This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/DUhtAD3_xxy9gOvcTDplBUTPnms.roa
File:                     DUhtAD3_xxy9gOvcTDplBUTPnms.roa (raw, json)
Hash identifier:          v0tLLjc7rS1SBtzsfai4mMe4+DHfyEXAvDNb2xkmOp4=
Subject key identifier:   0D:48:6D:00:3D:FF:C7:1C:BD:80:EB:DC:4C:3A:65:05:44:CF:9E:6B
Certificate issuer:       /CN=22cb36f8506c118bfc41f5dae362264a96814990
Certificate serial:       019C28BF47A0193C10B532445CEC55F0C469
Authority key identifier: 22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/DUhtAD3_xxy9gOvcTDplBUTPnms.roa
Signing time:             Wed 04 Feb 2026 13:02:30 +0000
ROA not before:           Wed 04 Feb 2026 13:02:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209025
IP address blocks:        185.75.22.0/23 maxlen: 23
                          2a10:cd40::/29 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:28:bf:47:a0:19:3c:10:b5:32:44:5c:ec:55:f0:c4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22cb36f8506c118bfc41f5dae362264a96814990
        Validity
            Not Before: Feb  4 13:02:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0d486d003dffc71cbd80ebdc4c3a650544cf9e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:98:85:f8:d2:eb:5c:76:c3:3c:d1:4a:1b:
                    fc:b4:7d:64:f2:79:bc:b1:39:16:b4:7b:43:61:b6:
                    48:03:ec:64:3e:b1:71:ee:34:46:3a:7d:47:8b:3c:
                    c7:cb:89:db:91:73:04:68:f6:f7:7f:95:a6:15:9f:
                    77:a6:6d:e8:50:8f:2b:6b:2e:25:52:cf:e2:5d:1a:
                    cb:69:10:4a:10:11:1b:da:46:71:95:7d:8b:05:8d:
                    50:ab:22:1e:79:f7:c5:ad:8f:b5:a5:09:83:69:25:
                    05:c8:88:19:46:20:20:8d:2f:c7:e5:20:30:56:49:
                    bf:b4:85:b7:00:cc:69:3d:b8:55:b4:a4:24:76:57:
                    0a:30:26:52:e6:ea:fb:02:a8:99:2e:dc:65:77:9f:
                    a4:9b:f5:81:1c:69:69:ce:63:13:e9:b9:a0:87:8e:
                    c8:12:e6:07:97:d2:3b:e2:bf:6e:76:48:62:84:61:
                    f4:63:b1:e1:69:9b:c8:09:1d:d4:09:91:1e:e9:03:
                    03:2c:62:98:bd:b7:49:e0:5b:d2:c3:e7:12:a1:b8:
                    e8:08:dc:7e:26:71:43:a9:6e:6e:97:39:f7:ac:1d:
                    8e:18:de:41:80:35:62:19:cc:33:59:c8:ef:93:d5:
                    8c:44:dd:7f:26:2c:d6:82:bf:3e:59:f5:17:31:e5:
                    6d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:48:6D:00:3D:FF:C7:1C:BD:80:EB:DC:4C:3A:65:05:44:CF:9E:6B
            X509v3 Authority Key Identifier:
                keyid:22:CB:36:F8:50:6C:11:8B:FC:41:F5:DA:E3:62:26:4A:96:81:49:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iss2-FBsEYv8QfXa42ImSpaBSZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/DUhtAD3_xxy9gOvcTDplBUTPnms.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/50ca35-bde6-4508-b80f-236789587997/1/Iss2-FBsEYv8QfXa42ImSpaBSZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.22.0/23
                IPv6:
                  2a10:cd40::/29

    Signature Algorithm: sha256WithRSAEncryption
         54:58:22:05:29:e0:ef:47:fa:be:97:81:19:9f:be:2b:4f:01:
         aa:d3:37:93:63:42:2e:6e:6e:59:e6:53:9e:a1:67:54:9a:68:
         99:c8:41:ab:f2:7a:6a:cb:cf:29:29:26:66:eb:b2:2a:9a:04:
         52:6b:6d:a3:22:11:d8:b3:91:bf:d0:48:d4:95:db:e7:d9:60:
         24:0c:3e:7e:8b:6e:bf:50:80:4a:29:54:89:d1:67:67:f6:fd:
         79:87:9c:76:36:0d:ee:2e:d5:c8:c4:db:a6:71:df:76:04:ab:
         7a:42:a7:5c:76:93:6e:e9:5c:6d:ac:f8:61:c3:4d:b2:7c:d9:
         cb:e0:65:29:bc:ee:f1:43:94:57:d6:65:b8:d4:66:58:24:bd:
         b0:7b:3b:39:55:8f:db:38:64:7e:b0:d3:56:84:10:d1:f5:37:
         c7:95:0f:08:e0:18:dd:46:b1:65:36:6c:7a:34:9f:98:a4:a8:
         61:7f:ec:83:a8:2e:f0:6d:d1:76:e5:cb:ae:23:c4:9b:38:1b:
         fb:87:2a:47:74:20:a9:41:1a:98:55:dd:00:82:53:22:4c:4c:
         58:a8:83:2c:f2:26:bc:29:71:3b:d9:a7:23:7e:be:f7:bc:87:
         ae:6a:82:92:36:2d:7c:d5:aa:c4:1f:85:3e:a5:ff:7a:f3:92:
         cc:97:86:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:09:16 2026 by rpki-client