This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/dbi3fG9bxI9rA-J9Egga8cnvqoo.roa
File:                     dbi3fG9bxI9rA-J9Egga8cnvqoo.roa (raw, json)
Hash identifier:          Ap8z6NPW0v1Uxh7C5vK9EjLc2QYMMSk2Hr7IGcY1KpQ=
Subject key identifier:   75:B8:B7:7C:6F:5B:C4:8F:6B:03:E2:7D:12:08:1A:F1:C9:EF:AA:8A
Certificate issuer:       /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Certificate serial:       019B7E387BC06B41C6ACA24067F6D4C9A738
Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/dbi3fG9bxI9rA-J9Egga8cnvqoo.roa
Signing time:             Fri 02 Jan 2026 10:19:49 +0000
ROA not before:           Fri 02 Jan 2026 10:19:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8508
IP address blocks:        155.158.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:7b:c0:6b:41:c6:ac:a2:40:67:f6:d4:c9:a7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
        Validity
            Not Before: Jan  2 10:19:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=75b8b77c6f5bc48f6b03e27d12081af1c9efaa8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:9e:e5:47:1d:51:a9:6a:0f:01:4c:55:79:
                    c6:99:be:46:21:7c:c0:f7:ab:b1:4f:d2:5b:6f:64:
                    48:9b:96:44:88:2f:87:4d:8b:0a:00:35:3d:a0:31:
                    49:ea:73:8e:35:82:bb:86:cd:1b:10:55:09:e7:b7:
                    a8:f0:03:36:de:d1:d8:31:f2:f1:66:d5:9a:88:69:
                    95:62:f5:23:97:bb:de:20:e4:ce:b3:94:d5:ce:d4:
                    27:dc:4e:8c:9e:a7:f9:24:80:a4:6f:15:b1:3b:47:
                    3b:b5:10:c9:a2:42:39:c1:f1:91:13:cc:82:4b:c8:
                    43:5b:8f:f5:fe:61:71:09:b7:dc:03:df:06:a1:c4:
                    24:19:d6:1b:df:99:dc:78:65:6f:25:0f:a0:fe:d5:
                    2b:66:66:25:8a:28:ce:4f:42:de:1b:99:08:50:2f:
                    d2:fb:e4:ce:9b:1a:80:fb:03:5d:fb:c2:ff:c2:b0:
                    ed:6e:c6:12:f6:2b:a3:8f:44:22:fb:87:04:37:51:
                    c8:d3:75:c5:9f:df:33:14:ce:f7:8f:74:74:9f:3b:
                    f7:d3:12:f2:71:6e:58:42:f0:34:63:b2:fd:69:10:
                    a3:aa:37:ba:1d:e1:aa:53:85:67:77:01:ec:02:75:
                    d3:23:95:58:b1:34:0d:15:ff:06:1e:0c:13:33:77:
                    9f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B8:B7:7C:6F:5B:C4:8F:6B:03:E2:7D:12:08:1A:F1:C9:EF:AA:8A
            X509v3 Authority Key Identifier:
                keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/dbi3fG9bxI9rA-J9Egga8cnvqoo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.158.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9a:66:30:18:a2:48:a3:8d:0d:1e:3b:18:db:ab:b3:6d:00:a3:
         a0:da:76:e7:3b:54:b3:42:15:3a:77:ad:d2:65:96:cd:00:5d:
         cd:f3:ac:3a:e3:5b:d7:a3:26:e6:46:c5:3b:be:12:b1:3b:d4:
         88:6a:c3:60:89:44:08:7a:3b:84:8b:d4:35:49:c0:71:f1:35:
         47:3c:d8:a2:92:cf:c3:ba:4f:6b:3b:7c:b3:69:43:82:5b:db:
         04:9d:66:15:fd:4e:b9:2c:27:1b:52:26:dd:bd:f0:ca:f7:1d:
         0b:31:f1:49:22:1a:92:3b:33:eb:6f:f5:e8:b2:84:63:4e:c8:
         a3:49:74:c5:01:95:49:76:a5:e9:dd:dd:f0:c9:03:c7:f9:85:
         47:e1:93:8f:fe:65:e7:68:0f:e6:c1:3f:50:39:79:bf:c5:9b:
         da:aa:ca:d8:51:47:f6:48:26:7e:63:76:cc:d5:2d:e0:12:94:
         44:fb:86:87:65:1b:9c:c4:9c:b3:22:b4:3d:d2:82:a9:06:3e:
         16:35:31:c2:3d:2a:4d:26:5e:22:6b:26:b2:82:1f:2b:15:bb:
         72:26:4e:f2:02:25:a7:4e:30:ee:6c:1d:83:d0:b8:36:91:4c:
         0d:35:7d:eb:95:85:c5:d6:ba:0a:60:0a:73:25:56:13:b4:81:
         e5:65:13:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:24:22 2026 by rpki-client