This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/dSfrM8-FFVFUm-WrRcQUFuwY6Wo.roa
File:                     dSfrM8-FFVFUm-WrRcQUFuwY6Wo.roa (raw, json)
Hash identifier:          E9Zm6PgzEcuKBh7gIYFfOkqLKVETB2A5ggtdlN8mCJc=
Subject key identifier:   75:27:EB:33:CF:85:15:51:54:9B:E5:AB:45:C4:14:16:EC:18:E9:6A
Certificate issuer:       /CN=5111bfd290afb520eba414f78a39750b7e99f4c5
Certificate serial:       019B7D5C86EABFD3AFEE50D8CD7E637F7DC5
Authority key identifier: 51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/dSfrM8-FFVFUm-WrRcQUFuwY6Wo.roa
Signing time:             Fri 02 Jan 2026 06:19:34 +0000
ROA not before:           Fri 02 Jan 2026 06:19:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214297
IP address blocks:        185.241.72.0/24 maxlen: 24
                          185.241.73.0/24 maxlen: 24
                          185.241.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:86:ea:bf:d3:af:ee:50:d8:cd:7e:63:7f:7d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5111bfd290afb520eba414f78a39750b7e99f4c5
        Validity
            Not Before: Jan  2 06:19:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7527eb33cf851551549be5ab45c41416ec18e96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:99:f3:85:ff:93:66:45:19:c5:af:c4:37:b6:
                    f3:20:9d:17:0c:ee:e8:3f:2e:6c:b2:1b:ca:f9:f5:
                    ff:55:9a:6b:6a:de:3c:76:5c:35:cf:27:ab:9b:79:
                    df:bb:9b:38:4c:20:af:b7:28:5c:bc:e6:81:63:53:
                    7f:cc:a1:7f:e7:a3:52:f2:22:39:18:af:42:89:4a:
                    30:ac:e1:90:9d:53:c7:a9:7b:c9:30:6e:b4:1d:b9:
                    87:2c:a0:bf:95:22:99:c7:e1:ec:e5:2c:ed:d2:b4:
                    34:76:4b:f3:4f:ee:aa:e0:98:3d:db:6c:7b:96:b3:
                    d6:c2:75:96:99:12:33:5f:98:f2:cb:a5:04:f3:7c:
                    ca:04:49:88:95:28:9e:9e:da:c1:6e:50:09:8e:a1:
                    e6:3c:ad:f8:bb:a5:51:de:da:b9:87:d9:29:0d:eb:
                    63:e9:f8:e7:56:df:22:75:92:29:9f:e0:53:1f:bb:
                    e3:39:f0:13:dc:7e:a4:a0:ec:a7:16:b0:84:42:5a:
                    a8:a1:1e:4b:34:8f:32:0e:dc:35:f1:df:10:0c:fe:
                    00:0c:80:18:39:ad:17:c2:36:5d:32:1c:a9:4e:be:
                    80:f6:90:f3:71:73:60:26:02:9d:6b:98:c2:4e:20:
                    77:07:85:79:aa:95:43:5f:df:02:05:f8:3e:dd:94:
                    1b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:27:EB:33:CF:85:15:51:54:9B:E5:AB:45:C4:14:16:EC:18:E9:6A
            X509v3 Authority Key Identifier:
                keyid:51:11:BF:D2:90:AF:B5:20:EB:A4:14:F7:8A:39:75:0B:7E:99:F4:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/URG_0pCvtSDrpBT3ijl1C36Z9MU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/dSfrM8-FFVFUm-WrRcQUFuwY6Wo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e201ee-9b58-4b94-a686-6a3114fcc6ac/1/URG_0pCvtSDrpBT3ijl1C36Z9MU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.72.0-185.241.74.255

    Signature Algorithm: sha256WithRSAEncryption
         51:31:02:b4:f2:90:b3:9e:2c:10:b6:b6:63:5d:ba:30:41:1d:
         5b:d2:ec:0b:16:55:29:68:a6:cd:ca:f9:8a:ac:e9:fb:68:37:
         1f:8e:97:f3:be:b9:be:b3:24:15:e0:72:92:ea:20:52:dc:83:
         e1:f9:17:3d:8b:20:ca:58:9e:fb:0e:1a:6a:ed:9d:27:cc:47:
         2b:60:5e:7d:04:0c:dd:68:91:2d:ec:0e:5e:54:9c:5e:38:ec:
         83:ce:84:03:39:f3:4d:aa:cb:15:bc:74:54:a4:36:1e:1f:de:
         83:a0:4c:88:6d:3a:a7:44:7f:56:1d:f1:41:1c:cc:97:f0:37:
         2b:a8:17:e1:d5:ca:ca:1c:77:d5:3b:17:a8:e2:ef:d7:97:5c:
         6c:74:e5:ef:5b:72:0f:21:01:fe:a6:c5:d8:68:9f:e4:60:96:
         96:e2:6b:c2:4b:83:39:22:49:dd:2f:de:4e:00:b4:8e:da:be:
         79:c9:98:28:87:12:46:7a:b2:35:7c:e0:ab:d3:98:b3:5f:f7:
         88:57:09:b9:20:79:b2:95:62:80:d0:63:cf:e9:b8:e7:a9:20:
         eb:cf:3f:98:8c:f7:59:11:a8:4d:4c:0f:19:e1:9f:12:bb:b7:
         46:7e:c0:e5:d4:3e:09:0f:08:87:fc:c6:71:e9:be:db:75:3f:
         bf:33:2a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:27 2026 by rpki-client