This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/0sEV5H_A0rlI6NfPYuLmfYjvWD0.roa
File:                     0sEV5H_A0rlI6NfPYuLmfYjvWD0.roa (raw, json)
Hash identifier:          dZ4FeCTfblqtXelif+IwyAlXmzJNDihc4byltNkJAjA=
Subject key identifier:   D2:C1:15:E4:7F:C0:D2:B9:48:E8:D7:CF:62:E2:E6:7D:88:EF:58:3D
Certificate issuer:       /CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a
Certificate serial:       019B7DC9F2225D321CFF522D8917CDFE22A1
Authority key identifier: 1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/0sEV5H_A0rlI6NfPYuLmfYjvWD0.roa
Signing time:             Fri 02 Jan 2026 08:19:05 +0000
ROA not before:           Fri 02 Jan 2026 08:19:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        185.177.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 21:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:c9:f2:22:5d:32:1c:ff:52:2d:89:17:cd:fe:22:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a
        Validity
            Not Before: Jan  2 08:19:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d2c115e47fc0d2b948e8d7cf62e2e67d88ef583d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:00:c4:13:c8:91:5d:92:d6:ab:d1:4d:ab:8b:
                    23:3e:86:82:44:31:64:b4:4d:ec:ed:d2:f1:6b:9d:
                    9e:a2:ec:b3:2f:4f:3e:31:46:96:98:47:1c:f2:c1:
                    87:45:ae:03:47:ac:25:23:1b:80:a6:91:78:0d:5b:
                    39:ed:d0:98:c0:9d:b8:7d:82:a0:71:f7:8c:2b:73:
                    53:1d:7e:55:b8:4e:d6:85:d8:e0:8b:21:c0:9d:73:
                    aa:3c:a7:0b:7a:87:83:29:b0:1d:e1:8a:e6:e5:4f:
                    77:81:cd:ef:f9:fc:65:2c:a9:14:d4:bc:15:da:d0:
                    a4:29:b0:f6:47:31:cc:03:e9:ca:52:81:e4:aa:e8:
                    25:4f:2d:bf:74:5c:f9:c2:76:26:e3:33:1d:b5:58:
                    27:de:2b:c0:a5:0c:c2:1c:0f:2b:ce:4f:c1:68:dc:
                    46:19:00:6c:ed:f6:71:e8:91:08:06:c8:68:fc:8d:
                    94:e2:1a:14:86:3a:78:99:89:6a:7f:21:7a:f2:53:
                    6c:4a:9e:bc:a1:fb:c5:3a:8a:06:ba:5c:c4:b4:66:
                    c2:a6:e9:ee:7d:9c:2d:90:71:60:11:48:59:c4:ed:
                    99:1c:27:9c:42:d3:c1:15:ad:37:6f:b7:82:a5:4d:
                    53:9f:1f:8e:2e:b8:b3:23:15:64:a5:a3:07:af:79:
                    16:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C1:15:E4:7F:C0:D2:B9:48:E8:D7:CF:62:E2:E6:7D:88:EF:58:3D
            X509v3 Authority Key Identifier:
                keyid:1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/0sEV5H_A0rlI6NfPYuLmfYjvWD0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:94:40:01:c3:9c:18:b5:21:88:a3:fd:50:1c:04:f3:41:ee:
         18:37:8a:57:73:53:c5:90:de:bb:55:e8:2d:ea:7f:8f:7c:a2:
         93:0d:8b:c4:b3:50:49:04:e4:30:2c:6c:42:e9:bd:30:3f:38:
         cd:d1:e7:6d:08:c0:fd:1c:6d:30:31:3d:25:49:bc:15:32:45:
         20:35:a2:a9:62:a3:d5:00:d9:b6:bb:d2:79:42:c8:77:3d:e1:
         44:b8:ee:e4:0b:cc:8d:2c:27:fa:40:9d:23:23:3e:d9:53:c6:
         87:b4:cf:25:72:75:1b:64:15:5f:aa:06:0b:96:d8:c7:e2:1c:
         61:54:82:b7:cf:51:44:c9:4d:c9:06:be:43:72:49:f1:30:c7:
         d8:59:8a:bd:96:d7:9f:30:f8:d3:d8:5a:40:74:5a:ae:1c:18:
         b9:79:7c:86:91:b0:28:49:af:35:2f:c8:ca:1c:63:e0:83:9a:
         dd:cc:5c:86:97:19:f7:f0:d3:ea:01:29:ef:61:49:ee:b5:69:
         88:f0:81:9a:0c:ae:03:59:23:7a:52:a6:f4:83:cc:f8:42:bc:
         61:42:e6:8c:cf:d1:78:6d:9b:df:77:48:49:aa:f5:d5:ce:de:
         ef:2b:5d:3c:0c:c9:12:1a:2f:e6:4a:de:8f:b8:d2:56:7f:55:
         ef:24:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 06:25:49 2026 by rpki-client