This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/dvCkvDBDkisBFfiqFitIcDZquoE.roa
File:                     dvCkvDBDkisBFfiqFitIcDZquoE.roa (raw, json)
Hash identifier:          /5uIwtsG5LnmznzMvv+3skWlE++Th/QPM6kzRwf6Luo=
Subject key identifier:   76:F0:A4:BC:30:43:92:2B:01:15:F8:AA:16:2B:48:70:36:6A:BA:81
Certificate issuer:       /CN=5b2c470db2443482e19523953a78c1ef0a169479
Certificate serial:       019B7F8073D7C5B0008C47B2F6828EBBD46E
Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/dvCkvDBDkisBFfiqFitIcDZquoE.roa
Signing time:             Fri 02 Jan 2026 16:18:03 +0000
ROA not before:           Fri 02 Jan 2026 16:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209719
IP address blocks:        193.107.67.0/24 maxlen: 24
                          2001:67c:940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:80:73:d7:c5:b0:00:8c:47:b2:f6:82:8e:bb:d4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479
        Validity
            Not Before: Jan  2 16:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=76f0a4bc3043922b0115f8aa162b4870366aba81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:61:20:2b:3d:48:d7:f8:d6:3a:8c:78:ef:e6:
                    8d:67:00:1c:02:e0:8e:ab:ec:13:f2:e8:e7:08:b3:
                    c8:35:52:3d:3f:00:ad:ef:ee:e2:be:79:20:b4:ec:
                    54:c2:da:a3:be:53:b7:23:df:64:9e:a1:dd:4f:c8:
                    9c:16:0e:80:a6:6a:e2:5d:6d:e1:fe:6e:ea:bf:80:
                    a8:41:23:2a:61:38:c6:8a:1b:7b:31:8c:4e:c0:ca:
                    43:e4:a6:2d:22:76:1f:82:0c:68:5d:98:2e:85:16:
                    af:1b:ff:9c:61:71:e3:21:50:e1:00:28:b8:67:37:
                    b7:8e:41:9c:9d:b2:39:85:62:a9:ef:60:f8:a3:3d:
                    de:ce:13:cc:3d:c2:4f:e6:1d:bf:f8:90:34:9d:9b:
                    fe:72:f4:b0:f5:c9:a7:0c:2f:f8:a9:28:a8:ae:02:
                    cd:ec:2a:b9:ee:a0:04:31:99:25:da:9c:79:fb:9d:
                    78:30:e6:09:63:59:b5:ea:c3:37:69:5a:50:a5:d7:
                    cc:62:4a:e6:71:72:05:28:e6:04:2c:19:0c:8a:bf:
                    b3:a3:47:09:8e:35:50:d1:0e:2b:df:09:5e:55:03:
                    ff:f0:3d:93:f2:97:54:25:7d:8d:fa:65:25:8c:f8:
                    a0:00:8c:ad:d1:0a:06:65:ec:51:12:16:3e:5d:c2:
                    47:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F0:A4:BC:30:43:92:2B:01:15:F8:AA:16:2B:48:70:36:6A:BA:81
            X509v3 Authority Key Identifier:
                keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/dvCkvDBDkisBFfiqFitIcDZquoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.67.0/24
                IPv6:
                  2001:67c:940::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:79:d1:81:98:23:b5:46:86:3e:f4:c2:e4:2a:da:95:8e:28:
         74:4b:db:49:94:cf:02:93:a7:7c:51:f3:d1:76:ac:72:07:64:
         62:60:9c:d8:d8:92:c0:1a:91:be:60:e4:3a:19:a2:1c:7f:33:
         71:04:5a:6a:03:7c:cc:f2:16:8c:8b:62:95:22:e9:53:17:56:
         61:3d:a6:87:40:a7:2f:e7:fe:ad:63:2a:95:95:64:11:e3:ab:
         06:fd:cc:bb:30:51:cc:ec:c0:39:81:5c:66:d9:a8:0f:c8:00:
         fd:47:14:f3:99:c9:7f:c8:54:a8:c5:df:af:f4:25:67:70:bf:
         10:22:a8:57:32:db:39:5e:43:b7:d2:8c:e1:f2:19:96:11:a1:
         a5:2c:e3:9c:42:e3:21:a4:f9:3e:82:45:bd:f6:19:25:8e:4c:
         84:03:3c:44:c9:be:4e:d0:6d:e3:ba:ad:cb:ca:ba:d4:16:0d:
         a6:a2:c6:31:94:df:2c:08:7b:ed:73:6c:89:6b:fd:17:74:01:
         74:5d:c2:0b:7b:73:a5:68:1c:b9:b7:0c:57:06:8f:99:80:74:
         22:20:32:76:e4:7f:fa:ea:be:56:bd:87:15:ab:33:60:29:17:
         b8:fd:ae:71:9a:c7:da:09:ae:1a:0c:ae:b1:15:48:ff:fe:43:
         f3:42:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:17:34 2026 by rpki-client