This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/DLvFNukbRAhZM4TuFhov4WWOGb0.roa
File:                     DLvFNukbRAhZM4TuFhov4WWOGb0.roa (raw, json)
Hash identifier:          Sq2gts+S55hxx/TOW9y2dVTRNKFXvpr4cfM5oauwoaM=
Subject key identifier:   0C:BB:C5:36:E9:1B:44:08:59:33:84:EE:16:1A:2F:E1:65:8E:19:BD
Certificate issuer:       /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial:       019B775975313F1741BE0725142806835E39
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/DLvFNukbRAhZM4TuFhov4WWOGb0.roa
Signing time:             Thu 01 Jan 2026 02:18:29 +0000
ROA not before:           Thu 01 Jan 2026 02:18:29 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60829
IP address blocks:        188.95.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:75:31:3f:17:41:be:07:25:14:28:06:83:5e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
        Validity
            Not Before: Jan  1 02:18:29 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0cbbc536e91b4408593384ee161a2fe1658e19bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f7:5a:1b:4d:59:a9:5d:9b:cf:4b:97:0e:6d:
                    96:cf:c3:41:eb:8f:b6:df:ee:c4:8b:52:8a:67:96:
                    fd:39:1c:6f:f2:22:0a:8d:68:21:d0:cc:48:3c:5b:
                    37:a4:5a:2e:2d:73:0c:6f:b8:7c:bc:9e:2c:09:5b:
                    00:6b:12:32:89:45:2c:2b:e7:37:41:c9:24:a0:bb:
                    58:f8:f0:d7:17:19:9b:23:bd:89:43:d6:f2:46:18:
                    8c:01:6d:d7:cb:0f:2b:32:34:82:0a:fa:8d:19:8e:
                    1a:33:8d:9e:5c:a7:5b:dd:04:d9:09:f8:ec:20:f0:
                    19:42:88:eb:f3:de:d9:0a:c6:c7:75:b8:7b:2a:28:
                    f2:e2:d8:be:6d:49:b7:ff:71:ad:26:0c:b8:23:f1:
                    6d:30:2c:b8:f3:f7:64:ee:a6:9d:a8:b4:d4:ba:b8:
                    ff:e7:5e:ed:9e:19:5d:bc:f9:1f:cc:8e:18:48:27:
                    e0:9d:8c:d7:93:8d:f3:a7:3c:94:5d:9a:c5:fb:3a:
                    57:74:c4:7f:5d:e0:c5:63:a3:16:71:86:f9:1e:04:
                    58:a5:2f:b5:59:62:62:37:ab:67:c1:52:f9:f9:5c:
                    f6:b8:31:35:e6:9d:fa:1e:05:93:f5:ad:02:d2:f5:
                    8a:24:be:eb:02:3c:b5:6d:e7:3f:24:53:5c:91:12:
                    55:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BB:C5:36:E9:1B:44:08:59:33:84:EE:16:1A:2F:E1:65:8E:19:BD
            X509v3 Authority Key Identifier:
                keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/DLvFNukbRAhZM4TuFhov4WWOGb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.95.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:9f:71:22:cb:06:70:a6:e0:5f:d4:b6:46:df:bd:df:b3:c7:
         4f:32:c0:7e:87:72:ef:04:89:c1:7e:2b:59:95:b1:29:6d:2b:
         ce:fd:a3:6a:16:ae:62:ed:f4:46:00:86:58:1e:5f:94:9a:7b:
         49:e2:0f:28:ff:42:21:e0:d7:1b:bc:32:7d:93:12:ff:88:20:
         9b:97:ba:9e:02:4f:88:dc:c3:68:d8:6e:ac:a7:25:bc:4c:21:
         60:26:e9:da:fb:bd:51:41:98:0f:19:70:3e:4c:34:5e:69:a8:
         e7:22:a9:94:87:b7:ba:68:f2:80:cd:84:a9:f9:3d:b1:e9:c2:
         25:e8:2b:d6:de:9f:59:31:14:09:d3:1d:6f:fd:a8:2e:48:f8:
         dc:60:2a:12:f9:08:c2:eb:9f:02:98:0d:11:15:bc:31:29:75:
         53:fe:75:b8:4c:c3:a2:e5:4e:22:ce:86:ec:d7:cf:b0:b5:22:
         37:03:c1:8c:e5:e5:e0:48:06:90:eb:73:07:c5:3b:ec:5f:9a:
         83:8a:4a:c6:98:89:fc:60:2c:60:d4:ba:d9:50:48:23:d7:c9:
         b5:a9:e0:24:88:3d:58:b6:d8:1b:1a:2b:8f:84:bb:19:ea:dc:
         fc:86:dc:31:d2:97:5e:c1:40:85:9b:65:3d:93:d3:c8:93:b3:
         44:89:61:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:01:38 2026 by rpki-client