This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/dvCXrpuIgKHCZtQqB3diL4N4JNk.roa
File:                     dvCXrpuIgKHCZtQqB3diL4N4JNk.roa (raw, json)
Hash identifier:          fvscbXWy0N/msqi2rtIwXgUHt2kq1AX6g+9LTX7Mfrk=
Subject key identifier:   76:F0:97:AE:9B:88:80:A1:C2:66:D4:2A:07:77:62:2F:83:78:24:D9
Certificate issuer:       /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial:       019B7E38D75E923753FB8E58D6EF93F6CFFD
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/dvCXrpuIgKHCZtQqB3diL4N4JNk.roa
Signing time:             Fri 02 Jan 2026 10:20:12 +0000
ROA not before:           Fri 02 Jan 2026 10:20:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15924
IP address blocks:        185.205.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:d7:5e:92:37:53:fb:8e:58:d6:ef:93:f6:cf:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
        Validity
            Not Before: Jan  2 10:20:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=76f097ae9b8880a1c266d42a0777622f837824d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:95:03:e8:b5:94:38:0b:52:ff:ee:49:8a:
                    b3:40:7e:38:25:e4:bc:65:6b:0e:e3:2d:c9:e3:6d:
                    c7:e0:48:be:d6:58:be:3b:08:f0:21:c7:cd:44:55:
                    29:ff:9a:3a:04:e3:2f:e5:4a:96:41:04:2a:20:1a:
                    7b:91:a6:c7:9d:cb:2e:1d:01:8c:d7:42:7c:27:ab:
                    27:67:16:9b:22:fe:ad:c5:31:9d:b4:d3:87:ba:03:
                    7c:27:a5:ed:df:71:d5:7c:be:04:96:f7:c4:8b:0c:
                    44:fe:62:96:3d:bf:ec:7f:7f:75:33:83:e4:2d:27:
                    c7:f1:07:da:ff:fc:78:4a:21:f7:24:34:22:87:ac:
                    28:fe:d4:ea:80:3d:bc:fb:7e:8a:2f:94:ab:4a:50:
                    47:01:a0:e8:3f:2c:a1:91:f4:13:48:5b:d6:f7:eb:
                    6f:c6:9d:47:d4:95:56:08:d7:24:79:78:86:a5:c3:
                    33:1a:38:9a:a0:88:72:b9:d3:5b:2c:92:8f:d1:76:
                    c4:1e:16:5b:1c:c2:de:35:bc:28:fb:ab:1a:7f:a3:
                    48:b3:f1:1b:91:40:d5:62:f8:5f:1e:52:b7:d6:ef:
                    a2:f8:87:68:82:60:3c:9e:20:46:b2:94:6a:a0:70:
                    18:f8:37:0d:0b:f4:a6:b9:00:c8:50:ab:34:c2:2a:
                    2d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F0:97:AE:9B:88:80:A1:C2:66:D4:2A:07:77:62:2F:83:78:24:D9
            X509v3 Authority Key Identifier:
                keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/dvCXrpuIgKHCZtQqB3diL4N4JNk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.205.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:69:d6:eb:af:c1:f5:a8:47:f7:f3:d6:8e:eb:53:60:73:
         c2:e9:0c:82:c1:69:fa:ae:75:5e:09:33:e4:0e:27:3c:da:45:
         16:42:38:6f:bf:30:ad:6e:6e:d6:b5:9c:92:e2:46:b3:07:5a:
         b0:af:3e:4c:20:45:71:2b:7e:f7:ce:bf:35:b3:ff:e9:71:2e:
         d1:e3:ca:40:2e:22:ab:c2:5e:5d:b1:b3:3c:22:6d:73:dd:44:
         85:0e:09:ea:31:6b:f2:45:7b:78:e1:21:ad:65:4a:c6:df:7c:
         2a:8d:27:85:d9:36:51:82:27:e6:1a:01:73:0c:f6:bb:4a:e4:
         6e:c0:67:40:ad:a2:d1:a5:64:85:77:e0:a7:38:14:97:fc:22:
         08:c7:17:d5:37:f3:41:e1:cf:cc:da:22:ac:b8:43:7a:29:34:
         66:23:5f:d1:6e:9c:46:ec:90:68:08:b2:75:15:6a:5f:72:f3:
         0d:86:6c:ce:65:7c:96:a2:82:06:3f:fd:8e:2e:88:b2:c9:19:
         6f:ed:dd:15:98:b8:ab:55:25:49:31:dd:30:ce:d6:8b:25:43:
         65:01:f5:5d:e5:4c:7c:0d:ce:b3:4b:36:b5:c8:8e:cc:26:de:
         9d:47:12:bb:fd:f6:fc:c8:93:bc:1b:df:44:ef:aa:6b:3d:dd:
         d1:6e:8c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:33:58 2026 by rpki-client