This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/DQIguyk5vsbJ0WUq91-VKOsHIzc.roa
File:                     DQIguyk5vsbJ0WUq91-VKOsHIzc.roa (raw, json)
Hash identifier:          7wVw6qQqVdHA1hWjDiCXVImmM58vnAnP1SdP0652WV8=
Subject key identifier:   0D:02:20:BB:29:39:BE:C6:C9:D1:65:2A:F7:5F:95:28:EB:07:23:37
Certificate issuer:       /CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Certificate serial:       019B7E373BFFAF7EEBFFE8E58D3FDF2EA82C
Authority key identifier: C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/DQIguyk5vsbJ0WUq91-VKOsHIzc.roa
Signing time:             Fri 02 Jan 2026 10:18:27 +0000
ROA not before:           Fri 02 Jan 2026 10:18:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203391
IP address blocks:        45.83.248.0/22 maxlen: 24
                          45.83.248.0/24 maxlen: 24
                          45.83.249.0/24 maxlen: 24
                          45.83.250.0/24 maxlen: 24
                          45.83.251.0/24 maxlen: 24
                          185.136.96.0/22 maxlen: 24
                          185.136.96.0/24 maxlen: 24
                          185.136.97.0/24 maxlen: 24
                          185.136.98.0/24 maxlen: 24
                          185.136.99.0/24 maxlen: 24
                          2a06:fb00::/29 maxlen: 48
                          2a06:fb00:1::/48 maxlen: 48
                          2a06:fb00:2::/48 maxlen: 48
                          2a06:fb00:3::/48 maxlen: 48
                          2a06:fb00:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:3b:ff:af:7e:eb:ff:e8:e5:8d:3f:df:2e:a8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
        Validity
            Not Before: Jan  2 10:18:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0d0220bb2939bec6c9d1652af75f9528eb072337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:67:56:76:2d:71:16:60:ce:31:37:2b:62:
                    cc:90:42:cd:2b:64:e6:16:a5:bc:c1:43:37:4e:7c:
                    73:98:9e:33:54:1b:89:e1:7b:ca:b7:85:d4:16:1f:
                    a4:7b:21:04:30:45:fb:f7:47:c0:17:64:4a:93:1d:
                    55:84:a6:5b:b5:04:47:c6:b1:de:26:60:75:ef:43:
                    c8:d9:a7:7f:53:57:6d:92:2e:1f:4c:46:7d:59:e6:
                    e8:f2:d2:96:49:03:83:43:db:f2:d5:42:15:4a:ce:
                    63:73:37:72:6b:91:b2:46:55:3e:a2:ae:41:48:ab:
                    3c:83:5c:0e:0f:b9:20:51:67:16:86:38:dd:58:ac:
                    07:da:70:95:3a:50:b9:ae:2b:2b:55:f8:ae:9f:1c:
                    be:40:52:40:40:ca:9c:4f:ad:f1:1f:8d:38:ec:62:
                    17:53:1e:1e:bc:28:8e:04:df:88:36:5f:23:14:dd:
                    95:20:49:4a:30:49:18:7e:01:bb:5e:cf:81:5a:a7:
                    0a:28:11:bb:1b:4c:df:e9:62:61:ac:d5:94:dc:8f:
                    f7:f7:e1:19:4e:88:be:31:91:67:0f:f9:6b:00:cb:
                    1e:9a:91:50:5a:31:43:a2:f0:3f:6a:46:f8:02:3f:
                    67:cf:32:78:42:26:09:7d:64:16:3e:34:b9:be:72:
                    b4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:02:20:BB:29:39:BE:C6:C9:D1:65:2A:F7:5F:95:28:EB:07:23:37
            X509v3 Authority Key Identifier:
                keyid:C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/DQIguyk5vsbJ0WUq91-VKOsHIzc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.248.0/22
                  185.136.96.0/22
                IPv6:
                  2a06:fb00::/29

    Signature Algorithm: sha256WithRSAEncryption
         5f:05:69:a0:35:41:ef:41:91:ba:24:de:97:37:a5:3b:76:68:
         47:87:04:76:63:79:27:33:a1:9f:fd:5c:c0:7b:07:26:26:be:
         91:6e:b4:74:3d:e8:e3:95:ce:d3:6a:cc:b8:8d:e8:a3:03:62:
         57:37:d7:75:d5:cf:02:bf:ce:cd:0e:27:ca:68:2e:60:e2:13:
         6b:e4:d5:27:14:b7:15:34:38:2c:8b:09:c9:b0:df:e3:ab:a9:
         58:f9:69:ba:14:0f:49:ba:2b:21:78:b9:f4:fa:42:cd:10:e5:
         63:6a:6c:20:b3:6d:0b:b6:1d:7c:38:d6:b2:bf:ea:8b:65:13:
         41:4b:5f:db:8c:85:c9:2c:49:6a:61:c0:5e:78:de:b1:87:48:
         9c:00:84:65:65:8e:cf:19:17:5a:28:a0:3d:88:6a:b9:db:c1:
         6d:ae:7a:a6:cc:82:cd:0e:42:4c:e2:f6:aa:05:3d:66:94:e1:
         b2:0c:d6:2a:8d:2c:9d:c3:92:82:96:dc:a3:84:4c:0b:7e:bc:
         5d:65:16:31:78:6e:8d:5d:7d:1a:76:42:04:c1:72:9e:f8:c4:
         32:1a:98:f0:49:62:7f:26:2a:ea:df:cc:6b:a8:16:91:24:10:
         63:98:10:6f:ef:4e:e2:fe:e1:7e:dd:cf:f9:ee:2a:f2:79:55:
         3a:01:fb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:09:18 2026 by rpki-client