This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/043Lbp27EDcUm-b86hgRfQTIMxA.roa
File:                     043Lbp27EDcUm-b86hgRfQTIMxA.roa (raw, json)
Hash identifier:          kfaT7xOA8Vvohn0rBNh/7C5Pf0XuWkbtD5lrheMBCvE=
Subject key identifier:   D3:8D:CB:6E:9D:BB:10:37:14:9B:E6:FC:EA:18:11:7D:04:C8:33:10
Certificate issuer:       /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial:       019B7A5B9D79F0612CD619221345E5C7A33E
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/043Lbp27EDcUm-b86hgRfQTIMxA.roa
Signing time:             Thu 01 Jan 2026 16:19:42 +0000
ROA not before:           Thu 01 Jan 2026 16:19:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        168.222.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:9d:79:f0:61:2c:d6:19:22:13:45:e5:c7:a3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
        Validity
            Not Before: Jan  1 16:19:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d38dcb6e9dbb1037149be6fcea18117d04c83310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cf:dd:5f:ee:8f:5c:86:59:3c:1d:84:22:1f:
                    21:63:32:41:d2:b5:1f:dc:3c:79:5a:c6:8d:70:b6:
                    ab:5b:75:ae:1e:2e:56:92:81:d5:2d:d7:be:4b:97:
                    03:df:6c:1a:a3:be:fe:a8:b5:6c:1d:89:fa:fc:f4:
                    2a:a5:29:44:ed:92:bf:ed:f8:aa:c8:eb:fd:ff:84:
                    ed:fe:f1:47:8a:0b:90:8b:a8:ae:85:9a:6e:73:27:
                    36:8e:4b:87:84:a4:0e:98:d9:af:81:40:5b:73:2a:
                    94:7d:12:60:63:11:b7:31:0b:91:23:c7:47:46:2f:
                    68:18:66:5c:f1:0c:28:7b:1e:fd:49:9b:da:e9:27:
                    ab:4a:8e:27:2f:d3:9e:b9:57:98:b7:3e:28:d8:50:
                    88:c5:9e:90:94:2f:01:80:61:6d:3b:1a:2b:3d:1f:
                    01:70:c2:88:cf:ce:7c:34:ea:e7:50:db:d1:7c:47:
                    ea:20:a4:7d:da:5a:41:85:aa:ed:52:80:5f:bd:ba:
                    ac:19:2a:08:a2:55:89:d7:f8:41:41:bb:e9:43:04:
                    e3:b1:f7:b6:73:92:41:2d:43:aa:4c:ff:1e:43:a8:
                    23:21:91:5c:87:db:d5:b7:1a:3d:43:6b:8f:c3:9c:
                    23:8b:6e:f5:bc:d6:e4:d7:5e:0e:2e:26:e5:07:96:
                    bf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8D:CB:6E:9D:BB:10:37:14:9B:E6:FC:EA:18:11:7D:04:C8:33:10
            X509v3 Authority Key Identifier:
                keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/043Lbp27EDcUm-b86hgRfQTIMxA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.222.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:40:37:46:ac:af:76:7e:78:9e:f6:42:17:34:bd:1a:ce:17:
         5b:d8:95:21:81:d2:fc:87:49:02:e1:49:72:86:3d:34:54:4e:
         0c:31:e2:63:d8:1f:e7:f0:d3:92:51:52:9f:e1:6f:d1:f0:24:
         12:27:27:1c:59:59:ec:0d:43:d5:a9:5d:65:70:83:7e:8b:4a:
         d6:6d:6f:4a:8a:45:c9:77:28:c1:ea:7c:13:82:9d:ff:7a:94:
         d3:56:9e:74:8f:7c:9f:5e:ec:fb:67:36:6d:70:de:fb:43:80:
         f6:2e:c3:5b:ce:2a:3d:11:97:81:4e:03:0f:35:77:0f:d0:e7:
         f8:46:28:0e:d0:81:cc:24:d1:de:10:80:3a:69:1f:7b:0e:d5:
         ac:a1:62:8f:5b:c4:b6:f3:4b:dc:f3:fe:87:d8:96:f8:ec:35:
         6f:c4:fe:46:e7:20:4e:e9:2f:40:c4:90:32:fc:35:69:ab:ed:
         c8:83:e4:61:9d:45:ae:ca:28:47:25:66:c6:69:d2:bd:25:8b:
         c1:62:5a:6e:60:ad:60:19:d9:15:37:79:a4:94:4c:b1:3a:37:
         ce:d1:82:5e:0a:20:7d:d0:a8:61:73:9f:19:25:e1:12:9e:6d:
         f7:26:ad:3c:df:0a:00:64:0c:b2:17:7f:97:87:ee:54:0b:e2:
         6a:a8:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 13:13:32 2026 by rpki-client