This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/PlTPJtrSm59MicMXGc0T5QFobVk.roa
File:                     PlTPJtrSm59MicMXGc0T5QFobVk.roa (raw, json)
Hash identifier:          vxokb71Ck6MbAwg9eWOIXGy43vgQiWwgqzqyuy/N+p8=
Subject key identifier:   3E:54:CF:26:DA:D2:9B:9F:4C:89:C3:17:19:CD:13:E5:01:68:6D:59
Certificate issuer:       /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial:       019B7CEE3B750A79BD2AFF859EB1D6699D8F
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/PlTPJtrSm59MicMXGc0T5QFobVk.roa
Signing time:             Fri 02 Jan 2026 04:19:06 +0000
ROA not before:           Fri 02 Jan 2026 04:19:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42689
IP address blocks:        185.106.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:3b:75:0a:79:bd:2a:ff:85:9e:b1:d6:69:9d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
        Validity
            Not Before: Jan  2 04:19:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3e54cf26dad29b9f4c89c31719cd13e501686d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:8b:86:f6:d0:7b:01:fc:b0:b4:17:4c:19:
                    e8:99:a8:84:2c:eb:86:dd:23:5e:c1:ae:ee:f0:92:
                    47:ab:07:eb:38:57:d7:c6:7f:db:d4:e5:59:93:e8:
                    db:be:a9:e6:bf:d7:f5:c7:95:a8:3b:d6:f3:00:29:
                    50:b0:ea:96:08:56:e6:13:45:45:4d:0f:1c:d5:19:
                    87:7b:46:58:97:73:4a:79:9a:b7:92:34:f6:de:fc:
                    05:bb:5c:dd:fc:73:25:69:2d:79:17:aa:ca:7a:64:
                    2e:11:66:d8:51:ac:7e:5f:e1:79:25:f4:bd:cb:59:
                    75:28:54:90:09:06:e2:59:86:fe:6f:19:c5:3f:dc:
                    a8:d4:00:89:d1:77:5d:14:be:5e:a0:bd:98:df:5d:
                    b2:7b:a9:2e:90:f3:3d:ef:09:ba:ed:be:ea:49:a5:
                    c8:80:99:cf:78:39:e4:52:6b:c0:5e:c5:df:96:2e:
                    c5:04:b3:74:38:bc:23:7d:5d:69:5e:02:17:9d:08:
                    1a:3a:9b:9c:7a:42:3e:d8:9b:57:84:a9:53:df:05:
                    97:c3:f0:16:12:57:93:76:a7:3e:f6:28:1d:27:9c:
                    b4:66:77:f9:13:43:b7:41:73:da:9b:d7:96:09:81:
                    a9:f0:11:98:1d:b7:ba:bf:d6:4c:9b:f9:cf:4d:23:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:54:CF:26:DA:D2:9B:9F:4C:89:C3:17:19:CD:13:E5:01:68:6D:59
            X509v3 Authority Key Identifier:
                keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/PlTPJtrSm59MicMXGc0T5QFobVk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.106.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:c8:25:10:01:43:5c:e4:58:81:5e:cd:a2:c7:53:b1:9f:7c:
         83:ce:51:8a:cd:f9:63:5c:36:cc:a1:4b:ed:bc:23:39:2d:81:
         f2:31:db:09:e4:4f:dc:58:9f:60:d7:0f:97:b3:be:74:25:77:
         28:4b:a8:c8:6b:31:19:92:59:0e:61:8d:1b:b9:25:7d:a4:84:
         bb:0d:77:0d:37:e7:4e:05:b9:03:9a:7c:2b:4c:25:41:ef:53:
         e5:23:b1:59:d8:27:fa:ba:5c:15:f3:26:e7:79:a4:84:ec:87:
         27:8d:81:9e:51:29:1d:37:ed:61:b7:d3:3a:4c:ad:77:ac:d4:
         fd:8e:0f:6a:fa:65:b8:01:3b:40:04:c7:7b:d9:1c:0e:2b:75:
         6c:d7:2c:8b:ae:fd:3a:bd:ef:84:e4:c2:dd:8a:5a:c8:94:ff:
         8c:f3:8a:30:07:de:de:fc:4d:e2:fd:a0:29:7a:3a:bf:40:2f:
         7e:5a:65:08:71:81:a6:95:41:94:fc:81:59:fa:e2:6c:1a:51:
         84:ec:f5:92:2c:e3:1a:a1:b9:14:f8:58:81:fe:8b:eb:3b:20:
         6e:df:24:58:bc:59:1a:e5:e3:21:b3:94:1c:29:2c:04:77:17:
         10:c9:fc:4d:d9:c9:95:ef:8b:c8:79:01:15:2f:f3:2e:4e:ca:
         98:c3:ec:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:20:56 2026 by rpki-client