This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/Cdey4x25Y71jAjsi-w5ror1Em9w.roa
File:                     Cdey4x25Y71jAjsi-w5ror1Em9w.roa (raw, json)
Hash identifier:          9Nkc6pZ1LY8cZ4nIVazJu4RFkDfce5y0UNDPuC2XOUU=
Subject key identifier:   09:D7:B2:E3:1D:B9:63:BD:63:02:3B:22:FB:0E:6B:A2:BD:44:9B:DC
Certificate issuer:       /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial:       019B7B362448544B81BE8127617C0E513DC4
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/Cdey4x25Y71jAjsi-w5ror1Em9w.roa
Signing time:             Thu 01 Jan 2026 20:18:24 +0000
ROA not before:           Thu 01 Jan 2026 20:18:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141718
IP address blocks:        185.217.39.0/24 maxlen: 24
                          194.147.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:36:24:48:54:4b:81:be:81:27:61:7c:0e:51:3d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
        Validity
            Not Before: Jan  1 20:18:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=09d7b2e31db963bd63023b22fb0e6ba2bd449bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:39:6c:b6:ec:5a:d8:c9:e6:9b:39:82:34:cb:
                    1f:87:38:5e:ed:d1:e3:da:38:59:e8:bb:4e:cd:52:
                    02:fd:6b:84:34:84:24:5d:2f:68:05:d0:b5:cd:59:
                    fd:c8:06:3c:8a:1a:d9:6d:85:ba:b3:ec:0d:c8:8a:
                    b2:d2:99:75:65:2c:51:11:45:b7:86:c9:15:46:1f:
                    e1:99:72:cc:c7:76:e8:66:12:f4:b4:ef:09:20:af:
                    66:5f:2b:a1:10:c5:53:14:7b:00:7b:ef:71:fd:45:
                    7c:9a:d3:5b:d6:5a:f0:e8:0c:59:8e:1d:08:3b:01:
                    36:e2:df:6f:8d:f1:64:f3:c6:75:d7:52:18:40:0c:
                    a5:b3:ee:4f:f6:ae:11:01:82:47:ab:16:c1:c3:f6:
                    25:ef:69:ce:84:2d:b6:aa:68:69:13:a2:d6:46:2d:
                    54:54:f0:af:ac:72:7d:c4:56:34:7a:40:20:27:45:
                    46:27:36:46:23:86:5b:60:68:02:aa:54:38:db:24:
                    76:0c:5b:3d:32:0b:59:8c:3f:c4:0e:5f:15:a5:ec:
                    94:ea:53:d3:a7:f1:ff:78:4e:5b:81:57:50:58:b0:
                    82:d5:d6:21:1a:b0:ea:a0:77:76:28:9b:2c:89:d8:
                    3c:f0:2c:be:31:b1:21:d1:d7:16:ce:4e:2f:c3:8b:
                    2b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D7:B2:E3:1D:B9:63:BD:63:02:3B:22:FB:0E:6B:A2:BD:44:9B:DC
            X509v3 Authority Key Identifier:
                keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/Cdey4x25Y71jAjsi-w5ror1Em9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.217.39.0/24
                  194.147.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:f1:13:e8:8b:48:2f:e2:0b:0e:84:e7:49:a2:6c:ee:17:d6:
         9b:8d:f2:69:42:cc:b8:18:82:3f:be:75:18:bd:fe:be:fd:7b:
         bd:6f:8b:f7:cc:6e:8a:df:cb:bf:81:25:64:43:9c:74:b1:c5:
         bc:60:df:02:67:da:7c:33:d7:c7:7b:80:03:63:22:6f:c8:ee:
         ae:9f:85:d6:3e:5e:78:b5:e5:64:64:52:7c:e8:04:fa:68:af:
         bb:f3:88:fb:82:cc:86:49:37:64:81:fe:70:e9:10:90:0f:cb:
         43:59:67:72:e8:be:4d:37:c5:05:9e:0b:3c:21:07:bd:c0:24:
         a6:11:fd:26:d8:19:41:15:d7:5a:13:66:6e:fd:95:c9:9f:ae:
         6c:7d:1f:8a:c6:f2:05:5e:2f:37:b6:43:d6:39:d9:8e:3c:a0:
         ef:ce:cc:39:b4:f4:3a:fd:ea:cd:7f:0d:d3:89:26:b7:1d:cd:
         34:d0:c5:59:d9:8b:df:0f:a7:73:b8:4c:ab:81:26:6f:54:ca:
         50:44:a4:a3:f2:4c:83:7c:36:20:33:99:fb:17:7b:a1:87:6d:
         3c:c3:55:70:83:e2:e3:50:da:32:1e:66:1c:13:1f:9a:ca:f7:
         0a:ed:83:ea:18:c5:98:c3:70:69:f8:aa:41:32:b9:3c:e7:ec:
         1b:29:dd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:08:22 2026 by rpki-client