This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/dvvd8BFnizdhbvkzk4JTGk-vGGA.roa
File:                     dvvd8BFnizdhbvkzk4JTGk-vGGA.roa (raw, json)
Hash identifier:          KB+M+z0sgcKeuNslZAle5MJmCWCAbOChFQfMcbOTgYM=
Subject key identifier:   76:FB:DD:F0:11:67:8B:37:61:6E:F9:33:93:82:53:1A:4F:AF:18:60
Certificate issuer:       /CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
Certificate serial:       019B7F159CC02208797FAADA0D6B903CDE3B
Authority key identifier: 48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/dvvd8BFnizdhbvkzk4JTGk-vGGA.roa
Signing time:             Fri 02 Jan 2026 14:21:21 +0000
ROA not before:           Fri 02 Jan 2026 14:21:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39392
IP address blocks:        185.80.30.0/24 maxlen: 24
                          2a10:3900::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:9c:c0:22:08:79:7f:aa:da:0d:6b:90:3c:de:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cb94a44349f98d409b7ddb9a053df4aef1addf
        Validity
            Not Before: Jan  2 14:21:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=76fbddf011678b37616ef9339382531a4faf1860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:ec:ca:af:93:f2:da:63:27:de:df:4c:3c:
                    02:c1:80:98:2f:37:93:19:1c:ac:5c:fb:b4:a4:f1:
                    0f:06:10:0c:74:08:7b:9d:43:c7:3f:75:4b:5b:63:
                    39:7d:b3:b6:2f:04:2e:bb:8c:4e:ce:76:f7:4b:f4:
                    4e:59:02:53:91:4e:90:52:b6:5b:b6:bb:1c:be:51:
                    e9:a5:f8:cf:78:e5:5b:1c:a6:75:2f:94:75:bd:38:
                    6b:36:49:37:d6:f6:41:db:6e:91:29:f7:b9:75:cd:
                    aa:c9:1b:f1:6d:2e:80:8d:de:95:63:69:49:13:a5:
                    37:db:86:b1:be:0f:4e:09:2f:a8:7c:53:29:85:b0:
                    6d:4f:72:d7:77:5d:8e:6f:12:02:73:f5:f9:0b:73:
                    3c:21:8a:3a:92:32:06:70:d2:65:95:52:04:b6:50:
                    3d:ec:ad:63:eb:6a:2b:d0:0b:d9:24:ce:2a:6a:c7:
                    d8:21:25:3b:ea:70:51:c7:15:dd:b6:20:d8:61:7d:
                    a5:29:4d:08:65:e9:02:f4:b1:09:3c:21:48:03:fc:
                    31:6b:b0:0f:f4:f0:d4:49:9b:2b:02:0e:78:f2:f0:
                    10:d4:d1:c2:81:03:32:84:34:0e:4a:6d:aa:5b:a1:
                    ec:02:89:54:71:ea:e6:d1:c0:2e:89:b6:83:06:a5:
                    10:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FB:DD:F0:11:67:8B:37:61:6E:F9:33:93:82:53:1A:4F:AF:18:60
            X509v3 Authority Key Identifier:
                keyid:48:CB:94:A4:43:49:F9:8D:40:9B:7D:DB:9A:05:3D:F4:AE:F1:AD:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMuUpENJ-Y1Am33bmgU99K7xrd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/dvvd8BFnizdhbvkzk4JTGk-vGGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ac0c06-8072-4e30-95d1-a3d5533f1757/1/SMuUpENJ-Y1Am33bmgU99K7xrd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.30.0/24
                IPv6:
                  2a10:3900::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:70:ee:8d:e0:87:e8:eb:95:01:1c:69:52:5d:1e:0d:9d:c9:
         1f:84:fd:81:f0:de:26:60:1c:b9:49:a7:b5:39:e4:2f:94:f2:
         a5:ee:cc:35:7f:88:24:93:8a:2d:81:fa:09:56:f0:76:6b:a9:
         63:53:41:bc:a4:c5:9e:0f:b1:ec:d8:38:d5:b2:db:cf:15:91:
         08:34:e0:b6:fb:c5:f1:cf:21:f7:a8:44:51:09:ec:40:c8:78:
         24:f9:3c:04:80:f7:51:55:f0:5a:05:dd:37:f9:89:37:0e:db:
         1c:c5:32:5c:2e:41:4b:b4:62:ed:aa:59:a3:52:9d:7d:3e:58:
         56:90:2a:d8:4d:0c:9b:9e:84:38:2e:56:00:be:d8:9a:3b:ac:
         f8:8a:08:98:79:00:bd:da:3a:1a:32:c2:60:92:de:a7:b6:ff:
         a9:28:d5:43:88:fb:3b:8e:77:6b:e8:a3:9d:a6:26:6d:18:b0:
         18:67:76:89:a1:a6:75:5d:55:9c:f8:0d:23:ed:15:7e:de:79:
         06:9f:52:65:59:82:07:ff:47:03:18:79:b1:9f:72:b4:12:a0:
         a6:c4:3f:02:64:81:b0:34:9e:e1:b4:3d:c0:cb:fe:cb:b5:e4:
         73:6d:02:7b:ae:77:ea:98:cd:e8:36:92:a9:34:b3:3d:d7:d7:
         c9:01:8d:c4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt/FZzAIgh5f6raDWuQPN47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Y2I5NGE0NDM0OWY5OGQ0MDliN2RkYjlhMDUzZGY0YWVm
MWFkZGYwHhcNMjYwMTAyMTQyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmZiZGRmMDExNjc4YjM3NjE2ZWY5MzM5MzgyNTMxYTRmYWYxODYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx3syq+T8tpjJ97fTDwCwYCYLzeT
GRysXPu0pPEPBhAMdAh7nUPHP3VLW2M5fbO2LwQuu4xOznb3S/ROWQJTkU6QUrZb
trscvlHppfjPeOVbHKZ1L5R1vThrNkk31vZB226RKfe5dc2qyRvxbS6Ajd6VY2lJ
E6U324axvg9OCS+ofFMphbBtT3LXd12ObxICc/X5C3M8IYo6kjIGcNJllVIEtlA9
7K1j62or0AvZJM4qasfYISU76nBRxxXdtiDYYX2lKU0IZekC9LEJPCFIA/wxa7AP
9PDUSZsrAg548vAQ1NHCgQMyhDQOSm2qW6HsAolUcerm0cAuibaDBqUQswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHb73fARZ4s3YW75M5OCUxpPrxhgMB8GA1UdIwQY
MBaAFEjLlKRDSfmNQJt925oFPfSu8a3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU011VXBFTkotWTFBbTMzYm1nVTk5Szd4cmQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hYzBjMDYtODA3Mi00ZTMwLTk1ZDEt
YTNkNTUzM2YxNzU3LzEvZHZ2ZDhCRm5pemRoYnZrems0SlRHay12R0dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hYzBjMDYtODA3Mi00ZTMwLTk1ZDEtYTNkNTUzM2YxNzU3
LzEvU011VXBFTkotWTFBbTMzYm1nVTk5Szd4cmQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuVAeMA8E
AgACMAkDBwAqEDkAAAAwDQYJKoZIhvcNAQELBQADggEBAARw7o3gh+jrlQEcaVJd
Hg2dyR+E/YHw3iZgHLlJp7U55C+U8qXuzDV/iCSTii2B+glW8HZrqWNTQbykxZ4P
sezYONWy288VkQg04Lb7xfHPIfeoRFEJ7EDIeCT5PASA91FV8FoF3Tf5iTcO2xzF
MlwuQUu0Yu2qWaNSnX0+WFaQKthNDJuehDguVgC+2Jo7rPiKCJh5AL3aOhoywmCS
3qe2/6ko1UOI+zuOd2voo52mJm0YsBhndomhpnVdVZz4DSPtFX7eeQafUmVZggf/
RwMYebGfcrQSoKbEPwJkgbA0nuG0PcDL/su15HNtAnuud+qYzeg2kqk0sz3X18kB
jcQ=
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:57:49 2026 by rpki-client