This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa
File:                     Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa (raw, json)
Hash identifier:          RrE3tRzsghSzPvz2h6aM81MCjghx1uCG0mdEiIujtTg=
Subject key identifier:   0E:7B:FE:11:5D:45:D7:D7:BD:68:C1:B5:2F:D7:6C:6A:AC:B5:0B:86
Certificate issuer:       /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial:       019B783559AADAD3FEC7477B4D98CF522074
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa
Signing time:             Thu 01 Jan 2026 06:18:40 +0000
ROA not before:           Thu 01 Jan 2026 06:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24961
IP address blocks:        185.19.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:35:59:aa:da:d3:fe:c7:47:7b:4d:98:cf:52:20:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
        Validity
            Not Before: Jan  1 06:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0e7bfe115d45d7d7bd68c1b52fd76c6aacb50b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:a7:b1:01:7f:6e:39:40:21:cf:ee:78:65:
                    ca:cb:63:cb:22:c9:b3:3b:7e:7c:db:75:6b:d6:1d:
                    0e:e5:3b:68:22:f7:bc:ec:29:dc:d2:86:c6:80:2a:
                    8e:21:6d:ef:57:75:6a:c2:f8:44:f5:c2:60:e5:a2:
                    9c:20:6e:9f:77:ec:75:2c:6b:67:39:7f:30:92:83:
                    cf:10:4c:b0:9e:86:06:da:48:21:7a:54:ba:5f:5b:
                    90:df:7a:0d:b6:aa:0a:9c:da:1b:35:82:fd:22:ab:
                    9e:2b:c5:0c:b4:2e:cc:de:4f:f8:11:48:df:3d:e7:
                    5b:ce:c9:56:02:47:e0:b7:e3:90:f9:66:e9:cc:40:
                    4f:d1:b7:36:31:ed:ed:ee:38:44:ae:d9:f3:40:99:
                    e4:dc:75:02:ef:d7:7f:4d:53:58:01:b6:8f:a2:58:
                    0a:99:a4:91:d8:d2:47:2e:61:32:21:dd:b1:38:55:
                    b1:de:69:b9:ee:db:9d:ec:14:99:3d:53:fb:54:af:
                    2c:32:62:ee:89:95:cf:04:09:3b:46:07:c1:b2:d2:
                    b1:ab:bf:d3:04:fb:fe:07:61:6f:8e:27:ed:2d:99:
                    c4:ee:9d:13:11:59:53:a8:ba:17:90:25:1c:71:62:
                    39:15:c9:34:d8:68:43:f2:7b:0f:a3:e2:9e:c7:8e:
                    40:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7B:FE:11:5D:45:D7:D7:BD:68:C1:B5:2F:D7:6C:6A:AC:B5:0B:86
            X509v3 Authority Key Identifier:
                keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.19.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:67:c7:fd:6b:ae:50:44:04:ad:99:f1:e6:18:0a:5f:d9:dc:
         8d:db:bd:21:cc:eb:8a:70:0a:86:f0:e5:a4:e0:3a:1f:b1:ad:
         70:2f:03:1a:5b:95:8f:ce:9a:00:c3:e5:70:2b:45:92:e9:92:
         1e:47:c4:64:73:e3:88:5b:0f:28:97:7a:b5:02:e6:9e:e8:98:
         b9:5c:01:12:5a:8b:e3:bb:99:45:e5:63:02:4c:25:97:46:c0:
         26:d9:bd:44:6b:65:2f:bd:aa:7a:70:28:5d:4e:72:fc:89:b9:
         99:fc:af:33:5e:d7:fd:18:7d:ea:5c:61:83:d5:a9:7c:f3:b5:
         3d:ae:9b:22:ec:d6:17:ec:33:c2:f5:98:85:2c:19:9a:a9:f5:
         e1:91:3a:60:ee:23:69:e3:0c:04:ca:f0:c6:95:61:05:74:af:
         50:9b:7c:56:6e:40:ce:1a:e4:f8:6a:62:61:f2:b7:ab:35:3e:
         a5:78:04:f4:79:6c:04:d5:1e:fe:04:5f:26:ba:a2:9f:5b:a1:
         66:1a:11:dd:5b:45:24:6d:ef:ac:b2:51:92:47:d5:7d:ce:db:
         f8:be:3e:0b:1e:44:fd:86:38:1a:9a:a9:80:b8:56:2d:79:c4:
         b7:7d:43:dd:7a:86:f6:ca:d6:2e:3d:d5:0c:ac:69:e2:94:4b:
         aa:a3:f3:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt4NVmq2tP+x0d7TZjPUiB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMzEyNDdmMzU5YTZkNDkyZGM5OTQzYWUwZjAwZmM4YmUy
MTZjNzgwHhcNMjYwMTAxMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTdiZmUxMTVkNDVkN2Q3YmQ2OGMxYjUyZmQ3NmM2YWFjYjUwYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaCnsQF/bjlAIc/ueGXKy2PLIsmz
O35823Vr1h0O5TtoIve87Cnc0obGgCqOIW3vV3VqwvhE9cJg5aKcIG6fd+x1LGtn
OX8wkoPPEEywnoYG2kghelS6X1uQ33oNtqoKnNobNYL9IqueK8UMtC7M3k/4EUjf
PedbzslWAkfgt+OQ+WbpzEBP0bc2Me3t7jhErtnzQJnk3HUC79d/TVNYAbaPolgK
maSR2NJHLmEyId2xOFWx3mm57tud7BSZPVP7VK8sMmLuiZXPBAk7RgfBstKxq7/T
BPv+B2FvjiftLZnE7p0TEVlTqLoXkCUccWI5Fck02GhD8nsPo+Kex45AdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA57/hFdRdfXvWjBtS/XbGqstQuGMB8GA1UdIwQY
MBaAFLwxJH81mm1JLcmUOuDwD8i+IWx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQt
NTY4MDVjYTExYzMzLzEvRG52LUVWMUYxOWU5YU1HMUw5ZHNhcXkxQzRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQtNTY4MDVjYTExYzMz
LzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRO6MA0G
CSqGSIb3DQEBCwUAA4IBAQCMZ8f9a65QRAStmfHmGApf2dyN270hzOuKcAqG8OWk
4Dofsa1wLwMaW5WPzpoAw+VwK0WS6ZIeR8Rkc+OIWw8ol3q1Auae6Ji5XAESWovj
u5lF5WMCTCWXRsAm2b1Ea2Uvvap6cChdTnL8ibmZ/K8zXtf9GH3qXGGD1al887U9
rpsi7NYX7DPC9ZiFLBmaqfXhkTpg7iNp4wwEyvDGlWEFdK9Qm3xWbkDOGuT4amJh
8rerNT6leAT0eWwE1R7+BF8muqKfW6FmGhHdW0Ukbe+sslGSR9V9ztv4vj4LHkT9
hjgamqmAuFYtecS3fUPdeob2ytYuPdUMrGnilEuqo/O9
-----END CERTIFICATE-----
Generated at Wed Jan 21 09:23:04 2026 by rpki-client