This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/dLxHjycBuzYpKKgUpxSpgPBLJwA.roa
File:                     dLxHjycBuzYpKKgUpxSpgPBLJwA.roa (raw, json)
Hash identifier:          cWtPoE+a8NVUnYQfXzALKros2CCBnTnUuUD6geEKTmE=
Subject key identifier:   74:BC:47:8F:27:01:BB:36:29:28:A8:14:A7:14:A9:80:F0:4B:27:00
Certificate issuer:       /CN=449b18e3296d795d3a9c959be25c70aaab365200
Certificate serial:       019B7B35D10EAB5A0DDA8411811338B615F1
Authority key identifier: 44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/dLxHjycBuzYpKKgUpxSpgPBLJwA.roa
Signing time:             Thu 01 Jan 2026 20:18:03 +0000
ROA not before:           Thu 01 Jan 2026 20:18:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208857
IP address blocks:        185.44.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 20:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:d1:0e:ab:5a:0d:da:84:11:81:13:38:b6:15:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449b18e3296d795d3a9c959be25c70aaab365200
        Validity
            Not Before: Jan  1 20:18:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=74bc478f2701bb362928a814a714a980f04b2700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:0b:de:05:04:1e:c8:6c:71:b4:e4:b2:50:
                    4d:65:80:98:2e:2b:99:f0:77:f3:43:80:2a:64:ee:
                    ce:a2:d8:04:fc:d6:72:58:f1:9b:e4:fc:c6:87:48:
                    40:6c:46:67:0d:ee:2a:52:23:05:cd:71:4f:b1:71:
                    4d:c9:45:64:63:0b:89:43:57:20:3a:9c:04:10:bd:
                    60:92:4b:fd:e3:0d:f9:f2:37:84:c6:43:0e:4c:76:
                    66:2f:13:39:4d:ec:b9:f0:a0:ba:40:a0:99:71:c9:
                    3d:04:1d:16:25:ea:c4:43:9c:6f:1f:80:51:18:96:
                    91:92:f4:c5:3f:36:a4:f4:27:31:f0:f9:2f:f3:70:
                    b7:fc:c1:68:71:e5:3e:c7:4a:99:dd:7c:4d:03:16:
                    bb:89:2a:bc:70:35:a3:61:61:4b:e8:dc:89:64:8e:
                    5a:6a:46:85:e4:5f:e8:1a:1c:74:5b:74:9a:c0:0f:
                    cd:58:4e:53:90:4d:8b:93:d2:21:3c:99:a9:29:41:
                    f2:d2:45:76:b2:30:83:e8:31:8e:1b:15:fc:89:08:
                    6f:45:50:49:9c:80:4d:bf:87:e9:32:1f:95:d7:f4:
                    1a:ec:fa:f3:f6:2b:ba:31:43:a2:7c:b6:76:05:9a:
                    26:76:05:4f:45:a8:13:38:93:c7:72:79:39:55:94:
                    81:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BC:47:8F:27:01:BB:36:29:28:A8:14:A7:14:A9:80:F0:4B:27:00
            X509v3 Authority Key Identifier:
                keyid:44:9B:18:E3:29:6D:79:5D:3A:9C:95:9B:E2:5C:70:AA:AB:36:52:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJsY4ylteV06nJWb4lxwqqs2UgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/dLxHjycBuzYpKKgUpxSpgPBLJwA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fb39ed-7c73-4478-901d-65a899a60366/1/RJsY4ylteV06nJWb4lxwqqs2UgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:5a:6e:d1:6f:74:0d:87:9a:d3:87:ff:43:e2:8b:1c:85:1f:
         ff:24:cb:34:69:ca:75:1a:e7:4f:b6:e6:46:5a:bc:29:c7:06:
         1d:04:e5:75:d5:9a:6a:6d:8b:b0:7c:5c:19:23:27:4c:fb:cd:
         c9:e0:a3:b6:b6:97:86:2f:aa:00:c3:08:9c:f3:56:34:ff:91:
         7f:fa:51:9f:a2:54:22:33:fc:97:29:b8:f3:e7:4b:15:3c:6f:
         5c:15:33:24:77:24:57:df:16:ec:f2:9d:81:7f:cb:18:d9:52:
         1d:dd:7d:71:fb:e4:a6:b2:32:86:0d:0c:f4:d4:97:ed:ac:0c:
         42:0a:a0:59:eb:61:26:5a:02:fe:f9:91:34:f0:42:a5:49:8f:
         60:f0:96:46:36:4b:63:c4:3c:0b:3b:fe:61:90:52:9d:71:5c:
         06:4c:4c:a4:42:97:81:03:7c:f8:fd:d2:1d:f1:96:fa:7d:22:
         73:97:63:ec:8d:f5:53:e0:38:03:2a:f4:9f:94:a5:4a:51:9a:
         51:4b:b7:6a:fc:90:c7:79:7e:af:bd:d0:8a:ad:45:b0:46:34:
         fe:f1:68:4e:3b:5c:46:16:48:93:3b:de:c1:da:70:d0:c5:98:
         8d:cf:b0:5e:dd:a5:06:f4:07:8d:89:62:ee:9a:53:e1:5b:c7:
         fa:98:c5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:11:56 2026 by rpki-client