This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/D7uQ99DLK4WMkw1fHpYfJKmTzvI.roa
File:                     D7uQ99DLK4WMkw1fHpYfJKmTzvI.roa (raw, json)
Hash identifier:          LbOMXXB9u8cO6PHdvqyPMdpNy795D8V7gOQlri0kebI=
Subject key identifier:   0F:BB:90:F7:D0:CB:2B:85:8C:93:0D:5F:1E:96:1F:24:A9:93:CE:F2
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       019B7C803401218855E77E56AB72D20015CD
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/D7uQ99DLK4WMkw1fHpYfJKmTzvI.roa
Signing time:             Fri 02 Jan 2026 02:18:55 +0000
ROA not before:           Fri 02 Jan 2026 02:18:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48266
IP address blocks:        95.155.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:34:01:21:88:55:e7:7e:56:ab:72:d2:00:15:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Jan  2 02:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0fbb90f7d0cb2b858c930d5f1e961f24a993cef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c4:e9:1b:07:78:dc:94:0d:c0:42:35:bb:a5:
                    a3:14:ac:ee:65:26:42:af:31:8a:6a:e4:7a:c8:73:
                    6c:02:f8:c1:45:35:66:39:c4:67:72:3d:ef:d2:14:
                    0f:51:b0:85:34:03:6f:87:f2:ca:39:7a:79:c2:77:
                    70:4e:60:9b:2f:59:bd:0b:10:a9:f3:23:ea:d7:3c:
                    38:15:01:0b:46:e7:99:7e:57:5d:e9:48:2d:80:81:
                    c2:19:f4:ac:ee:6b:ae:d5:25:1f:30:86:23:29:fc:
                    53:00:3e:02:af:b0:c8:16:bd:aa:92:20:5c:8f:57:
                    78:fc:31:c7:c0:6d:9e:ca:91:52:61:01:74:37:96:
                    90:80:cb:99:e9:41:e8:f5:a4:fd:50:d3:38:9d:cc:
                    d4:43:43:77:66:38:df:c4:13:2d:a2:39:42:32:25:
                    80:2a:b0:6d:42:f8:7f:7f:36:dc:b6:6f:bb:ac:e7:
                    e6:95:3a:3e:b1:6c:8c:e3:31:70:26:cc:6c:e0:b0:
                    df:60:aa:bd:52:50:9b:7e:34:37:64:b3:7b:30:3e:
                    9f:18:b5:9b:38:00:d1:f3:09:87:33:ad:80:94:1d:
                    42:4d:bf:bc:a5:cb:84:05:4e:2d:a2:fb:5b:7e:a4:
                    31:9e:06:b3:cc:e2:ad:9a:b2:23:a8:ac:7b:89:ae:
                    3e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BB:90:F7:D0:CB:2B:85:8C:93:0D:5F:1E:96:1F:24:A9:93:CE:F2
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/D7uQ99DLK4WMkw1fHpYfJKmTzvI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.155.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:5b:b7:a9:b1:da:4e:20:2e:28:7b:27:4c:d7:29:d5:95:18:
         93:89:a0:57:31:c5:b6:69:cd:e4:7e:45:19:c9:7a:da:48:26:
         b5:5a:3c:b0:e3:4a:6d:91:17:b4:b7:5a:b1:52:d5:b0:45:e1:
         b2:72:0f:38:f9:bc:10:8d:42:c9:c3:23:db:0b:77:07:de:09:
         a9:73:15:3e:cf:59:15:65:44:08:8d:c4:82:16:e4:b7:79:7b:
         93:9f:6c:22:e4:45:26:2e:15:fb:fe:a5:bd:35:a6:02:b8:2c:
         c8:50:e1:8d:b1:7a:d5:fc:2c:a9:8c:92:c5:92:68:0b:0b:9c:
         49:f6:66:fd:9d:19:f5:fa:fa:fa:92:7c:15:d5:3f:5f:e7:5a:
         29:7c:b5:2e:47:fb:31:59:45:f0:0e:f3:26:c0:0a:ca:ef:92:
         d2:27:30:17:ab:bc:62:c1:36:1c:9c:74:78:1d:16:46:ee:2f:
         60:6d:f6:cc:d8:8d:8e:56:8f:be:6d:0a:34:3e:5c:0e:b7:1a:
         1b:db:39:d8:d3:68:34:fc:12:04:92:e6:d3:82:9b:f3:4d:d2:
         9c:c9:69:b2:e7:43:88:03:fd:23:3f:d0:3a:8b:68:b5:f9:dc:
         56:10:d3:53:97:98:78:42:53:43:63:7b:2a:4a:d9:91:5a:fc:
         4c:2d:56:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 04:21:59 2026 by rpki-client