This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DVY2ftpirhzQgZl6muTCf_jILpg.roa
File:                     DVY2ftpirhzQgZl6muTCf_jILpg.roa (raw, json)
Hash identifier:          sJuVp4CiGhodT5pdB02NChWqHmI5oBK72yAfXdAo6BY=
Subject key identifier:   0D:56:36:7E:DA:62:AE:1C:D0:81:99:7A:9A:E4:C2:7F:F8:C8:2E:98
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       019B7AC85C4180A6BF1E33A255C865F3FB0F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DVY2ftpirhzQgZl6muTCf_jILpg.roa
Signing time:             Thu 01 Jan 2026 18:18:29 +0000
ROA not before:           Thu 01 Jan 2026 18:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     64267
IP address blocks:        89.106.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:5c:41:80:a6:bf:1e:33:a2:55:c8:65:f3:fb:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Jan  1 18:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0d56367eda62ae1cd081997a9ae4c27ff8c82e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:57:07:33:d4:de:53:60:9c:4d:bd:86:18:
                    87:31:64:07:8a:6a:2b:ed:0d:9d:5f:5d:71:81:77:
                    fc:f1:cc:f3:bb:69:89:bf:73:c5:42:68:68:5d:e9:
                    44:d4:85:f2:9a:d7:be:64:22:59:55:21:71:84:1a:
                    4a:12:48:3e:81:37:b2:7d:a8:9c:ef:20:4c:93:b1:
                    f6:67:94:b5:f9:a7:1b:7e:0e:ab:ba:a7:d1:af:78:
                    28:a4:9c:0c:78:60:b3:dd:30:cd:e4:b6:65:7d:2c:
                    76:57:b6:2f:0a:0d:74:cd:37:c4:10:ad:fd:60:14:
                    dc:f9:38:dd:68:25:db:6c:70:96:2e:1b:59:7f:1e:
                    7f:9b:2e:bc:54:88:37:b2:0a:69:f9:d8:03:5c:c4:
                    04:3d:01:62:64:b8:b4:2a:51:5b:1b:9a:b9:0d:4f:
                    7e:78:e8:3e:b0:6a:19:d1:cb:c0:60:58:f9:58:1a:
                    7e:e8:81:cd:2b:d8:e0:95:1c:28:e0:59:60:24:53:
                    3c:9f:fc:96:8d:1f:74:89:90:39:25:ee:74:35:4f:
                    84:70:97:95:30:45:51:a7:91:da:ef:fe:34:df:3a:
                    71:e6:fb:cf:d0:51:67:10:23:62:88:48:1f:f9:ff:
                    98:01:98:a2:67:1e:08:ee:cf:f1:a0:4f:f5:b1:e9:
                    4e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:56:36:7E:DA:62:AE:1C:D0:81:99:7A:9A:E4:C2:7F:F8:C8:2E:98
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DVY2ftpirhzQgZl6muTCf_jILpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.106.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:8c:67:27:a4:19:82:88:68:dc:45:93:e8:84:1b:81:92:9a:
         f3:8e:af:2d:df:0d:52:87:27:5c:a0:02:d4:6c:b4:90:64:35:
         e0:57:09:33:fc:9d:a1:f3:25:24:5b:28:49:19:a2:29:68:1f:
         13:d2:ad:e6:67:db:d8:03:de:47:85:7f:35:21:5b:9a:01:6b:
         32:e6:80:db:e0:a4:18:6c:42:cb:7b:d7:94:67:51:4b:6c:f2:
         4e:d8:00:05:50:b3:80:5d:f6:2d:29:d2:9f:22:5e:be:21:d0:
         2e:4a:30:20:70:6a:7f:c4:af:68:70:f9:ed:f9:5e:4c:47:a2:
         1a:4a:48:c5:2f:be:f7:14:8e:0b:4f:18:59:68:f3:0a:bf:54:
         c6:2e:56:72:f0:39:71:c0:87:79:85:37:b8:56:7d:1b:df:05:
         06:98:7e:af:11:f5:db:2f:ef:19:7d:61:3a:b0:d5:af:38:97:
         9d:48:a8:3a:32:67:23:04:14:ea:e9:0e:79:a0:88:4f:a7:d3:
         23:69:58:f0:2e:ba:2f:62:e7:21:82:93:8f:1a:32:6b:cc:d6:
         d9:6b:30:0d:86:e8:7e:0f:f5:41:0c:fc:63:17:36:c0:44:05:
         48:e3:ba:ed:5f:80:fc:85:dc:d9:09:72:47:7f:56:cd:17:20:
         e7:bf:2a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 10:36:57 2026 by rpki-client