This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/DMGubU8hxCTGRODvSctDVfieplo.roa
File:                     DMGubU8hxCTGRODvSctDVfieplo.roa (raw, json)
Hash identifier:          Phcij8bggmf+/AXpZc+JPHtEh1M9qDukJgittDIR+o0=
Subject key identifier:   0C:C1:AE:6D:4F:21:C4:24:C6:44:E0:EF:49:CB:43:55:F8:9E:A6:5A
Certificate issuer:       /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial:       019B7C7F15FC2EA5BE075119B6B349713758
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/DMGubU8hxCTGRODvSctDVfieplo.roa
Signing time:             Fri 02 Jan 2026 02:17:42 +0000
ROA not before:           Fri 02 Jan 2026 02:17:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8708
IP address blocks:        194.176.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:15:fc:2e:a5:be:07:51:19:b6:b3:49:71:37:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
        Validity
            Not Before: Jan  2 02:17:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0cc1ae6d4f21c424c644e0ef49cb4355f89ea65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:f8:bc:f4:80:41:86:42:61:be:e2:db:32:
                    16:f7:cd:0e:12:9c:d6:43:8b:49:de:74:97:98:1d:
                    ab:ba:05:ab:38:56:0d:ce:06:9b:e9:25:dc:ed:d1:
                    11:38:a5:d8:76:a2:69:5f:b5:92:aa:9d:d9:91:62:
                    30:42:2a:a4:73:f4:61:5e:62:1f:eb:b0:a4:a4:9a:
                    b8:bc:27:a3:9c:4a:a8:28:1a:a6:a4:a9:c5:fe:34:
                    c3:67:35:55:7c:cb:2a:6d:83:26:d1:0f:2e:8a:b1:
                    6e:01:cd:24:15:39:9d:c0:54:06:57:cc:36:8e:64:
                    09:3c:5c:8d:8e:b4:8d:99:59:4d:56:69:ae:f0:58:
                    a3:28:a3:55:4b:97:4c:07:36:03:2b:8d:98:b0:c1:
                    22:c4:7b:b8:c0:9d:32:7b:1b:29:66:7f:c9:6b:d4:
                    2f:e6:ed:95:d4:92:6b:17:6b:2b:08:e7:be:f6:2c:
                    4f:ed:d5:24:f4:81:7b:38:48:1c:e6:3b:e5:25:02:
                    88:a1:f0:ac:99:45:50:76:98:e9:9d:ce:52:5e:1b:
                    d9:23:72:44:56:67:e6:96:5d:37:dd:cb:0c:f1:3b:
                    1a:da:d8:a1:87:1d:ff:67:d8:1a:2e:f7:8a:3a:75:
                    21:20:27:df:e7:75:ff:6d:bb:cb:8a:0f:77:05:59:
                    ed:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C1:AE:6D:4F:21:C4:24:C6:44:E0:EF:49:CB:43:55:F8:9E:A6:5A
            X509v3 Authority Key Identifier:
                keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/DMGubU8hxCTGRODvSctDVfieplo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.176.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:f3:1f:2c:96:e0:55:93:b5:47:ae:47:9b:54:5e:0a:30:6b:
         02:e6:be:1e:3c:df:1a:2b:af:ab:f1:73:bb:d1:c8:04:34:36:
         f9:6f:06:6c:2b:3e:6b:27:1f:4b:04:6b:5c:0f:79:07:81:8c:
         59:4a:50:41:4d:c4:21:de:ba:2b:bb:83:b8:66:31:82:97:16:
         9e:a7:15:59:1d:69:d6:8c:cd:c5:1f:d9:32:98:ec:84:7f:aa:
         10:ea:2e:ab:30:42:d1:5c:4f:24:d4:fd:0e:a8:67:6d:3c:f0:
         e8:60:bb:e2:69:ce:72:97:53:07:d7:1f:e4:85:bc:3d:a6:ac:
         dc:3c:24:61:fe:a6:12:46:8c:a2:5e:1f:b8:d2:e4:9d:bd:bf:
         25:fa:57:e1:84:bf:cf:9e:80:93:9e:22:12:b9:7f:36:c9:79:
         8b:94:40:1a:bc:02:5f:f0:83:73:92:42:17:32:b8:04:0a:47:
         72:88:3b:1b:41:f5:b4:46:a9:b6:0e:5d:67:2b:a5:e7:9d:f5:
         7a:f3:7a:aa:cc:d6:a2:83:ac:2a:98:21:97:42:1e:1f:07:61:
         3a:a9:cd:22:17:a3:3c:27:6e:2a:7f:5d:a6:c8:5f:d1:61:15:
         08:6e:0e:96:a0:07:04:6e:5a:80:81:2b:ac:99:99:b7:a1:d4:
         22:4d:59:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:13:01 2026 by rpki-client