This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/Tbg0HfFs7tC-ThaNMYM7wld_cPc.roa
File:                     Tbg0HfFs7tC-ThaNMYM7wld_cPc.roa (raw, json)
Hash identifier:          dG1QErPruWJ0Jgl8mQY86EnlNMjWn0dAZ2gyv40Za2Q=
Subject key identifier:   4D:B8:34:1D:F1:6C:EE:D0:BE:4E:16:8D:31:83:3B:C2:57:7F:70:F7
Certificate issuer:       /CN=60f72537edf1dc0b7f694453450bca4aeef83f64
Certificate serial:       019B79EC7EEA52F3E311AFCCA938539923F3
Authority key identifier: 60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/Tbg0HfFs7tC-ThaNMYM7wld_cPc.roa
Signing time:             Thu 01 Jan 2026 14:18:20 +0000
ROA not before:           Thu 01 Jan 2026 14:18:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213048
IP address blocks:        83.136.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:7e:ea:52:f3:e3:11:af:cc:a9:38:53:99:23:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f72537edf1dc0b7f694453450bca4aeef83f64
        Validity
            Not Before: Jan  1 14:18:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4db8341df16ceed0be4e168d31833bc2577f70f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:95:bd:8b:08:ab:d0:fd:92:c0:f0:01:10:6a:
                    e2:4e:51:72:f2:08:dc:c3:9a:6e:fd:da:d4:8f:a2:
                    38:30:74:54:43:a0:7e:ed:a6:b8:2b:22:2c:ad:4d:
                    76:7f:06:69:11:47:56:4a:31:66:f7:6a:1d:68:fe:
                    e0:58:a3:28:ac:5c:4c:8b:d3:ef:5d:16:f2:0f:e4:
                    76:27:cb:ba:e5:d6:18:0c:dd:39:35:36:28:12:19:
                    a5:7d:19:f1:42:7b:2b:6c:92:ca:42:4e:f8:b2:ba:
                    0e:d7:41:8b:0d:7d:4f:6b:ec:fc:6f:60:1f:0a:9f:
                    c0:7c:6a:37:de:0f:67:6c:50:bb:f2:5a:95:b9:38:
                    3f:95:e7:9e:34:77:b9:9f:ea:dd:d4:42:bd:ec:04:
                    87:b8:91:49:31:24:ee:bd:b4:b6:d0:25:c1:e4:45:
                    05:c2:fe:75:b5:4f:97:82:3f:9a:4d:69:02:80:d9:
                    a8:05:ed:2e:e6:b0:5b:17:64:a6:69:a4:46:45:cc:
                    af:04:5e:49:d2:57:52:21:1c:30:a9:77:76:fb:e1:
                    87:09:4c:33:27:93:75:af:db:2b:5c:ba:d1:7c:f7:
                    bb:b9:6e:ef:dd:bb:31:39:df:b0:f2:ab:73:68:06:
                    9e:23:dd:2d:36:40:c6:49:47:1a:95:92:65:17:bd:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B8:34:1D:F1:6C:EE:D0:BE:4E:16:8D:31:83:3B:C2:57:7F:70:F7
            X509v3 Authority Key Identifier:
                keyid:60:F7:25:37:ED:F1:DC:0B:7F:69:44:53:45:0B:CA:4A:EE:F8:3F:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPclN-3x3At_aURTRQvKSu74P2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/Tbg0HfFs7tC-ThaNMYM7wld_cPc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b1015d-4122-4174-82a5-4bbf645b10d3/1/YPclN-3x3At_aURTRQvKSu74P2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:1a:29:13:88:46:2a:32:df:ae:9d:10:c9:13:dd:14:38:2f:
         50:ac:15:a2:12:99:cc:ad:15:3d:8c:11:87:5d:94:05:ed:9d:
         33:ee:82:9f:4c:53:82:92:a8:52:65:bd:29:e0:72:a6:40:3b:
         e7:75:6b:f3:db:af:5b:67:ec:11:25:e5:d0:e8:ab:84:2c:0c:
         77:87:ca:1a:14:60:dc:7e:f9:7b:f9:d4:47:16:12:86:f0:1e:
         6f:3a:5e:4f:98:b4:e2:ef:da:79:9a:a0:3b:fe:e5:9b:b9:c6:
         40:a3:e6:bd:d5:8f:7f:f8:37:71:b3:5f:e2:9f:d9:5b:7d:0c:
         35:a6:5a:bb:10:07:0d:d6:7b:05:41:ec:0c:dd:14:9f:21:bd:
         a5:34:d3:5a:b0:7b:51:f9:d5:00:d4:99:d4:39:bb:a3:26:58:
         95:3c:ca:39:ea:40:53:95:b8:e9:37:63:00:4f:d1:da:19:99:
         59:77:07:a8:ae:8b:5d:bb:f8:65:9c:68:9e:bd:0c:97:99:37:
         15:54:9d:8d:29:e7:8b:2d:09:46:bf:b9:70:55:07:75:26:a5:
         44:be:7e:6d:41:f7:0c:01:bc:e4:be:3a:c3:b4:d0:cf:2c:a2:
         9c:8f:a6:49:77:f5:61:f9:ef:dd:28:b8:4b:1c:89:df:22:e7:
         ba:75:dd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:28:41 2026 by rpki-client