This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/AdzOgeWlUtmYaTonB2c5IBwaPls.roa
File:                     AdzOgeWlUtmYaTonB2c5IBwaPls.roa (raw, json)
Hash identifier:          aw2r5oEHfzTNQGoJBf1uD5gPLejQUcUMLKJrBTyN7J4=
Subject key identifier:   01:DC:CE:81:E5:A5:52:D9:98:69:3A:27:07:67:39:20:1C:1A:3E:5B
Certificate issuer:       /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial:       019B7B35EADF4C82797F7B2514FC2E69FC2C
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/AdzOgeWlUtmYaTonB2c5IBwaPls.roa
Signing time:             Thu 01 Jan 2026 20:18:09 +0000
ROA not before:           Thu 01 Jan 2026 20:18:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200091
IP address blocks:        185.169.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:ea:df:4c:82:79:7f:7b:25:14:fc:2e:69:fc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
        Validity
            Not Before: Jan  1 20:18:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=01dcce81e5a552d998693a27076739201c1a3e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:a0:fd:7b:21:e2:78:c8:35:41:dc:ac:3d:
                    d8:c6:33:7e:1d:97:fc:37:7e:80:3f:32:8b:57:85:
                    76:32:d7:76:92:eb:54:ca:56:f5:fa:81:c5:ce:3a:
                    0f:fe:c9:14:ad:c5:26:8d:6f:02:ad:42:88:da:f7:
                    99:61:ea:dc:6d:2e:4a:40:45:3b:aa:4b:58:90:4b:
                    ee:13:7c:15:c6:17:05:a0:36:12:fd:05:3a:8a:36:
                    21:82:38:44:ea:ec:6d:f7:d5:1a:26:18:c0:02:09:
                    25:91:a9:63:68:60:50:7e:6f:94:8b:3b:a2:80:a0:
                    b3:65:83:af:23:58:8b:29:dd:20:66:00:38:c6:a0:
                    a9:ae:5e:c6:90:d3:f5:62:75:17:db:d7:60:32:b9:
                    5f:b9:c8:3f:cc:28:35:6c:6f:e0:d9:63:2c:07:8c:
                    e3:41:f6:78:dd:89:42:96:36:02:45:e9:bf:ba:19:
                    38:37:75:84:04:70:11:13:21:87:97:04:99:98:99:
                    5f:a5:a7:4c:39:01:80:31:d0:44:49:9b:61:27:c0:
                    5f:37:59:ce:7f:bc:52:9e:21:7d:2d:93:90:14:92:
                    8c:ed:50:2d:e8:38:68:7c:70:cb:d2:4a:a8:2e:4d:
                    4e:96:78:51:aa:77:0a:f5:40:9e:f7:de:94:58:79:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DC:CE:81:E5:A5:52:D9:98:69:3A:27:07:67:39:20:1C:1A:3E:5B
            X509v3 Authority Key Identifier:
                keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/AdzOgeWlUtmYaTonB2c5IBwaPls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:bb:f1:2c:81:42:6e:37:d2:33:57:9e:d5:57:06:b3:6a:af:
         4c:e2:ee:dd:56:cd:36:46:d5:82:b0:1b:64:21:84:a4:91:db:
         c7:5e:2e:71:73:ad:4b:88:d5:0c:8b:7b:b0:3f:83:c7:d2:14:
         0f:1f:de:d6:80:60:8b:d6:61:3a:87:62:f7:b8:87:40:59:33:
         cb:2c:95:91:e4:9e:f5:f1:46:5c:6f:6e:f3:84:dd:67:c0:1d:
         8f:20:83:bd:54:8a:d6:4f:d2:87:b2:3f:23:3c:88:b3:d5:23:
         2c:95:57:32:f6:c3:4b:23:db:0a:9d:86:ea:dc:83:dd:68:d3:
         47:12:05:70:9f:33:32:eb:c0:1c:d7:51:f2:6f:23:a5:de:54:
         ce:44:35:c5:34:e4:ae:27:e5:90:46:de:59:25:87:15:32:a0:
         c5:44:ca:cb:d1:b7:eb:9f:7e:05:c2:55:92:92:68:ac:98:83:
         74:55:c9:5b:ca:4b:ff:10:e1:c3:08:c6:fd:44:19:e8:74:1a:
         22:83:57:46:9a:48:b4:e0:a0:ec:85:b3:ba:c2:12:f0:18:12:
         a0:0e:c2:b1:c5:f6:c4:28:99:2a:71:24:a7:bb:68:74:99:cd:
         fc:d1:1c:a0:68:0b:79:9b:2c:05:61:47:a5:4d:9e:7b:c1:3f:
         ce:a2:8e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:48:13 2026 by rpki-client