This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/Ad2BYNr4C8UGPtT46SLlPEvhYoE.roa
File:                     Ad2BYNr4C8UGPtT46SLlPEvhYoE.roa (raw, json)
Hash identifier:          iHuFlOzhqVh9TVA/RdSn3C6VoHbo7FF1nq7e3/ScdEM=
Subject key identifier:   01:DD:81:60:DA:F8:0B:C5:06:3E:D4:F8:E9:22:E5:3C:4B:E1:62:81
Certificate issuer:       /CN=c32cc7a964f4f370929291e19fff7de53f19be44
Certificate serial:       019B7C12A88EEA27CF4D22A90502198F6804
Authority key identifier: C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/Ad2BYNr4C8UGPtT46SLlPEvhYoE.roa
Signing time:             Fri 02 Jan 2026 00:19:15 +0000
ROA not before:           Fri 02 Jan 2026 00:19:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48037
IP address blocks:        193.176.222.0/24 maxlen: 24
                          193.176.223.0/24 maxlen: 24
                          193.176.224.0/24 maxlen: 24
                          193.176.225.0/24 maxlen: 24
                          193.176.226.0/24 maxlen: 24
                          193.176.234.0/24 maxlen: 24
                          193.177.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 00:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:a8:8e:ea:27:cf:4d:22:a9:05:02:19:8f:68:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32cc7a964f4f370929291e19fff7de53f19be44
        Validity
            Not Before: Jan  2 00:19:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=01dd8160daf80bc5063ed4f8e922e53c4be16281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:66:8e:6d:b0:e5:b3:04:66:a6:55:34:80:bf:
                    ef:3b:c6:1f:3c:bb:35:83:06:95:e2:96:90:1f:95:
                    6a:d6:7a:ce:e2:f3:67:a1:cf:a7:2a:02:23:03:e3:
                    55:71:30:93:1c:2d:b1:27:fd:f6:f7:cc:d8:3b:7e:
                    e4:98:ee:c5:43:a6:9f:f6:00:c0:95:c0:20:8e:3a:
                    f9:d8:73:cc:8a:e7:77:8b:96:c7:a6:0b:42:2a:30:
                    b0:95:48:a8:be:25:f7:98:a7:1f:b1:fa:84:88:7d:
                    ef:3c:52:b6:0e:d9:5d:18:13:62:75:1c:fe:9f:2a:
                    39:5b:68:e6:26:85:39:23:7b:2b:90:8b:6c:78:0a:
                    f3:d0:79:ad:b8:10:77:1e:2d:04:09:c7:75:1e:03:
                    00:ea:fb:19:69:67:bb:6d:16:e8:fe:03:03:bf:f8:
                    88:14:3f:9c:61:7a:37:41:83:09:31:5c:f2:33:41:
                    06:10:61:b3:cb:74:6c:95:88:a4:a6:75:3a:5f:5c:
                    81:02:ca:7c:d5:90:45:dc:d5:85:58:bb:d9:c6:4f:
                    de:4d:0d:f6:f8:f6:48:75:41:00:de:54:b0:26:c3:
                    25:5e:60:91:1c:81:b9:9c:fb:c6:a5:64:a5:e4:e1:
                    32:91:1d:9b:98:bd:b2:2a:e1:d3:80:9c:6e:98:1b:
                    47:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DD:81:60:DA:F8:0B:C5:06:3E:D4:F8:E9:22:E5:3C:4B:E1:62:81
            X509v3 Authority Key Identifier:
                keyid:C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/Ad2BYNr4C8UGPtT46SLlPEvhYoE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.176.222.0-193.176.226.255
                  193.176.234.0/24
                  193.177.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:7f:bb:76:37:24:5c:1c:e4:56:48:ff:69:50:52:07:12:36:
         fc:61:39:98:2a:2a:2f:ca:37:81:c9:be:aa:10:fa:19:df:88:
         5a:e9:4a:f5:b8:62:cd:b6:bc:ca:93:b2:9f:c5:cc:9b:61:bc:
         5c:4c:16:aa:c6:74:dd:b1:be:24:47:bf:d2:32:c7:52:89:2e:
         e4:50:70:4d:a6:12:32:03:87:dc:0a:8b:37:21:9c:20:e5:6a:
         58:37:1e:79:76:ef:9e:73:c1:45:a3:fd:7e:d5:e3:42:8d:7c:
         9f:53:d9:2d:6f:36:d0:31:fd:91:4f:80:f6:19:43:3e:a5:67:
         29:0d:e5:1c:57:88:06:c1:12:72:a4:60:9f:11:0d:e6:42:d7:
         3b:09:b7:1a:5c:30:7d:5b:6f:cd:93:40:aa:54:58:9e:26:1a:
         1e:86:21:1f:4a:8a:8c:65:8c:84:79:e6:bc:03:d8:6c:d0:c4:
         0c:a5:79:6a:b6:0a:d1:4d:cc:8b:9c:2e:03:cb:41:d4:b4:88:
         cd:af:82:e2:54:b0:d1:49:7b:54:1a:d2:33:d0:3b:e3:ad:ff:
         18:52:b9:e9:37:4b:5f:e2:fa:a0:7a:a9:01:79:69:3b:e6:4f:
         2e:81:98:bf:ed:5f:ca:9a:c5:3f:b6:08:8f:e4:ee:a4:e8:cd:
         97:24:c0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 07:46:27 2026 by rpki-client