This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/DzslbHixmzBYrsPf_coOdi4vCac.roa
File:                     DzslbHixmzBYrsPf_coOdi4vCac.roa (raw, json)
Hash identifier:          VreYJplCemlpCEq1mBOMn3xaebIevlMt/pCSqFrimOU=
Subject key identifier:   0F:3B:25:6C:78:B1:9B:30:58:AE:C3:DF:FD:CA:0E:76:2E:2F:09:A7
Certificate issuer:       /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial:       019B7F830DD9652D95D0051A92BF42037B50
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/DzslbHixmzBYrsPf_coOdi4vCac.roa
Signing time:             Fri 02 Jan 2026 16:20:53 +0000
ROA not before:           Fri 02 Jan 2026 16:20:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209049
IP address blocks:        195.110.176.0/21 maxlen: 24
                          195.110.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:0d:d9:65:2d:95:d0:05:1a:92:bf:42:03:7b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
        Validity
            Not Before: Jan  2 16:20:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0f3b256c78b19b3058aec3dffdca0e762e2f09a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:17:4b:85:ba:e8:b5:93:6d:df:b8:74:d1:c3:
                    5b:b0:e6:42:fd:78:cb:e1:2b:cd:76:48:00:c9:6f:
                    7e:18:87:5d:94:ce:3b:22:dd:56:94:a3:b8:41:b4:
                    02:a5:ad:97:0a:29:46:6a:13:72:5c:02:d0:7e:15:
                    e1:93:7b:0d:08:05:65:3c:8b:41:17:c3:86:76:0f:
                    ba:c0:0a:dc:3f:7c:b7:60:3c:da:43:a4:c0:07:e7:
                    c2:f0:a5:df:96:0d:b7:83:41:1c:1b:b9:93:6d:61:
                    ff:0e:54:db:f9:e5:0d:37:5a:37:45:2e:f4:a7:3d:
                    cd:49:83:e8:e3:45:c9:c6:4d:e9:00:23:7d:6f:1a:
                    50:df:a3:69:44:38:4b:3a:b3:a3:e5:10:5b:ce:3f:
                    f5:fd:e6:bb:94:b7:d7:00:70:dc:15:6e:5e:85:87:
                    ef:4f:73:4e:00:96:47:e0:94:63:19:86:4f:93:ef:
                    bc:ba:c3:bf:14:b3:2f:9c:16:b0:95:9c:af:39:f7:
                    83:1b:f4:46:2f:31:a8:c8:64:d0:3e:26:9c:93:8b:
                    17:82:6c:15:8d:2d:22:b7:17:ed:68:db:9a:ad:be:
                    e9:b3:d4:bb:a8:b8:cd:24:db:ef:dc:69:a2:5e:55:
                    94:a8:80:76:d8:de:03:ee:41:eb:8b:db:97:bb:f6:
                    c6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3B:25:6C:78:B1:9B:30:58:AE:C3:DF:FD:CA:0E:76:2E:2F:09:A7
            X509v3 Authority Key Identifier:
                keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/DzslbHixmzBYrsPf_coOdi4vCac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.110.176.0-195.110.185.255

    Signature Algorithm: sha256WithRSAEncryption
         5b:c5:f2:f4:36:a5:98:e1:29:aa:b3:39:3d:16:88:4d:d4:14:
         c7:29:dc:03:c7:c7:22:d6:b5:ae:80:c0:86:17:e9:7b:79:8e:
         79:9a:5a:3d:73:e7:78:c0:b5:cc:2f:59:72:f9:0b:73:32:7a:
         d4:13:11:b8:50:5d:9f:30:ba:96:86:2d:a7:4f:96:73:ea:81:
         f0:b8:af:1d:68:f0:07:3b:45:5b:70:5f:e7:df:e5:4d:66:72:
         2b:af:09:cc:58:4c:9e:f0:66:88:74:94:07:57:da:67:20:91:
         04:df:2c:89:21:40:a6:99:b9:62:96:47:2f:78:00:34:93:5f:
         60:eb:a5:1d:67:db:a0:2f:82:59:32:4b:22:35:06:6e:63:20:
         13:04:d7:65:41:f0:c7:05:aa:37:9e:05:d1:7f:4e:e4:67:bf:
         d5:12:4b:2e:fb:40:ec:b4:65:75:56:53:27:3e:ab:fe:05:dc:
         bc:01:51:50:fb:27:97:ca:84:15:02:a1:55:fe:63:c3:10:21:
         94:39:59:10:46:b5:fb:9c:57:c8:72:9c:88:c2:97:3a:63:df:
         1d:90:a8:1d:c4:82:c1:49:96:10:60:78:8e:09:fe:fc:08:a1:
         68:2d:9c:37:16:c6:20:16:88:4e:a9:74:55:3b:b8:3e:30:de:
         b0:aa:0a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:39 2026 by rpki-client