This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/rCCPh-mLpc7daTsM4LgnGKTzoNk.roa
File:                     rCCPh-mLpc7daTsM4LgnGKTzoNk.roa (raw, json)
Hash identifier:          qm0Mei8UOmaXqagO6MtJ9K4mF8ePw84zkbqc33Xhnhc=
Subject key identifier:   AC:20:8F:87:E9:8B:A5:CE:DD:69:3B:0C:E0:B8:27:18:A4:F3:A0:D9
Certificate issuer:       /CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Certificate serial:       019B7A5AD7C9F74DB27B15D7B78CE7514924
Authority key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/rCCPh-mLpc7daTsM4LgnGKTzoNk.roa
Signing time:             Thu 01 Jan 2026 16:18:52 +0000
ROA not before:           Thu 01 Jan 2026 16:18:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     42708
IP address blocks:        185.5.44.0/24 maxlen: 24
                          185.5.46.0/24 maxlen: 24
                          185.5.47.0/24 maxlen: 24
                          2a02:7ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:d7:c9:f7:4d:b2:7b:15:d7:b7:8c:e7:51:49:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
        Validity
            Not Before: Jan  1 16:18:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ac208f87e98ba5cedd693b0ce0b82718a4f3a0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:1e:14:82:dd:3b:16:14:a3:a7:92:dc:ee:
                    1f:b4:0e:e2:c8:fe:82:d0:d1:49:9b:d0:49:1f:7b:
                    28:4d:d8:a6:bd:b0:3e:59:3b:ce:d9:50:87:d3:2c:
                    83:4f:45:a7:6d:89:d2:ca:e8:a0:2f:df:17:7c:2a:
                    b3:87:79:a1:f8:ea:d4:a8:4e:33:29:3e:89:b0:51:
                    f4:2d:68:25:86:45:b2:22:ee:26:f8:9a:4a:1c:e4:
                    65:dc:6a:6f:8d:88:6c:e0:c4:73:3a:aa:e6:d7:08:
                    00:e1:e8:08:c8:92:4f:b9:6d:34:1e:11:dc:90:c4:
                    34:ee:25:93:1b:90:5f:dd:12:d8:a0:7f:25:54:c9:
                    2b:b2:7a:3b:90:18:3f:59:b7:a0:cd:07:ba:72:d6:
                    a8:bb:28:af:2e:95:1e:43:95:f4:ba:2b:b1:ba:fc:
                    11:be:e1:db:bc:92:50:e7:ee:ae:a9:58:8e:79:f5:
                    ea:1f:b3:51:56:5a:6d:e3:1e:c1:45:b7:13:02:a4:
                    09:6c:92:c3:0f:81:97:11:0f:94:69:bd:1e:f5:93:
                    71:35:5c:d3:70:8d:4b:f0:7a:c3:30:5e:2f:99:b2:
                    ac:17:7c:06:d6:1e:45:94:70:e6:22:12:e8:4e:cd:
                    c0:90:c1:88:28:8c:9e:28:c2:88:ce:7c:88:06:dc:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:20:8F:87:E9:8B:A5:CE:DD:69:3B:0C:E0:B8:27:18:A4:F3:A0:D9
            X509v3 Authority Key Identifier:
                keyid:13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/rCCPh-mLpc7daTsM4LgnGKTzoNk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.5.44.0/24
                  185.5.46.0/23
                IPv6:
                  2a02:7ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:de:33:ea:ac:7b:c2:67:53:9f:9d:fe:8f:42:c1:3f:fb:32:
         05:95:00:f3:fb:8f:5d:50:6c:44:21:19:a6:37:5e:af:3a:f9:
         2d:f1:88:0b:3e:4a:d4:3b:77:ba:34:96:b4:a0:28:1f:9d:d0:
         9d:81:03:79:c1:38:f8:e7:4b:bc:ad:3e:88:14:49:ad:64:f7:
         db:73:e7:da:c4:39:cb:3c:c9:88:f9:a0:4a:fc:d4:ce:43:4d:
         42:67:c5:50:3b:65:c6:98:f1:81:18:f4:ed:70:26:8d:85:7d:
         e5:27:59:ff:79:b4:0f:23:a2:e0:1c:26:83:28:9f:48:9a:09:
         99:64:73:c9:6d:bc:83:37:e2:9e:c1:50:0b:3a:bd:a7:99:27:
         45:44:14:a9:3e:b8:12:db:5a:5d:38:66:43:0b:d6:e3:49:e5:
         d8:8d:18:51:81:3f:f6:ce:e0:f6:62:e3:71:6b:b5:cf:22:c0:
         2b:20:2d:cb:40:e8:a6:de:03:2b:62:42:07:ce:f6:a4:d1:dc:
         3c:4f:31:f2:0d:bd:55:08:bf:a3:a3:12:8b:44:72:47:e7:55:
         a2:c8:c9:28:af:45:ec:63:0b:8c:76:35:28:6f:bf:c4:e7:f9:
         f0:63:43:b1:08:cc:c4:d0:8c:0a:86:1a:db:c2:37:f4:2c:fb:
         00:6f:c8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:48:31 2026 by rpki-client