This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/Ay1de_CJDcGalpq6G-6jy9K11Gk.roa
File:                     Ay1de_CJDcGalpq6G-6jy9K11Gk.roa (raw, json)
Hash identifier:          uc5IBSFrLOuYogekySiZznfKugYHdXYL0+i6gvyMboQ=
Subject key identifier:   03:2D:5D:7B:F0:89:0D:C1:9A:96:9A:BA:1B:EE:A3:CB:D2:B5:D4:69
Certificate issuer:       /CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
Certificate serial:       019B78A2610125B954C78CC0F621BA749C01
Authority key identifier: 55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/Ay1de_CJDcGalpq6G-6jy9K11Gk.roa
Signing time:             Thu 01 Jan 2026 08:17:46 +0000
ROA not before:           Thu 01 Jan 2026 08:17:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20878
IP address blocks:        176.74.0.0/21 maxlen: 21
                          176.74.1.0/24 maxlen: 24
                          176.74.2.0/24 maxlen: 24
                          176.74.3.0/24 maxlen: 24
                          176.74.4.0/24 maxlen: 24
                          176.74.5.0/24 maxlen: 24
                          176.74.6.0/24 maxlen: 24
                          176.74.7.0/24 maxlen: 24
                          185.66.32.0/22 maxlen: 22
                          185.66.32.0/24 maxlen: 24
                          185.66.33.0/24 maxlen: 24
                          185.66.34.0/24 maxlen: 24
                          185.66.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:61:01:25:b9:54:c7:8c:c0:f6:21:ba:74:9c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356
        Validity
            Not Before: Jan  1 08:17:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=032d5d7bf0890dc19a969aba1beea3cbd2b5d469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8b:de:00:39:9c:83:18:8c:bc:2a:82:e6:9d:
                    f5:ac:09:8d:e6:8a:7a:27:1f:46:40:f1:38:a4:fb:
                    df:cc:8e:45:bb:a8:82:ee:73:54:8f:d6:3a:1a:b8:
                    d6:82:31:af:a3:a7:11:de:fe:f2:c8:8b:e6:ac:d8:
                    60:2c:11:48:00:1c:39:40:ab:fc:e5:e2:9f:ad:db:
                    3d:c1:3a:0a:db:47:1a:f7:4b:09:ed:7b:44:b9:86:
                    5d:ce:33:37:87:b0:80:66:04:ff:52:02:ff:00:e5:
                    5d:9e:d9:30:5f:ab:73:23:b4:71:d4:df:0a:c3:6d:
                    ce:eb:c5:46:3f:0c:53:34:3a:b1:59:1d:35:9c:d8:
                    61:bf:1e:a9:67:52:2a:65:f3:ed:08:72:ec:08:8c:
                    87:21:63:69:6a:43:db:03:e1:5b:e0:07:8c:85:00:
                    13:31:51:90:e0:c7:66:e1:e8:25:a7:c4:4f:88:83:
                    49:7d:ae:2c:7d:f0:65:43:80:67:99:11:93:f6:a1:
                    ee:55:8f:8f:b9:e2:55:6f:bd:f0:41:d2:f6:ef:88:
                    aa:23:e5:8d:d9:81:8d:f2:2e:28:c1:73:e9:9c:cc:
                    83:79:58:dc:1e:c4:d0:54:28:ac:f3:81:2c:eb:6a:
                    3d:bc:b2:6f:27:f1:e0:7a:1e:67:6c:72:21:2b:b8:
                    de:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2D:5D:7B:F0:89:0D:C1:9A:96:9A:BA:1B:EE:A3:CB:D2:B5:D4:69
            X509v3 Authority Key Identifier:
                keyid:55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/Ay1de_CJDcGalpq6G-6jy9K11Gk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.74.0.0/21
                  185.66.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:8a:fe:8b:ca:1e:b7:1e:ae:04:75:eb:ee:a9:5c:bd:e5:
         3a:9f:64:40:b4:65:a1:9e:29:48:ab:39:22:06:b8:da:90:c1:
         81:01:9f:8e:df:44:91:82:f4:3c:45:a9:6b:59:75:73:4a:bf:
         96:86:4a:fa:3c:ca:24:0e:2a:e0:6b:6b:7b:ba:01:89:32:72:
         fc:57:8f:58:7f:7e:d1:5b:4b:75:51:b1:9c:08:09:31:97:b2:
         b5:7f:69:9f:7a:d0:d3:4f:cd:30:9c:e8:3a:7e:3e:68:f4:39:
         71:85:1e:88:56:52:c3:82:98:57:74:7a:73:6b:0e:42:dd:c6:
         35:c9:00:80:7c:a4:fa:3c:40:1d:de:ba:b1:90:21:29:5b:cd:
         6a:70:3d:a3:9b:4c:9d:0e:9c:66:d7:73:13:a4:54:59:df:a0:
         e8:5e:48:e1:bd:df:72:8f:ba:fe:81:84:9a:14:74:89:35:64:
         ff:ee:96:d8:28:3c:1d:c6:f6:d1:26:6f:71:3b:6b:dc:c6:74:
         e7:06:d4:9f:d4:f3:2b:a3:4f:1d:8a:0b:9d:a0:62:d1:50:68:
         d5:5c:85:49:ff:f1:7e:49:04:56:eb:00:e2:e1:cd:f1:1d:c4:
         3b:16:72:f4:00:70:cc:a2:ea:16:0a:87:d5:dd:63:29:2b:9b:
         cb:e8:f9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:10:21 2026 by rpki-client