This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/itoTic7G_-G7jco2XW4Z1NEcbCw.roa
File:                     itoTic7G_-G7jco2XW4Z1NEcbCw.roa (raw, json)
Hash identifier:          +uznw2maAhBkp9yoIBUiVjV+pSA2CpeiVnSVCi83O3s=
Subject key identifier:   8A:DA:13:89:CE:C6:FF:E1:BB:8D:CA:36:5D:6E:19:D4:D1:1C:6C:2C
Certificate issuer:       /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial:       019B7F852382DDEE4C05CFDC855C650A1C6F
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/itoTic7G_-G7jco2XW4Z1NEcbCw.roa
Signing time:             Fri 02 Jan 2026 16:23:10 +0000
ROA not before:           Fri 02 Jan 2026 16:23:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210237
IP address blocks:        5.181.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:23:82:dd:ee:4c:05:cf:dc:85:5c:65:0a:1c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
        Validity
            Not Before: Jan  2 16:23:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=8ada1389cec6ffe1bb8dca365d6e19d4d11c6c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:4a:bc:f8:2d:d3:30:20:11:73:9c:08:fa:
                    cd:fb:14:2d:ca:e8:8e:85:3a:1a:be:71:e6:75:d8:
                    df:91:88:d1:94:65:d1:f7:fd:91:f9:27:38:76:9b:
                    08:12:61:bf:d7:a3:3b:5f:30:bf:bd:d6:e6:b3:96:
                    ec:98:df:9b:a9:8a:2c:13:14:42:0f:c6:18:b5:aa:
                    4c:1e:45:ce:bb:81:eb:e2:39:c4:44:e6:27:c5:ab:
                    82:e2:71:d8:76:17:03:60:74:42:c4:17:0c:d2:ec:
                    e5:cf:12:0a:93:8e:f4:c2:8a:c9:44:e5:79:3e:47:
                    e5:da:1b:37:73:df:7f:92:1f:35:e1:bf:93:11:7e:
                    f8:d5:48:63:bb:59:6c:40:a3:dc:69:dd:76:f0:97:
                    a1:78:cc:ef:a0:55:1f:74:6a:94:5a:2f:0a:82:b6:
                    c8:71:57:bd:7c:66:fc:35:f0:6c:26:33:c3:7e:34:
                    a4:c5:6a:25:52:79:e9:91:72:93:b1:2d:be:b3:31:
                    64:de:4d:ea:be:7c:15:ee:5c:b4:b8:fd:c3:19:74:
                    c8:79:21:3f:d0:16:95:2a:a0:f0:da:e8:30:6e:61:
                    c9:ca:0d:82:20:45:40:cc:bf:81:5c:3a:15:2b:29:
                    3c:16:bb:f6:de:bd:f2:85:36:9f:eb:0a:e4:d4:a1:
                    fd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DA:13:89:CE:C6:FF:E1:BB:8D:CA:36:5D:6E:19:D4:D1:1C:6C:2C
            X509v3 Authority Key Identifier:
                keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/itoTic7G_-G7jco2XW4Z1NEcbCw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:13:33:7d:98:e2:18:e7:e3:f6:61:82:e3:9b:76:80:7c:b9:
         a7:b8:aa:77:38:ac:de:b6:43:bb:4c:7d:d8:28:84:6c:91:7a:
         1a:52:8b:0c:42:d2:67:86:09:dc:ab:0f:7c:f9:53:14:e4:43:
         e9:3b:e6:12:35:6a:55:fa:92:6c:f9:10:77:ea:35:05:ff:c5:
         fc:73:20:33:39:12:23:4b:b4:fd:1c:a9:03:b1:d6:6e:8a:c8:
         80:1e:27:d1:17:b1:d8:42:3a:0e:c8:9f:28:bf:d2:bc:ab:6d:
         30:96:40:55:53:4c:48:cb:c3:a5:74:a8:9b:83:66:bb:8b:d9:
         1b:a8:bd:e6:2e:81:df:34:b7:77:c3:b5:04:ac:6f:3c:17:9f:
         1a:69:f0:03:d8:e4:d4:df:4b:6f:be:02:fa:6b:10:b7:7c:1f:
         f0:57:99:d2:f1:1d:74:25:fa:a0:a4:f6:8b:24:5f:de:30:2b:
         4c:3c:60:ef:2a:11:08:a2:52:28:8f:86:a3:6a:47:02:fd:4a:
         63:be:72:f8:ec:69:c3:c3:35:f4:3c:d0:c9:68:8f:7e:75:7a:
         8b:e3:81:12:b5:0d:40:7e:a7:3c:80:15:40:7b:00:12:5e:9d:
         44:b4:6d:9c:7c:e0:84:81:79:7f:d9:c5:d1:3b:c9:d6:9a:48:
         1f:c2:88:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:54:36 2026 by rpki-client