This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/ACMwaAvueA5hj2k5vPo_qhJ133c.roa
File:                     ACMwaAvueA5hj2k5vPo_qhJ133c.roa (raw, json)
Hash identifier:          cdrRftiXvx3VVL7eXRerOEoJNGRyUrwNZfHdITSoxdk=
Subject key identifier:   00:23:30:68:0B:EE:78:0E:61:8F:69:39:BC:FA:3F:AA:12:75:DF:77
Certificate issuer:       /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial:       019B7C128A1EC237BC49C8806C9979AC14B1
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/ACMwaAvueA5hj2k5vPo_qhJ133c.roa
Signing time:             Fri 02 Jan 2026 00:19:08 +0000
ROA not before:           Fri 02 Jan 2026 00:19:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     205913
IP address blocks:        185.202.76.0/24 maxlen: 24
                          185.202.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:8a:1e:c2:37:bc:49:c8:80:6c:99:79:ac:14:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
        Validity
            Not Before: Jan  2 00:19:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=002330680bee780e618f6939bcfa3faa1275df77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:87:7f:32:37:86:49:43:99:99:e6:a7:0a:2d:
                    19:0e:58:42:e3:39:b0:61:40:32:82:9f:21:bc:a2:
                    12:95:55:77:75:fb:d1:ff:b1:dc:4e:b0:1f:bc:80:
                    00:61:dd:3b:33:0b:76:ea:7d:d8:82:30:5d:c7:c8:
                    e2:95:dc:3a:d1:07:72:f5:42:be:c5:1e:6a:d9:bb:
                    ba:7f:bc:19:20:42:e3:01:94:12:89:c8:2c:46:b1:
                    93:33:9e:bf:91:c0:95:26:eb:1e:a9:92:3b:fc:5c:
                    de:80:ae:1f:fc:7c:d2:b0:61:89:ba:36:f2:ba:ed:
                    7f:2d:ff:61:b4:55:c6:f3:3c:64:27:67:02:13:66:
                    0e:29:dd:d4:1c:66:0e:88:db:d0:f4:93:c7:08:bd:
                    d8:d3:cd:d0:02:9b:d1:f2:fc:96:a2:ef:74:a1:32:
                    0e:f4:16:4b:de:dc:64:5b:ba:e3:c8:d1:bb:ff:43:
                    60:73:27:8d:ca:e9:d5:4b:e7:86:2c:a2:7d:f4:b0:
                    3c:8b:66:58:2b:bb:dc:10:98:ec:14:36:81:50:3d:
                    fa:69:6a:98:78:83:8f:f7:32:b7:64:c6:bb:07:b1:
                    81:81:39:39:e0:f2:62:c8:c6:16:fb:b3:5f:77:21:
                    b0:d5:0c:00:1c:08:46:fe:b0:fd:f9:1d:cf:27:90:
                    e3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:23:30:68:0B:EE:78:0E:61:8F:69:39:BC:FA:3F:AA:12:75:DF:77
            X509v3 Authority Key Identifier:
                keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/ACMwaAvueA5hj2k5vPo_qhJ133c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:55:39:b9:3a:bf:4d:3c:12:04:bd:52:0d:69:d1:c8:92:62:
         95:0f:17:ac:43:cc:46:cf:4a:32:4a:e6:f6:9e:e8:f5:31:8f:
         6d:97:30:95:a6:6f:51:b4:05:e7:fb:97:ff:74:da:4d:67:67:
         ce:e8:5a:1b:ac:14:7f:f2:76:83:60:53:ef:58:1c:62:0e:9b:
         45:a2:1a:a2:31:82:c9:30:21:0c:ff:d9:cc:e8:a2:41:b1:2b:
         c0:75:e8:92:51:b7:47:9c:74:bf:3b:eb:59:26:82:95:72:df:
         a3:1a:58:29:4d:a1:d5:85:9c:f2:09:5d:79:8c:82:b3:3a:dc:
         cc:54:0e:78:5c:d1:08:7e:b8:04:c3:42:7c:ee:3d:06:2a:50:
         01:6e:5f:e0:60:b7:91:4b:28:16:46:b6:8e:7b:71:bf:bb:df:
         ef:47:87:18:a1:61:a8:82:0c:9f:2a:fb:84:8a:71:c2:c8:17:
         7a:14:44:c1:fd:7d:e9:94:6a:fb:e7:9b:9c:7a:a0:88:f1:26:
         2f:c5:9a:c3:0a:ed:80:cd:7c:b1:2f:45:e8:25:8c:ae:17:78:
         89:e4:b6:0d:2f:10:bc:94:fb:17:7d:f2:83:38:52:30:4d:b1:
         dd:27:47:54:04:2b:21:b9:25:aa:b8:d2:99:30:e5:0f:a9:d1:
         d4:a5:e3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:01:41 2026 by rpki-client