This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/DpPM78RcAUvB-2kUXp3GCC4YWfM.roa
File:                     DpPM78RcAUvB-2kUXp3GCC4YWfM.roa (raw, json)
Hash identifier:          0s/UH20Gxwk37R3AzNPM1q4h2mFyRoMXI2GNUSV2z7A=
Subject key identifier:   0E:93:CC:EF:C4:5C:01:4B:C1:FB:69:14:5E:9D:C6:08:2E:18:59:F3
Certificate issuer:       /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial:       019B7758CC86600626E4EA4318BEF43DAD1C
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/DpPM78RcAUvB-2kUXp3GCC4YWfM.roa
Signing time:             Thu 01 Jan 2026 02:17:46 +0000
ROA not before:           Thu 01 Jan 2026 02:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209788
IP address blocks:        95.183.44.0/23 maxlen: 24
                          95.183.46.0/24 maxlen: 24
                          188.68.80.0/24 maxlen: 24
                          188.68.90.0/24 maxlen: 24
                          188.68.91.0/24 maxlen: 24
                          188.68.92.0/24 maxlen: 24
                          188.68.93.0/24 maxlen: 24
                          192.54.76.0/24 maxlen: 24
                          192.54.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:cc:86:60:06:26:e4:ea:43:18:be:f4:3d:ad:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
        Validity
            Not Before: Jan  1 02:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0e93ccefc45c014bc1fb69145e9dc6082e1859f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:54:7f:81:2c:fc:36:c8:e1:d6:4b:e0:38:8b:
                    df:41:a1:93:c3:76:ce:31:12:3b:37:a9:81:d5:75:
                    ea:e1:9a:3b:38:3c:5a:b4:70:78:6a:f1:ce:0f:91:
                    23:6e:c3:89:26:e7:a4:48:68:54:a1:4b:a6:89:4f:
                    6a:f0:6b:0b:75:55:d5:8b:c2:cc:f0:8d:75:58:6c:
                    12:4c:56:91:cb:f2:aa:2a:91:4f:15:53:15:0c:27:
                    b7:86:12:0b:a6:fb:21:17:55:bd:97:a4:a7:27:07:
                    c0:7b:3f:bd:46:ad:c7:2c:fa:cb:3c:2c:0d:e2:3c:
                    9e:47:1d:8f:a8:56:e3:cc:c8:c9:e7:8a:93:4e:14:
                    02:c7:d3:d3:0d:91:21:31:75:58:6e:72:4d:04:a7:
                    b6:bf:72:7f:50:a0:fa:76:8d:28:a3:c7:84:7e:81:
                    7b:a5:65:e2:1d:a1:9d:39:e0:19:b4:78:c1:18:2d:
                    fe:0a:06:29:97:b0:a3:fe:38:04:35:80:00:00:4a:
                    f7:96:6d:7f:d0:eb:1f:82:4f:db:f8:08:ae:d9:78:
                    88:61:5b:df:41:be:ec:32:f4:e1:5a:bf:a4:e1:1f:
                    79:22:a6:79:77:bf:85:af:f8:cd:f5:7a:5c:5e:26:
                    e0:3a:9f:e2:8d:22:18:c9:b9:ff:d4:08:5c:eb:e3:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:93:CC:EF:C4:5C:01:4B:C1:FB:69:14:5E:9D:C6:08:2E:18:59:F3
            X509v3 Authority Key Identifier:
                keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/DpPM78RcAUvB-2kUXp3GCC4YWfM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.183.44.0-95.183.46.255
                  188.68.80.0/24
                  188.68.90.0-188.68.93.255
                  192.54.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:17:64:dd:da:e4:60:92:6f:be:b7:96:d3:ef:93:97:70:62:
         2b:c2:7a:88:42:40:38:04:ec:9d:02:23:e3:53:14:b9:83:19:
         c6:fe:c9:d4:1e:6b:8a:3d:05:2b:07:60:50:8f:70:e3:e6:a2:
         05:42:a7:41:f5:4d:a9:29:07:50:62:ac:76:56:b8:d1:35:ea:
         36:02:99:75:dc:46:a0:53:95:3d:ef:59:c0:b8:47:b2:a0:97:
         a8:bc:18:0e:8b:3e:08:9f:3a:a5:22:71:1f:b5:5b:84:c2:42:
         26:b2:cc:0f:e3:8a:86:59:cb:f7:45:62:b5:0a:ab:f8:87:cf:
         0d:1c:45:97:60:5c:41:93:02:72:45:c8:3e:a6:a4:16:eb:60:
         5c:7a:18:f0:0b:74:a1:af:f1:60:73:65:c3:5e:f3:d9:d6:af:
         3c:93:37:b5:07:cc:3c:46:95:ee:9a:4d:94:8f:0d:5c:72:0d:
         8b:71:d1:1d:c1:d7:dd:05:5e:b7:37:b3:03:24:cc:f6:5d:7c:
         19:05:55:8a:36:a0:2a:2c:8f:80:0e:cb:08:3a:94:40:63:4c:
         e0:99:9e:26:f7:d3:00:85:b4:d3:89:c1:a6:ae:21:5a:40:1c:
         21:50:27:7f:92:60:81:79:69:fc:2f:f3:c6:51:e1:73:53:a1:
         5a:2a:9e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 09:04:12 2026 by rpki-client