This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Bp1GDtVArung80I6C2vaYlMxLo.roa
File:                     1Bp1GDtVArung80I6C2vaYlMxLo.roa (raw, json)
Hash identifier:          1ps2dvMOBOdqvsv+dqONDEH6IG00vUmmEPL16t5bp3c=
Subject key identifier:   D4:1A:75:18:3B:55:02:BB:A7:83:CD:08:E8:2D:AF:69:89:4C:C4:BA
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B797DFA46BBE78058435240BDC88B2754
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Bp1GDtVArung80I6C2vaYlMxLo.roa
Signing time:             Thu 01 Jan 2026 12:17:37 +0000
ROA not before:           Thu 01 Jan 2026 12:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207483
IP address blocks:        31.14.10.0/24 maxlen: 24
                          176.223.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:fa:46:bb:e7:80:58:43:52:40:bd:c8:8b:27:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 12:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d41a75183b5502bba783cd08e82daf69894cc4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:e3:e9:19:32:71:cc:2e:3f:28:2a:86:57:
                    ff:5b:1b:fc:cb:9b:4d:b9:1a:b6:94:60:08:b3:c4:
                    c0:cd:a2:bc:6c:16:47:c7:40:45:03:d2:ee:0f:9f:
                    4d:5a:ef:18:b4:38:22:75:1e:79:26:36:20:d1:ed:
                    06:eb:e4:c8:66:d1:f8:8c:56:8a:7f:59:91:ec:84:
                    49:f7:d2:a9:02:14:1d:61:16:be:13:c5:c0:85:0f:
                    b1:a7:8d:44:be:e5:77:5e:36:22:32:2d:c1:6b:71:
                    94:83:ce:80:ab:08:81:e2:1b:81:59:06:48:58:b3:
                    ba:a2:16:20:19:e7:4a:70:ef:db:6b:71:53:0e:16:
                    db:ef:c5:d3:3a:0f:06:ba:2e:a5:bd:94:af:58:ad:
                    b9:88:f7:38:bb:cf:aa:fb:8f:e8:a6:f3:38:4e:74:
                    24:9d:29:6f:51:8d:45:3e:95:f3:42:b6:a5:16:02:
                    59:84:34:09:54:89:ed:b8:7a:54:41:f7:5f:ae:a2:
                    1d:ec:f7:c3:56:bf:4a:39:43:b5:6e:f6:94:1a:71:
                    74:d0:c7:b9:13:38:3f:ed:0c:6e:4f:49:e5:77:7e:
                    f9:9b:9c:80:fe:5a:a0:5e:c2:fb:80:fd:98:04:1e:
                    41:dd:9e:34:fc:fe:4f:14:d6:d3:95:10:e9:ff:ff:
                    80:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1A:75:18:3B:55:02:BB:A7:83:CD:08:E8:2D:AF:69:89:4C:C4:BA
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1Bp1GDtVArung80I6C2vaYlMxLo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.14.10.0/24
                  176.223.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:1b:3d:b1:ca:16:40:df:05:c9:c3:97:f5:21:b1:26:81:54:
         7e:c3:70:25:a4:e3:ab:27:2f:1e:3e:6f:58:8e:17:f9:49:fc:
         99:a1:4c:69:8a:ca:ee:61:40:3e:8e:6d:2a:fe:27:b3:80:3d:
         17:2d:b1:65:5b:ea:d8:5d:05:1d:e4:76:68:1f:b1:8e:eb:51:
         1c:34:e1:32:eb:2b:83:4e:06:e5:c0:ff:4a:da:12:91:16:2a:
         52:e2:7f:a2:90:0b:6c:21:cf:f6:9b:f8:02:06:2b:f5:a9:dc:
         a4:4c:a7:27:0f:fd:df:22:a0:70:4c:d1:c5:76:82:b3:31:92:
         37:a3:37:09:ab:08:9b:be:f6:9e:1d:0d:0f:07:7c:70:5a:60:
         f8:6b:87:85:4a:a8:5d:ee:6a:1a:73:92:ad:dc:cf:43:51:ce:
         00:fb:09:13:da:3d:d8:ae:3d:37:87:29:73:e4:c0:d7:0b:e0:
         b1:47:97:1b:2a:0b:5d:d6:cc:6b:35:63:10:94:68:bc:b8:21:
         85:5a:81:be:f6:43:86:ec:3f:0a:91:a7:a8:ef:a7:16:e9:72:
         52:6d:11:e7:2c:3e:4f:e8:b0:cb:af:b4:61:f6:b8:58:38:e9:
         80:1b:5d:01:d3:03:26:64:97:c4:53:18:1b:82:19:b8:bb:bf:
         c6:13:ae:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 14:40:14 2026 by rpki-client