This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/0XyD3kL48XCTZOFS2DWDU3SDs2o.roa
File:                     0XyD3kL48XCTZOFS2DWDU3SDs2o.roa (raw, json)
Hash identifier:          PYysftID9ZjCmfzgw+mzCgQIWnwkT+wlGesLRfGbnvo=
Subject key identifier:   D1:7C:83:DE:42:F8:F1:70:93:64:E1:52:D8:35:83:53:74:83:B3:6A
Certificate issuer:       /CN=728c2bfd6bb503a01d018602bda152d734ed56f0
Certificate serial:       019B7A5B911FFDD2697EB574D717253F8028
Authority key identifier: 72:8C:2B:FD:6B:B5:03:A0:1D:01:86:02:BD:A1:52:D7:34:ED:56:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/0XyD3kL48XCTZOFS2DWDU3SDs2o.roa
Signing time:             Thu 01 Jan 2026 16:19:39 +0000
ROA not before:           Thu 01 Jan 2026 16:19:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206521
IP address blocks:        5.182.189.0/24 maxlen: 24
                          185.183.200.0/24 maxlen: 24
                          185.183.201.0/24 maxlen: 24
                          185.183.202.0/24 maxlen: 24
                          185.183.203.0/24 maxlen: 24
                          2a0b:1b80::/32 maxlen: 32
                          2a0b:1b81::/32 maxlen: 32
                          2a0b:1b82::/32 maxlen: 32
                          2a0b:1b83::/32 maxlen: 32
                          2a0b:1b84::/32 maxlen: 32
                          2a0b:1b85::/32 maxlen: 32
                          2a0b:1b86::/32 maxlen: 32
                          2a0b:1b87::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/cowr_Wu1A6AdAYYCvaFS1zTtVvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/cowr_Wu1A6AdAYYCvaFS1zTtVvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:91:1f:fd:d2:69:7e:b5:74:d7:17:25:3f:80:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728c2bfd6bb503a01d018602bda152d734ed56f0
        Validity
            Not Before: Jan  1 16:19:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d17c83de42f8f1709364e152d83583537483b36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b3:d8:7b:72:ee:ee:74:c8:8d:be:d4:b4:55:
                    b1:8b:a9:db:66:93:2a:1b:e1:13:11:3a:cc:7d:b9:
                    e7:92:53:2c:5e:5d:d1:46:6c:e6:1b:48:64:e6:32:
                    60:dc:e3:c4:bb:de:2b:15:51:f1:20:70:74:36:7b:
                    27:62:76:b6:14:52:e4:29:8f:06:1c:51:1a:38:0c:
                    c3:30:8f:d4:9f:db:6c:25:27:90:3f:ab:22:97:f8:
                    77:28:fc:5c:6f:69:e2:28:41:48:e4:93:76:e8:5c:
                    4f:82:56:4a:11:6d:65:02:46:de:eb:20:90:ab:8c:
                    f9:80:01:21:c4:26:cd:66:5b:91:0f:0e:0c:c8:78:
                    cc:ee:4e:4d:8e:a0:04:12:89:ff:28:c1:cf:7f:01:
                    5f:6d:f5:fe:20:c6:23:ce:a2:e0:a5:e9:52:9c:90:
                    0d:34:46:10:0f:04:3b:6d:69:08:41:e1:3e:22:16:
                    8c:96:1e:90:55:db:34:7f:04:ba:c1:70:ef:5d:09:
                    e3:0d:39:d1:83:eb:dc:22:8a:df:1e:f1:5d:9c:ab:
                    ac:03:bc:2c:9d:1f:13:e8:66:c9:8b:9d:f4:71:72:
                    37:07:aa:09:db:fd:d1:b5:e3:ab:2a:c9:43:5e:df:
                    c3:f6:db:65:84:b8:9b:85:7a:c0:66:61:3e:5c:d5:
                    cc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7C:83:DE:42:F8:F1:70:93:64:E1:52:D8:35:83:53:74:83:B3:6A
            X509v3 Authority Key Identifier:
                keyid:72:8C:2B:FD:6B:B5:03:A0:1D:01:86:02:BD:A1:52:D7:34:ED:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/0XyD3kL48XCTZOFS2DWDU3SDs2o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/cowr_Wu1A6AdAYYCvaFS1zTtVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.189.0/24
                  185.183.200.0/22
                IPv6:
                  2a0b:1b80::/29

    Signature Algorithm: sha256WithRSAEncryption
         da:67:eb:c6:d6:00:65:bf:ec:ef:f6:0b:f9:1d:1f:74:2d:a5:
         c9:ae:b7:8c:06:79:d5:4d:a5:ef:aa:ad:ae:75:10:24:63:f0:
         e6:e1:e9:0f:0f:21:a8:a0:61:01:6c:b4:30:9c:89:61:b2:fc:
         74:9d:8a:0c:a1:e6:f8:23:ca:84:a8:a4:55:10:2c:c2:2e:9a:
         6e:78:bc:2b:f3:33:e3:6e:00:bd:6d:7d:44:1d:6a:8d:52:72:
         34:a6:7d:c2:fd:d6:6a:f2:f9:06:a2:d3:07:36:21:61:25:7b:
         27:51:df:73:11:2f:09:1b:be:4e:9c:54:0a:ef:0d:79:2b:ad:
         94:ca:7e:41:c2:d1:9f:2a:f1:41:72:8a:65:59:56:7a:9c:d2:
         87:39:f8:f2:fc:2e:d1:1b:7d:7a:ff:4e:f9:bd:c0:fb:7b:ec:
         15:ab:3c:40:b8:f5:90:82:ca:29:33:cd:76:76:ff:66:2d:da:
         fe:4b:44:13:8f:3a:97:c0:d2:7f:66:a4:42:20:8b:c1:a2:5b:
         1e:9c:6b:58:c8:5d:d0:37:95:12:14:ac:5f:5a:09:f7:c1:41:
         ae:fc:1a:ab:22:e2:fe:ac:2e:07:fe:7b:a5:79:e2:7e:a5:85:
         22:93:e9:02:9a:46:2c:88:a2:8a:0d:9c:09:eb:15:d8:57:82:
         8d:f5:4b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:15:08 2026 by rpki-client