This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/dkLJNc8YE1qupqt8vejn4yN_8pU.roa
File:                     dkLJNc8YE1qupqt8vejn4yN_8pU.roa (raw, json)
Hash identifier:          9F30pB6QAME+aQUtJBPApccmf32qIQY7Y6P8efT0WEs=
Subject key identifier:   76:42:C9:35:CF:18:13:5A:AE:A6:AB:7C:BD:E8:E7:E3:23:7F:F2:95
Certificate issuer:       /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial:       019B79106C279987FF19FB40E253AC9DD2F6
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/dkLJNc8YE1qupqt8vejn4yN_8pU.roa
Signing time:             Thu 01 Jan 2026 10:17:57 +0000
ROA not before:           Thu 01 Jan 2026 10:17:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199967
IP address blocks:        185.196.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:6c:27:99:87:ff:19:fb:40:e2:53:ac:9d:d2:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
        Validity
            Not Before: Jan  1 10:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7642c935cf18135aaea6ab7cbde8e7e3237ff295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a1:08:22:a2:d3:3d:9a:88:c4:d3:e8:ef:bb:
                    16:e0:b6:1e:0b:40:97:bd:f4:fa:9d:3c:4c:e5:d7:
                    8d:3b:1d:8f:91:ab:97:f2:01:f2:5a:32:f5:08:06:
                    8f:c5:a1:e2:b4:0f:86:5b:49:6e:3b:43:b4:74:a4:
                    62:fb:cb:bc:2e:e0:c0:a0:53:7f:3b:63:5b:10:7b:
                    5c:ba:ff:74:e3:1c:61:26:c8:17:0c:47:b3:69:4c:
                    aa:53:b3:22:4a:8e:ae:e4:50:e0:61:c3:96:a8:f5:
                    0f:d2:3c:de:49:eb:ad:f8:6f:17:16:9e:16:c1:63:
                    77:9f:60:a7:c2:36:11:b3:ab:47:5e:6d:e7:3a:9f:
                    a2:71:84:df:02:e0:8d:76:0d:d9:7b:a4:e1:d3:6d:
                    e9:88:32:7e:13:1c:fd:b1:08:ab:9b:b0:15:50:ce:
                    5d:21:98:8d:f5:1d:e6:48:0b:cd:7a:fd:e6:b9:60:
                    0e:76:e4:ed:6a:2f:53:ae:31:8a:49:ca:29:50:49:
                    ca:1d:72:8f:9d:2e:97:13:96:94:a0:78:7e:43:84:
                    be:9c:44:8d:4d:ca:37:20:94:6e:d0:c0:3e:0f:a9:
                    60:b5:f9:16:cc:57:bd:90:49:7c:75:b3:ad:8f:5c:
                    76:77:6f:35:ea:52:29:37:37:d5:f2:fd:eb:d1:60:
                    c5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:42:C9:35:CF:18:13:5A:AE:A6:AB:7C:BD:E8:E7:E3:23:7F:F2:95
            X509v3 Authority Key Identifier:
                keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/dkLJNc8YE1qupqt8vejn4yN_8pU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.196.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:c3:01:81:5c:a3:b6:aa:bb:64:87:de:a9:07:c9:e5:fe:02:
         15:cd:5a:6b:4c:2e:91:8f:3e:91:63:9e:ac:3d:78:28:3b:11:
         24:6c:2e:06:9a:34:38:7b:34:16:ea:d5:52:0c:8d:99:7e:fd:
         66:83:c0:5b:82:13:3c:b7:75:ce:f2:68:5c:f2:b3:d5:ec:11:
         a4:10:cf:b0:5b:5e:79:2a:13:a5:d1:eb:55:37:52:f4:a9:29:
         91:76:c9:aa:d4:07:1c:13:8a:df:75:74:7a:f9:5c:b2:cd:fd:
         f2:6c:9f:94:ce:9b:7c:b5:77:17:1c:ae:f6:e6:14:18:83:91:
         69:95:b6:2e:ec:4e:a7:62:a0:ad:4f:bf:50:1e:63:ca:6c:e1:
         a1:2f:5f:fa:7d:38:f6:0c:9f:45:98:14:42:d6:b1:bb:43:34:
         c8:f4:95:eb:8c:a8:9d:57:e8:e7:de:6f:a9:23:4c:44:08:5a:
         c3:5c:29:cd:fe:4d:ce:c3:68:40:53:e6:f5:de:59:da:61:0a:
         3d:19:a5:ae:65:70:5d:76:7b:ef:64:5b:5a:b2:27:d7:01:9d:
         f8:64:6b:48:f5:84:f7:a5:1d:e8:f8:e1:8b:e8:a1:5b:9b:63:
         a8:0f:2a:29:66:18:0b:40:6f:c6:a1:fb:94:d4:39:00:6d:f4:
         ed:70:54:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:21:54 2026 by rpki-client