This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/1ggdWJ2Lat9vAKH-DzSRVGbz3ps.roa
File:                     1ggdWJ2Lat9vAKH-DzSRVGbz3ps.roa (raw, json)
Hash identifier:          S+Lf/D/IvqpFp49CyClk35lNEBCRO6l8agG7ITGjzSo=
Subject key identifier:   D6:08:1D:58:9D:8B:6A:DF:6F:00:A1:FE:0F:34:91:54:66:F3:DE:9B
Certificate issuer:       /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial:       019C0879906C4E3DAA3ADD1D04BD26FAD063
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/1ggdWJ2Lat9vAKH-DzSRVGbz3ps.roa
Signing time:             Thu 29 Jan 2026 06:38:30 +0000
ROA not before:           Thu 29 Jan 2026 06:38:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        185.38.26.0/24 maxlen: 24
                          194.31.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:08:79:90:6c:4e:3d:aa:3a:dd:1d:04:bd:26:fa:d0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
        Validity
            Not Before: Jan 29 06:38:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d6081d589d8b6adf6f00a1fe0f34915466f3de9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:05:33:c8:f9:83:b6:63:2b:de:06:30:09:
                    8d:2f:c5:b5:50:35:bc:98:d9:b0:de:af:a2:07:46:
                    8c:c8:80:c5:89:07:13:13:4a:3d:be:07:b1:72:55:
                    61:2b:a8:90:fa:84:4c:f9:eb:24:0b:e6:90:a9:f2:
                    9d:bd:2b:5b:39:66:74:6b:7f:43:28:a0:8d:bb:f7:
                    a6:bd:6c:fd:24:9a:f2:73:af:4e:c3:af:01:a1:5f:
                    c4:e7:b8:29:84:f9:e2:6d:52:c8:94:cf:ac:2d:45:
                    c7:c5:46:e1:47:0a:cd:68:1d:bb:c3:55:1b:25:12:
                    ac:9a:3c:c1:3f:2a:74:e2:3c:81:66:7b:87:69:b9:
                    65:38:c0:51:d4:eb:d6:7d:a9:9c:74:9e:31:a4:22:
                    28:34:30:34:27:8b:a1:ca:76:d6:69:ff:00:75:bb:
                    6a:82:89:30:82:cd:30:21:14:27:19:ed:74:30:7f:
                    5b:30:36:0f:54:44:c4:56:ee:b8:ef:c6:60:19:76:
                    64:c5:94:a8:31:a3:a3:63:44:a1:0a:69:e9:0f:4f:
                    dd:04:7b:49:32:70:81:ae:87:82:89:d9:b3:7e:0a:
                    95:e2:59:a9:07:c0:d0:0b:28:d5:74:e7:e1:2c:ce:
                    7a:e1:5d:ee:61:f8:17:f3:c5:36:58:1b:e9:78:be:
                    3e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:08:1D:58:9D:8B:6A:DF:6F:00:A1:FE:0F:34:91:54:66:F3:DE:9B
            X509v3 Authority Key Identifier:
                keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/1ggdWJ2Lat9vAKH-DzSRVGbz3ps.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.26.0/24
                  194.31.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:a7:ff:78:66:45:18:53:3c:77:b5:52:ee:00:68:88:35:3b:
         34:73:52:14:c5:68:d7:7a:a7:88:28:b2:b0:41:6e:fa:25:8c:
         f2:ec:bc:4d:3d:2d:f3:79:b3:3e:75:dd:ad:22:e8:30:90:21:
         48:d0:ec:57:93:91:98:3a:83:95:b3:ac:ae:34:b0:7c:dd:3b:
         48:d7:ab:6c:f2:16:5c:d4:7b:1d:bd:b4:b9:2b:d2:82:7b:d3:
         0a:c2:f7:8f:f0:c5:7a:72:bc:46:a9:77:71:36:b0:78:e9:03:
         eb:aa:6b:85:6f:35:59:94:8a:28:5e:73:af:5e:1c:40:ac:39:
         5f:21:86:5a:13:55:a5:f2:a0:b5:12:e4:e5:35:79:1b:d5:0c:
         69:a4:6f:b1:43:8f:3c:c2:c8:80:9c:b2:1d:87:74:24:e3:9d:
         71:aa:ce:8d:24:c3:92:ef:6f:4d:69:dc:0f:7f:c4:e8:e2:b3:
         42:01:50:7d:ae:28:75:e7:a4:ad:08:dc:e7:1d:cf:a3:5e:f4:
         94:8b:05:ee:a7:c9:3b:d3:42:46:c1:58:a5:a2:41:c5:bb:a8:
         23:c7:32:24:3f:71:e9:db:d9:96:83:aa:4e:a3:bd:6e:70:18:
         39:28:3c:e9:1a:8c:15:62:04:1f:49:c7:53:81:7f:31:4e:e1:
         9e:63:74:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:00:07 2026 by rpki-client