This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/0rveDYYcrT7zdZKuahwTECp3T4E.roa
File:                     0rveDYYcrT7zdZKuahwTECp3T4E.roa (raw, json)
Hash identifier:          Pk8DvHsVkrqTdOHnSjdJSO+iO0nQzwivT/Z1Hgi2rpM=
Subject key identifier:   D2:BB:DE:0D:86:1C:AD:3E:F3:75:92:AE:6A:1C:13:10:2A:77:4F:81
Certificate issuer:       /CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Certificate serial:       019B7910D054B9437DD3C43F496BA2FE7503
Authority key identifier: C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/0rveDYYcrT7zdZKuahwTECp3T4E.roa
Signing time:             Thu 01 Jan 2026 10:18:23 +0000
ROA not before:           Thu 01 Jan 2026 10:18:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210433
IP address blocks:        185.81.200.0/22 maxlen: 24
                          2a03:6260::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:d0:54:b9:43:7d:d3:c4:3f:49:6b:a2:fe:75:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
        Validity
            Not Before: Jan  1 10:18:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d2bbde0d861cad3ef37592ae6a1c13102a774f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:a7:dd:39:48:c9:96:58:47:36:11:ad:29:
                    19:b1:15:df:f9:72:dd:d5:43:13:c9:7e:f4:de:92:
                    00:ff:33:06:5a:67:a5:bd:9d:fc:e5:a1:0c:88:b1:
                    37:fa:1d:65:c5:26:d5:1f:7a:ce:16:3a:c1:19:37:
                    b7:32:5b:a3:ba:0d:1a:5a:08:d4:cd:d4:bf:59:9c:
                    da:df:33:c0:73:3e:37:47:c1:fa:52:24:e6:67:0e:
                    f9:6c:26:5e:45:8b:a9:39:c8:e1:62:74:01:11:01:
                    f3:14:2c:98:19:c3:02:b7:de:a1:b9:12:e0:fe:ba:
                    c6:b0:9f:fb:be:4b:bc:fc:9e:06:f1:91:10:41:66:
                    76:a4:48:d6:fb:fb:34:b2:11:19:38:98:ae:78:ae:
                    1c:be:cc:62:8a:91:86:c3:7d:59:74:d3:12:01:51:
                    06:d2:09:a4:3f:14:0b:c8:13:af:9e:a6:23:df:1f:
                    9d:e3:9d:f9:ec:29:ff:c2:9f:43:40:dc:bb:4e:be:
                    0c:dd:f3:d1:d4:a3:d8:f2:31:3b:46:3d:e9:a3:9d:
                    50:14:50:1c:95:ac:e2:af:8a:20:fc:c0:bc:b9:38:
                    d5:12:6e:9d:48:56:b9:67:e6:47:64:4f:0a:84:53:
                    05:d8:07:2d:97:cd:1a:a2:dc:47:95:20:db:70:31:
                    5d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BB:DE:0D:86:1C:AD:3E:F3:75:92:AE:6A:1C:13:10:2A:77:4F:81
            X509v3 Authority Key Identifier:
                keyid:C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/0rveDYYcrT7zdZKuahwTECp3T4E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.200.0/22
                IPv6:
                  2a03:6260::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:d8:a7:ef:3e:59:39:61:93:9c:cb:d2:58:fc:24:e6:1c:cf:
         d7:98:18:3e:41:30:2a:3f:0d:7f:be:32:18:01:5f:02:84:7d:
         ac:6d:17:3b:e5:0b:a4:35:27:11:bd:39:b5:67:5f:20:3f:b0:
         76:2b:20:43:77:bc:69:2b:6d:5f:07:fe:5e:37:a1:58:bb:7d:
         55:ae:33:01:77:c5:56:69:1f:b3:4d:ff:4b:ad:79:9a:42:86:
         c6:13:a4:a0:50:2f:fe:da:3e:8d:64:6c:45:70:17:22:b1:d8:
         2c:f7:ed:4c:39:3b:dc:85:5a:26:de:ca:0e:18:b7:1f:83:9a:
         a4:28:51:9c:18:0e:be:08:ea:bb:02:b3:29:48:d5:90:1a:3f:
         8d:b4:5c:4d:07:d1:f6:c6:d1:e6:49:dc:bf:03:00:7c:a2:87:
         5c:4e:6a:a3:7d:fd:b9:85:99:77:40:e8:38:63:fd:94:5a:89:
         da:70:49:1c:06:b9:63:5c:14:c4:ba:b9:18:7d:bf:17:91:7e:
         0c:6a:c4:b5:75:d9:76:45:c0:0e:80:ce:66:f4:5e:64:25:65:
         f1:c9:d7:8e:09:10:ef:66:c6:fd:13:c0:d1:68:ae:7e:be:ed:
         4f:73:bc:6d:95:55:28:b5:8c:58:54:96:80:95:1e:63:54:bd:
         f5:d9:2f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:13:20 2026 by rpki-client