:1c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
        Validity
            Not Before: Jan  1 20:18:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0e938c0987a810509f3dde0108e0bbcdef631804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a3:05:41:ff:0d:45:50:85:50:b0:4a:d8:66:
                    ae:a1:e4:b2:6f:74:de:1c:14:63:18:35:d3:74:15:
                    db:61:fe:bb:d2:e3:1e:ae:a0:76:76:23:72:9b:50:
                    ce:c8:76:84:7e:48:90:00:34:4a:ad:f1:62:39:ae:
                    f4:4d:28:90:e8:29:2a:f1:8a:d2:57:55:bc:8b:50:
                    17:4f:96:60:e9:be:c8:f5:a5:ac:87:ad:4b:c8:09:
                    f9:6b:16:fe:e9:95:df:24:9a:23:dc:cd:2f:7c:72:
                    ab:41:b8:21:7d:f5:04:ee:26:ee:fa:f3:70:e1:e8:
                    a4:72:4c:37:23:fc:ec:97:3d:a2:e3:2b:f9:8f:e2:
                    1f:c5:e7:5a:d6:8b:40:87:d2:cb:40:07:05:5e:79:
                    ad:0a:30:e7:c1:07:5a:1d:9e:b1:87:f2:91:83:80:
                    5d:35:c2:b8:56:03:56:41:88:bf:b7:c0:ac:9c:71:
                    95:b9:59:b1:e2:92:72:41:a0:8e:97:2f:65:1d:45:
                    34:2b:13:bb:ac:4e:a5:eb:47:7b:c4:ec:d3:fe:50:
                    55:62:c3:26:4f:6d:07:dd:16:ec:f4:e2:a4:3a:fd:
                    66:a7:59:3b:c1:e1:03:d2:8d:2b:83:2e:85:6d:2d:
                    5f:61:7d:05:1f:c5:03:8c:38:e8:17:65:1e:c0:98:
                    af:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:93:8C:09:87:A8:10:50:9F:3D:DE:01:08:E0:BB:CD:EF:63:18:04
            X509v3 Authority Key Identifier:
                keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/DpOMCYeoEFCfPd4BCOC7ze9jGAQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.61.180.0/22
                IPv6:
                  2a13:f480::/29

    Signature Algorithm: sha256WithRSAEncryption
         95:1f:0f:48:9d:14:f5:55:61:94:f8:cd:0a:67:cc:df:7a:65:
         c6:62:86:e6:4e:f7:0e:27:a0:d7:d2:d0:d0:b5:4c:90:6f:ea:
         6a:74:3a:9f:70:97:66:86:3a:07:a0:7f:88:10:b2:f6:57:2a:
         eb:d1:f7:c8:ac:41:4b:db:4a:6a:0b:a2:b6:33:94:5a:18:b4:
         42:2b:4d:fb:71:c9:89:bf:72:dc:1d:bd:7e:65:75:a1:cd:03:
         e3:78:60:8a:b0:8a:fc:06:0e:af:aa:2f:68:64:b2:d6:22:89:
         33:38:2e:4c:fd:0e:20:2a:47:ba:10:d7:da:df:a7:0a:f0:d9:
         7e:5e:68:ba:8c:3c:44:12:09:57:83:ab:96:67:dd:80:96:9c:
         67:81:e1:94:4b:fa:95:2a:fe:af:ce:31:c6:17:a5:f0:d6:e4:
         7f:01:5a:d0:8d:c5:9c:f8:ed:80:18:03:9a:84:d4:b8:5d:ee:
         f0:77:ad:10:c1:fb:b2:76:3a:51:9c:53:4c:25:9d:f6:d1:fc:
         f9:0a:e1:a5:61:19:ae:f6:22:c9:4a:fa:27:40:f5:31:97:93:
         b2:11:9e:23:68:fe:cd:5f:fd:ca:80:fd:b6:fb:81:d5:a8:1f:
         72:31:af:31:c4:16:da:f5:19:91:45:46:b8:5b:23:20:b5:5d:
         06:18:5d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:42:31 2026 by rpki-client