This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/dspttiokyRWTJ0EiYPb4T9i6tOw.roa
File:                     dspttiokyRWTJ0EiYPb4T9i6tOw.roa (raw, json)
Hash identifier:          QWCGmY5jOfRv55kAj8L2RUox3IsinGCno3NGv/5yToo=
Subject key identifier:   76:CA:6D:B6:2A:24:C9:15:93:27:41:22:60:F6:F8:4F:D8:BA:B4:EC
Certificate issuer:       /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial:       019B79ECF7A260F957F33B1AE809BF142C62
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/dspttiokyRWTJ0EiYPb4T9i6tOw.roa
Signing time:             Thu 01 Jan 2026 14:18:51 +0000
ROA not before:           Thu 01 Jan 2026 14:18:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     7155
IP address blocks:        37.19.96.0/21 maxlen: 21
                          37.19.97.0/24 maxlen: 24
                          37.19.98.0/24 maxlen: 24
                          37.19.99.0/24 maxlen: 24
                          37.19.100.0/24 maxlen: 24
                          37.203.192.0/21 maxlen: 21
                          37.203.192.0/22 maxlen: 22
                          37.203.192.0/24 maxlen: 24
                          37.203.193.0/24 maxlen: 24
                          37.203.194.0/24 maxlen: 24
                          37.203.195.0/24 maxlen: 24
                          37.203.196.0/24 maxlen: 24
                          37.203.197.0/24 maxlen: 24
                          185.109.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:f7:a2:60:f9:57:f3:3b:1a:e8:09:bf:14:2c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
        Validity
            Not Before: Jan  1 14:18:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=76ca6db62a24c9159327412260f6f84fd8bab4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:79:bc:c3:49:b5:0d:80:33:26:2a:13:3f:
                    28:06:68:6d:95:bd:6c:30:d5:60:53:f1:c3:ad:50:
                    8e:96:53:36:e8:a8:a7:a6:8c:3b:d9:47:5b:75:e1:
                    72:4f:b1:61:bb:d7:46:86:0d:6f:61:fb:04:39:26:
                    6a:be:89:7f:bf:60:69:88:50:2f:6a:d1:f2:1b:95:
                    99:11:3a:fa:ed:47:14:52:ec:4a:0d:4a:fe:da:52:
                    2c:fc:98:13:4d:64:77:46:c5:7d:b1:74:0a:69:ec:
                    65:fb:d3:67:c2:15:1f:31:a7:ef:89:f2:38:d7:d2:
                    0b:54:38:cf:c2:b1:dd:3d:6f:49:b4:94:dc:4b:a3:
                    1a:06:7a:71:35:53:49:e9:d7:5d:92:7c:7a:b2:88:
                    d5:32:dc:c6:16:82:f6:35:9b:3b:58:2c:02:76:7d:
                    9a:21:37:91:cd:09:46:b0:55:a7:b5:47:40:6a:a7:
                    c2:cd:59:53:2a:7d:4d:8b:1a:c1:2a:b2:d7:e9:ab:
                    09:19:f1:73:f2:eb:12:80:f4:86:8a:4f:cc:74:64:
                    c6:3c:8d:56:f1:f5:87:25:07:2c:af:44:dc:b0:95:
                    b2:23:32:dc:3a:b9:5c:fe:45:65:c2:3a:54:63:02:
                    d9:c7:8c:35:78:a4:6f:c6:7f:a4:36:d7:8e:30:8d:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CA:6D:B6:2A:24:C9:15:93:27:41:22:60:F6:F8:4F:D8:BA:B4:EC
            X509v3 Authority Key Identifier:
                keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/dspttiokyRWTJ0EiYPb4T9i6tOw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.19.96.0/21
                  37.203.192.0/21
                  185.109.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:0a:9d:03:93:1e:20:19:13:6c:55:70:9d:3b:34:e9:be:8c:
         63:c6:a1:80:22:36:5d:28:7b:24:6a:ad:c9:5b:83:d8:f6:c9:
         92:f6:af:d0:56:b0:15:4b:d4:a1:e0:36:78:27:99:b8:ff:a5:
         bc:9f:e3:cb:38:ad:3d:11:a7:45:74:6f:2e:8f:f6:7f:e0:2b:
         23:ef:0f:7d:c6:bc:15:e7:d2:15:a1:46:61:c8:13:f8:83:d6:
         8a:e3:0c:00:06:5b:7c:2f:49:2a:6f:24:83:e3:bb:d4:62:34:
         83:13:8d:de:4a:60:51:d6:0f:7b:14:dd:e5:39:7f:ae:9a:b7:
         45:bd:04:79:9d:df:40:0e:34:ea:52:d1:43:ea:1e:0f:a8:e9:
         a6:7a:96:6d:5d:73:77:62:a5:ec:5d:00:76:70:a6:31:99:ac:
         9c:a2:64:f7:28:3d:8d:ac:a2:79:d9:7c:23:73:97:08:fb:37:
         a5:6d:ee:9b:7c:d4:81:43:28:68:4b:db:13:6c:fd:79:b3:d7:
         77:b0:a9:05:27:84:d3:b2:3f:9e:f2:4e:43:e7:71:1c:c0:c2:
         d0:c6:03:d3:66:5f:93:20:39:9d:0e:01:bf:0a:54:54:36:59:
         65:46:12:33:82:04:a7:ea:58:cb:14:47:1a:62:1a:f2:ad:af:
         83:f5:62:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:51:25 2026 by rpki-client