This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa
File:                     1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa (raw, json)
Hash identifier:          SI1GZ68MQvNyp6z6E4tf9l9Kh6Fw9zjsRZN+PWTuZfk=
Subject key identifier:   D6:07:62:52:0A:A4:54:D7:2E:89:9D:95:84:77:86:18:A8:B7:14:E7
Certificate issuer:       /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial:       019B7E3931C71FB382AF24A6148EA276F176
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa
Signing time:             Fri 02 Jan 2026 10:20:36 +0000
ROA not before:           Fri 02 Jan 2026 10:20:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     197450
IP address blocks:        185.113.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:31:c7:1f:b3:82:af:24:a6:14:8e:a2:76:f1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
        Validity
            Not Before: Jan  2 10:20:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d60762520aa454d72e899d9584778618a8b714e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:b7:21:8a:6d:21:df:b9:f4:b5:27:a6:b2:
                    ae:54:13:76:79:18:c9:ea:5d:1c:b0:f8:e1:a0:18:
                    a9:c7:e3:7f:34:05:ab:f6:7b:75:02:02:bb:4a:ad:
                    68:94:6e:76:96:24:66:e5:61:7d:51:24:53:ec:ef:
                    38:f8:fc:29:1e:51:81:b3:6f:ca:d9:f4:39:a6:bc:
                    65:9b:39:8a:06:9e:51:ac:2a:00:06:fc:85:d5:63:
                    8e:9b:dc:99:7b:7d:eb:19:6e:ad:b0:d7:bc:1a:51:
                    72:c8:03:2d:1e:5d:df:5b:6a:eb:5f:3d:da:ca:e5:
                    8d:19:b1:23:81:f8:2d:2a:25:11:43:57:9d:3f:32:
                    17:f1:73:8c:d6:20:6d:21:00:5d:63:3d:23:24:d0:
                    c1:fa:5b:bc:d1:d8:6f:20:4f:92:ad:9c:57:34:08:
                    8f:66:7a:4c:8d:01:93:ea:ae:d0:76:b5:98:49:db:
                    e1:65:82:98:5c:82:c4:8a:09:fc:31:8f:76:e6:1c:
                    e2:53:3d:00:fc:25:5a:16:6c:ee:4e:91:ef:eb:f5:
                    60:33:83:04:ee:01:d8:08:e1:54:f8:44:a9:92:8a:
                    eb:15:6c:00:17:e8:68:aa:99:33:4c:90:e9:0a:f7:
                    12:17:1a:83:2c:0f:62:3d:12:47:45:26:77:f2:bf:
                    d0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:07:62:52:0A:A4:54:D7:2E:89:9D:95:84:77:86:18:A8:B7:14:E7
            X509v3 Authority Key Identifier:
                keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/1gdiUgqkVNcuiZ2VhHeGGKi3FOc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.113.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:e2:8c:d4:9d:23:f9:70:25:c7:92:a9:7f:ec:0c:7f:6e:e4:
         19:12:7f:6e:b6:a5:d7:01:e9:9a:65:af:25:1d:aa:89:5f:35:
         79:d0:9f:f5:e2:c9:da:76:2e:fd:02:b2:2f:50:8e:ce:02:17:
         9a:40:c7:6f:21:e9:8b:b9:00:6d:48:8b:1a:d9:cc:b1:92:56:
         28:6b:fe:4f:e3:c0:e7:f7:4b:bf:9f:b9:55:3b:22:7d:78:2e:
         52:97:01:55:c6:58:36:b1:dc:9f:a3:94:5f:2f:0d:fe:73:85:
         fa:43:01:b5:55:93:08:df:05:cb:fa:f5:6d:82:35:0b:42:36:
         37:da:74:f2:ec:d4:00:a0:97:12:c3:72:ae:46:97:49:27:a6:
         c7:44:01:06:c3:cc:0e:33:da:fb:98:3c:17:46:6a:e1:c0:28:
         68:ef:06:e4:44:ce:09:9b:aa:5a:25:dc:ba:6d:c3:09:a9:01:
         cd:1f:77:c7:16:06:76:1a:8a:16:2f:d4:17:9c:03:77:ec:43:
         53:eb:ae:6e:bc:e7:11:8e:e6:43:54:56:cd:2c:08:e2:4c:2e:
         69:94:cd:ae:cd:41:9b:d3:66:e0:c2:27:5e:de:9e:48:87:ea:
         65:ca:e9:40:c6:db:e3:dc:9c:dd:63:af:ba:b5:73:07:2b:9f:
         8e:fd:b7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:15:37 2026 by rpki-client