This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/DVNQFoQorVY9yU9kbTj9LC9XoJw.roa
File:                     DVNQFoQorVY9yU9kbTj9LC9XoJw.roa (raw, json)
Hash identifier:          07ZRQCYv53Y3Q3qxf4P5rZ1SgsujlGLWZ0tRpP+wSS0=
Subject key identifier:   0D:53:50:16:84:28:AD:56:3D:C9:4F:64:6D:38:FD:2C:2F:57:A0:9C
Certificate issuer:       /CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Certificate serial:       019B7C7F1D4B7CAB2DE539A93E81E64622E9
Authority key identifier: 37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/DVNQFoQorVY9yU9kbTj9LC9XoJw.roa
Signing time:             Fri 02 Jan 2026 02:17:43 +0000
ROA not before:           Fri 02 Jan 2026 02:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202664
IP address blocks:        185.158.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:1d:4b:7c:ab:2d:e5:39:a9:3e:81:e6:46:22:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
        Validity
            Not Before: Jan  2 02:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0d5350168428ad563dc94f646d38fd2c2f57a09c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:ef:cd:29:03:08:35:2e:fb:82:ef:71:db:
                    ed:a6:92:e0:ba:12:34:0a:a5:51:07:96:6f:39:62:
                    88:fe:b4:09:a0:de:61:e5:79:7e:57:88:bb:3c:54:
                    a9:d8:d4:1d:58:3a:26:e5:68:45:4a:1c:d3:61:a7:
                    d8:f8:58:9d:5d:b1:90:c0:2d:25:0d:11:fc:a3:ab:
                    f9:ea:86:99:8a:6e:58:3b:c2:e9:d3:3d:6c:17:9f:
                    b0:39:2b:b6:c4:9d:bd:3a:f7:a8:6e:e8:10:3a:e7:
                    db:94:fd:db:20:2d:3a:62:b9:2c:7e:d9:f5:50:fe:
                    a2:73:65:b5:c5:32:f3:4f:d5:d9:c5:08:db:05:3b:
                    5e:e3:cf:0b:46:1b:aa:7a:fe:9a:8c:26:bb:30:ef:
                    34:06:6b:b0:6b:5b:89:ec:de:d4:0b:d9:0c:9b:55:
                    30:b7:3f:56:de:14:19:65:15:2c:c4:12:fe:9e:f2:
                    c6:9a:15:4e:c4:14:bc:59:d8:bf:4c:53:23:c7:03:
                    de:b3:2c:c5:94:68:08:fc:2b:8d:db:af:ca:db:19:
                    42:7f:71:a5:07:8e:ac:ab:61:7f:aa:e6:b4:af:92:
                    f9:61:e4:4b:db:a7:59:b3:12:76:2e:17:d9:b5:cb:
                    22:b5:0b:f2:95:30:1b:4e:67:f0:28:91:c9:68:66:
                    42:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:53:50:16:84:28:AD:56:3D:C9:4F:64:6D:38:FD:2C:2F:57:A0:9C
            X509v3 Authority Key Identifier:
                keyid:37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/DVNQFoQorVY9yU9kbTj9LC9XoJw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.158.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:3a:20:fa:a0:54:f1:fd:69:61:a0:bd:5d:a9:1a:71:7d:62:
         96:4c:77:32:eb:9c:56:cd:4b:43:cf:a7:6f:cd:15:3b:68:f9:
         4b:cf:0a:ef:8e:85:03:9c:67:66:1d:9c:4c:c8:de:15:b7:3d:
         d3:c0:ca:a1:1a:3f:48:e1:97:1a:2a:6c:03:4f:61:bf:c9:ee:
         a4:c2:7b:b2:66:9e:d7:8b:83:28:18:7b:a8:3c:a0:9c:d0:92:
         c1:c1:ac:ce:bd:9b:54:36:de:6d:63:ae:19:c9:7d:af:05:1b:
         ef:37:2b:84:4e:c9:d4:c7:c0:c4:eb:3e:d5:5c:d1:d7:1b:5f:
         b9:b2:c6:95:b4:8a:fb:c4:41:90:d7:b7:3c:21:f8:eb:68:30:
         78:da:b4:1b:4e:70:f4:e6:c7:9d:22:67:e4:6b:75:db:30:c1:
         16:26:bb:e4:09:22:19:1b:95:71:2d:4b:c0:79:2a:6f:ef:a4:
         16:61:96:62:bb:1b:ba:06:a6:c6:25:3f:ec:29:6c:17:44:ea:
         be:40:a3:8a:d3:3e:fb:e5:7f:41:88:be:f5:ec:61:7c:89:0e:
         27:95:9b:6c:82:d5:03:ad:d1:4f:05:0b:65:e5:60:bc:c5:43:
         ed:7a:73:b5:6a:a7:e0:58:f0:b9:ab:f6:91:d1:ac:30:e2:60:
         d7:05:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:48:53 2026 by rpki-client