This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/DbBkcBKTLwUVIRYiZoMGLtLABqc.roa
File:                     DbBkcBKTLwUVIRYiZoMGLtLABqc.roa (raw, json)
Hash identifier:          nYJ7uYsvXEIvKqfy6utLXX5lQJgID0iu/HQASNofn+k=
Subject key identifier:   0D:B0:64:70:12:93:2F:05:15:21:16:22:66:83:06:2E:D2:C0:06:A7
Certificate issuer:       /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial:       019B7E38C674D8E1C70CFFC250A97E6345A0
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/DbBkcBKTLwUVIRYiZoMGLtLABqc.roa
Signing time:             Fri 02 Jan 2026 10:20:08 +0000
ROA not before:           Fri 02 Jan 2026 10:20:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202934
IP address blocks:        185.205.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:c6:74:d8:e1:c7:0c:ff:c2:50:a9:7e:63:45:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
        Validity
            Not Before: Jan  2 10:20:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0db0647012932f05152116226683062ed2c006a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:83:7c:7b:5a:0a:48:28:5a:91:ab:ea:e1:
                    27:60:ff:5e:dc:fb:0c:ea:05:dd:0b:5a:dd:36:ab:
                    d5:bb:d0:89:bc:01:d7:0e:9e:da:9c:84:71:ed:15:
                    5f:02:c5:cd:ed:22:3b:75:eb:bd:f8:99:c0:10:4a:
                    9a:fc:48:16:f5:96:5d:b7:4e:75:5e:60:2e:83:b8:
                    8d:40:67:e5:bc:21:03:ff:0e:65:e1:be:d2:6d:ef:
                    5c:7a:a4:76:46:91:58:2a:56:12:18:16:f7:71:f1:
                    d8:7e:75:7e:b1:d5:02:bc:1c:53:25:10:99:64:ac:
                    70:01:ef:cb:12:c2:75:dd:b0:a7:6f:4c:dc:c8:98:
                    44:c4:fe:c7:4d:f6:29:87:25:d9:eb:ec:32:7e:db:
                    ab:90:4a:6b:c8:3c:45:50:5f:77:37:44:e7:a9:4e:
                    0e:fd:ba:a5:1b:c6:c5:31:9b:be:90:87:d4:ac:4e:
                    ed:c8:14:3b:24:f7:93:62:48:34:9a:5a:25:9a:9f:
                    b9:78:83:ca:60:25:81:8c:ee:a4:63:ff:16:1b:5e:
                    e0:e0:91:66:7d:07:c6:ca:a5:11:e8:55:2b:b2:85:
                    27:b0:96:13:9e:a0:0a:0d:49:1a:50:10:be:6f:1d:
                    b6:d6:cd:29:39:b7:53:ec:7f:f8:3d:9a:49:fd:4b:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B0:64:70:12:93:2F:05:15:21:16:22:66:83:06:2E:D2:C0:06:A7
            X509v3 Authority Key Identifier:
                keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/DbBkcBKTLwUVIRYiZoMGLtLABqc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:be:8d:4b:47:08:3f:62:da:ed:5f:0f:c7:57:9a:6f:4c:b9:
         15:24:ff:10:5d:4e:6b:94:fd:ce:3f:5e:7f:fe:e3:90:d2:12:
         73:00:57:fd:76:c4:11:e7:f3:c8:1d:d6:ba:94:fe:5c:b3:96:
         a8:c8:41:f4:77:a5:29:d7:1f:9e:5e:d4:70:04:25:dd:9d:ab:
         88:54:c9:5a:a0:a8:10:e3:c2:43:84:27:01:e3:4b:36:c7:b9:
         a4:0c:ec:98:70:00:f5:bc:82:7c:7e:cf:50:50:f9:ee:cf:ac:
         ce:63:a0:99:54:37:94:ec:b9:90:98:c3:97:fd:e7:60:b5:eb:
         2b:be:e0:cb:0a:11:1e:de:f6:75:bd:8e:6a:72:74:c8:74:25:
         a2:d2:e9:9f:76:59:40:6b:5e:72:77:c0:22:8d:01:2d:ad:49:
         3d:c0:d6:f3:50:f2:b3:83:f0:bc:77:e4:9c:e0:ae:fb:24:da:
         cc:a4:35:a0:52:3f:4f:56:ce:f8:40:d0:62:6e:e7:49:39:76:
         7e:a2:3d:0c:4f:c3:71:fe:e4:a9:20:ed:cc:39:71:5d:43:78:
         99:5f:c9:b1:0a:eb:6f:57:21:38:c8:cb:96:c3:f1:b5:3c:20:
         d3:57:eb:56:7e:ca:d6:20:f5:dd:5c:1c:a2:6d:d5:45:f3:e4:
         e8:11:89:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:02:22 2026 by rpki-client