This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DIHoHIFGJRZtddi2IYfzR_PA3S0.roa
File:                     DIHoHIFGJRZtddi2IYfzR_PA3S0.roa (raw, json)
Hash identifier:          CgeECnVxEx0Z7wXvSDtmqYoZsUcQ8ALqdCSIEMMqtzw=
Subject key identifier:   0C:81:E8:1C:81:46:25:16:6D:75:D8:B6:21:87:F3:47:F3:C0:DD:2D
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019B797DE5E4530017BCB7B0E1D8C3B21C9B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DIHoHIFGJRZtddi2IYfzR_PA3S0.roa
Signing time:             Thu 01 Jan 2026 12:17:32 +0000
ROA not before:           Thu 01 Jan 2026 12:17:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     26042
IP address blocks:        206.245.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7d:e5:e4:53:00:17:bc:b7:b0:e1:d8:c3:b2:1c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jan  1 12:17:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0c81e81c814625166d75d8b62187f347f3c0dd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:d3:f3:e0:4e:b6:da:b0:3a:20:55:f0:85:
                    49:93:78:ed:73:92:f8:68:3e:f1:4e:10:da:b2:16:
                    7b:89:7d:af:9c:d2:70:55:da:a4:5c:9b:db:4e:27:
                    f8:56:89:86:c3:e8:91:e0:13:67:2d:36:99:73:ce:
                    68:9a:39:72:7a:df:7b:e2:eb:4a:08:63:75:a6:12:
                    cc:7f:bb:ac:28:23:86:14:2d:89:06:c8:b1:f2:6b:
                    d9:60:11:62:9e:56:d2:b4:11:ab:9d:4e:2e:ae:25:
                    8e:56:88:a9:f3:ea:69:19:3b:b1:6c:57:bd:7b:51:
                    01:2d:a7:52:fb:79:28:35:82:bb:e3:7a:ca:45:84:
                    ba:15:3f:20:53:87:76:30:19:76:66:a9:fc:40:26:
                    d4:27:1d:8d:5e:aa:f4:4e:ed:37:ea:cc:eb:79:0c:
                    ca:10:c7:f7:31:f6:9c:d8:76:a9:37:26:47:3f:32:
                    1d:9e:42:08:9d:9d:de:5b:4c:d6:b2:43:e5:b5:d7:
                    55:c2:26:71:ae:be:00:1c:b9:be:06:29:8d:6f:07:
                    64:d6:75:b7:62:fd:58:19:3a:44:1c:75:65:0f:42:
                    2b:bc:e2:4d:36:cd:ce:36:27:0b:d7:53:df:14:46:
                    d6:d9:46:11:2e:c6:0d:29:cc:2f:37:6d:50:9f:60:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:81:E8:1C:81:46:25:16:6D:75:D8:B6:21:87:F3:47:F3:C0:DD:2D
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DIHoHIFGJRZtddi2IYfzR_PA3S0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.245.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:af:9b:18:3c:da:8c:36:5e:85:22:96:49:69:ac:be:b4:2e:
         2c:42:52:9d:8a:4f:9d:28:96:48:e6:3c:e4:83:1e:81:f3:d7:
         4f:e8:a6:6e:fd:ab:42:9b:a5:9b:fe:4a:af:e0:cc:74:9a:bb:
         6d:1b:d9:7a:43:b7:17:16:0d:3d:94:40:77:aa:8e:07:62:25:
         2c:79:b8:7e:91:a8:6a:fc:87:f7:b2:b1:d8:1c:74:3b:6e:a3:
         98:6c:f3:b5:e2:6d:da:ed:e8:0f:3a:72:9b:9c:81:e9:b2:54:
         7f:29:29:8f:60:6a:c2:3c:61:d9:79:f4:1d:4c:6e:05:77:2f:
         c4:7e:1e:6a:14:a6:fb:9d:af:2e:aa:71:ff:11:cc:08:29:26:
         72:2b:0a:87:a1:69:74:82:6a:dd:70:01:bf:15:4f:59:73:32:
         f1:39:cf:7c:11:75:dc:e9:1d:15:64:a9:c3:d6:ed:b9:f6:18:
         56:35:dd:2e:10:bc:7a:96:46:10:b5:3b:74:50:0b:38:20:21:
         cb:9e:19:7f:bf:61:a3:ca:d6:0d:22:9e:f7:e6:84:ea:e4:b4:
         93:33:d8:0e:cc:d9:21:1c:41:89:7f:30:0d:87:23:4a:34:10:
         91:6c:9c:12:63:51:7d:48:71:cf:4f:e0:b0:6c:26:14:e0:ba:
         2c:42:bf:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5feXkUwAXvLew4djDshybMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzgxZTgxYzgxNDYyNTE2NmQ3NWQ4YjYyMTg3ZjM0N2YzYzBkZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw07T8+BOttqwOiBV8IVJk3jtc5L4
aD7xThDashZ7iX2vnNJwVdqkXJvbTif4VomGw+iR4BNnLTaZc85omjlyet974utK
CGN1phLMf7usKCOGFC2JBsix8mvZYBFinlbStBGrnU4uriWOVoip8+ppGTuxbFe9
e1EBLadS+3koNYK743rKRYS6FT8gU4d2MBl2Zqn8QCbUJx2NXqr0Tu036szreQzK
EMf3Mfac2HapNyZHPzIdnkIInZ3eW0zWskPltddVwiZxrr4AHLm+BimNbwdk1nW3
Yv1YGTpEHHVlD0IrvOJNNs3ONicL11PfFEbW2UYRLsYNKcwvN21Qn2Ci8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAyB6ByBRiUWbXXYtiGH80fzwN0tMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRElIb0hJRkdKUlp0ZGRpMklZZnpSX1BBM1MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWEMA0G
CSqGSIb3DQEBCwUAA4IBAQA0r5sYPNqMNl6FIpZJaay+tC4sQlKdik+dKJZI5jzk
gx6B89dP6KZu/atCm6Wb/kqv4Mx0mrttG9l6Q7cXFg09lEB3qo4HYiUsebh+kahq
/If3srHYHHQ7bqOYbPO14m3a7egPOnKbnIHpslR/KSmPYGrCPGHZefQdTG4Fdy/E
fh5qFKb7na8uqnH/EcwIKSZyKwqHoWl0gmrdcAG/FU9ZczLxOc98EXXc6R0VZKnD
1u259hhWNd0uELx6lkYQtTt0UAs4ICHLnhl/v2GjytYNIp735oTq5LSTM9gOzNkh
HEGJfzANhyNKNBCRbJwSY1F9SHHPT+CwbCYU4LosQr9g
-----END CERTIFICATE-----
Generated at Mon Jan 19 14:37:26 2026 by rpki-client