This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/3VLJL7-f2gIaDHt9s5O08zvl02o.roa
File:                     3VLJL7-f2gIaDHt9s5O08zvl02o.roa (raw, json)
Hash identifier:          nvn//iDJID27yb0p4DmlRMNLDXzJBDmTCGYaGUQJ1lA=
Subject key identifier:   DD:52:C9:2F:BF:9F:DA:02:1A:0C:7B:7D:B3:93:B4:F3:3B:E5:D3:6A
Certificate issuer:       /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial:       019C2428A98E5E79ECDEF5153CD5E0560294
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/3VLJL7-f2gIaDHt9s5O08zvl02o.roa
Signing time:             Tue 03 Feb 2026 15:39:30 +0000
ROA not before:           Tue 03 Feb 2026 15:39:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     204922
IP address blocks:        185.184.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:24:28:a9:8e:5e:79:ec:de:f5:15:3c:d5:e0:56:02:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
        Validity
            Not Before: Feb  3 15:39:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dd52c92fbf9fda021a0c7b7db393b4f33be5d36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:74:6d:c8:07:70:ad:33:37:da:9f:c7:36:
                    41:3c:2f:15:d4:dd:6c:48:9a:56:04:07:61:e3:2c:
                    57:d6:bf:11:52:cc:ed:41:c0:c3:23:cc:d8:06:ca:
                    ee:0b:cc:22:b9:e1:87:ae:bf:7a:a9:fc:70:6a:ea:
                    e4:88:6f:99:c3:1c:74:dc:ea:29:68:94:8e:92:07:
                    ec:fe:00:1a:d2:5c:0d:87:88:d8:68:14:5d:43:35:
                    9d:ae:13:f5:96:44:14:e3:6d:a5:18:b4:2e:28:58:
                    1f:a7:74:74:74:41:e4:5c:8c:ca:72:13:33:e1:f9:
                    3e:f5:8a:4c:ba:89:93:13:5e:b2:d2:be:2b:ed:b8:
                    65:cf:3a:ce:92:83:45:0a:2a:48:a0:49:47:5b:14:
                    f2:d8:fa:35:2e:6b:ff:02:15:29:65:97:22:05:80:
                    2a:73:82:3a:04:b8:7f:ca:02:74:62:a3:cf:df:01:
                    57:25:45:91:e4:d2:81:17:c5:ae:e5:55:be:c9:e7:
                    78:80:bd:2b:52:9c:4b:21:04:d0:6b:15:5c:6a:ec:
                    ed:a2:a1:dc:82:3e:73:e1:c7:02:f8:10:b0:a2:68:
                    77:4d:d8:67:a4:d3:9c:57:d0:a2:d8:b0:73:cd:0f:
                    29:20:93:60:d9:32:c4:d9:c1:db:31:4e:5d:31:99:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:52:C9:2F:BF:9F:DA:02:1A:0C:7B:7D:B3:93:B4:F3:3B:E5:D3:6A
            X509v3 Authority Key Identifier:
                keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/3VLJL7-f2gIaDHt9s5O08zvl02o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.184.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:a3:0c:89:2a:7d:0a:bb:6b:00:02:8f:55:df:fd:de:74:0f:
         7e:89:cc:e4:aa:d9:31:fe:40:4c:41:91:30:8b:aa:80:78:be:
         80:1d:91:c8:8c:11:7d:b8:49:43:bb:bc:60:a1:df:16:9d:b9:
         ee:1f:51:55:c8:88:2b:40:90:fa:02:b5:41:1c:1a:85:33:c5:
         ca:f7:bb:4d:8a:12:48:33:a3:e9:26:b7:21:9e:c1:8c:b7:eb:
         0f:a2:ed:0c:28:2e:04:c4:00:88:be:6a:61:a0:89:bd:3f:35:
         d2:ce:b2:fe:cb:74:5a:40:18:d6:d2:2e:56:8f:7f:c6:55:ba:
         a9:ad:0d:a3:34:80:61:35:39:2d:5e:b7:3e:19:de:40:fa:0c:
         61:31:3b:c0:1d:be:10:d7:e9:83:47:18:ed:1e:b4:8f:2f:6e:
         d0:26:e2:8c:41:e6:4d:b3:6f:67:5a:5f:de:9a:60:72:67:a2:
         6c:d6:f6:ca:64:04:a5:ac:de:7c:bf:ac:00:53:f7:16:53:2a:
         46:bf:88:79:9c:b8:8a:c1:06:50:e7:6d:4b:6b:f6:dc:19:77:
         bb:9c:78:01:67:15:99:9d:ba:90:36:d1:f1:ab:8e:3f:14:50:
         40:35:95:1d:78:20:cc:09:37:d0:4a:f0:58:9c:33:a4:36:83:
         9d:cc:f9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:19 2026 by rpki-client