This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/1wdKkCW3FBRKaMmpzf4RRdUNO0Q.roa
File:                     1wdKkCW3FBRKaMmpzf4RRdUNO0Q.roa (raw, json)
Hash identifier:          DRLbOTG9czrpsVPaMEJ38IoGY3J/JcSc/4PjmqzOW9s=
Subject key identifier:   D7:07:4A:90:25:B7:14:14:4A:68:C9:A9:CD:FE:11:45:D5:0D:3B:44
Certificate issuer:       /CN=11829bf4764b31ee34b44d80629209a8c7065eaf
Certificate serial:       019B865CA8488423590DE5754DB068878D4D
Authority key identifier: 11:82:9B:F4:76:4B:31:EE:34:B4:4D:80:62:92:09:A8:C7:06:5E:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/1wdKkCW3FBRKaMmpzf4RRdUNO0Q.roa
Signing time:             Sun 04 Jan 2026 00:16:17 +0000
ROA not before:           Sun 04 Jan 2026 00:16:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28974
IP address blocks:        194.76.188.0/22 maxlen: 22
                          195.39.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:86:5c:a8:48:84:23:59:0d:e5:75:4d:b0:68:87:8d:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11829bf4764b31ee34b44d80629209a8c7065eaf
        Validity
            Not Before: Jan  4 00:16:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d7074a9025b714144a68c9a9cdfe1145d50d3b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:24:10:3e:73:b4:7e:2f:ab:c0:a4:54:a7:
                    27:d6:16:7b:f7:db:0d:ca:2f:b1:bf:33:3c:28:a9:
                    5c:b1:de:0b:26:45:9a:4c:d3:c5:e1:98:33:7d:e8:
                    e3:ca:61:51:94:44:f7:c3:87:77:ac:bd:30:21:f8:
                    94:24:5a:04:c2:0a:b3:08:fe:85:0e:dd:1e:2f:4d:
                    80:f8:4e:be:d0:98:59:ac:8f:10:49:0c:98:ae:ff:
                    99:95:33:cd:db:68:a9:23:16:93:49:d8:68:7f:4e:
                    85:d7:a4:1e:5d:36:93:cf:71:61:64:f4:54:86:b6:
                    d8:15:ef:49:49:1b:39:0c:27:87:cd:7a:cf:29:81:
                    f2:a4:12:98:29:9a:0a:d1:19:97:79:a6:80:33:e3:
                    33:d8:5c:ac:c4:8c:9a:a6:df:ad:77:85:77:35:6b:
                    15:7c:ec:55:dd:41:f7:66:23:3c:a8:3e:2a:6f:0c:
                    f4:62:7e:2d:c4:26:a2:a4:13:89:34:36:e3:57:a6:
                    26:2b:1e:20:8d:6c:7f:dd:7f:b6:51:d5:d4:b1:49:
                    22:35:70:2a:f6:78:cf:60:e2:63:c4:5f:8e:22:d6:
                    78:1a:c0:ae:b4:02:ff:2f:6a:b1:54:e0:75:15:0c:
                    45:b1:14:82:6e:2f:40:5f:27:2f:c0:4b:3b:58:81:
                    64:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:07:4A:90:25:B7:14:14:4A:68:C9:A9:CD:FE:11:45:D5:0D:3B:44
            X509v3 Authority Key Identifier:
                keyid:11:82:9B:F4:76:4B:31:EE:34:B4:4D:80:62:92:09:A8:C7:06:5E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/1wdKkCW3FBRKaMmpzf4RRdUNO0Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.76.188.0/22
                  195.39.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:44:0e:2c:08:da:13:52:16:fa:74:89:8f:35:d4:cf:b0:21:
         3c:4e:5c:29:39:8b:6e:85:73:77:6b:52:ef:58:ba:fb:7e:2f:
         5c:4b:b0:59:f3:dc:8f:f5:9d:6e:d5:7e:80:4a:fc:17:c1:55:
         34:0e:a7:29:32:7d:16:63:d1:f0:68:b3:cc:2c:a8:e7:7b:c2:
         b7:50:ea:64:da:77:93:f2:69:10:ab:ad:1e:11:b2:bd:b1:e2:
         21:36:99:ef:32:4a:ac:2b:3b:d9:11:57:04:58:16:e3:e9:a0:
         14:09:9d:04:8e:5e:40:a1:1e:38:48:ed:94:ba:17:3a:b1:de:
         81:72:78:d6:2f:e9:9a:90:ba:11:0c:47:c6:09:9c:eb:ed:4b:
         19:de:e6:bf:05:25:63:ca:bc:87:f1:ed:93:9e:11:9f:b1:da:
         a8:7d:79:bc:15:31:23:55:77:bd:46:88:58:b3:af:0f:2b:0f:
         e0:cc:64:70:57:b2:89:9a:7a:05:83:6d:aa:75:0e:8e:78:5b:
         be:b4:da:36:06:74:c8:7b:b4:dc:be:b3:48:a9:49:e5:3f:79:
         68:3c:94:3a:90:89:e2:40:73:ab:4d:3c:f5:97:be:84:c4:57:
         5b:2a:d0:1c:7d:e5:49:a8:dd:92:d7:3c:ad:3c:66:7f:7b:22:
         c7:f4:58:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:14:01 2026 by rpki-client