This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/rSBkW65hC7ab29bJ4AU0NuL624g.roa
File:                     rSBkW65hC7ab29bJ4AU0NuL624g.roa (raw, json)
Hash identifier:          PQXW1iGB9abxie2k7zu6yoynTk5cvhSDeO4aK1Kj0iI=
Subject key identifier:   AD:20:64:5B:AE:61:0B:B6:9B:DB:D6:C9:E0:05:34:36:E2:FA:DB:88
Certificate issuer:       /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Certificate serial:       019B7E38F01B0CFB4C14B736582F5F94490F
Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/rSBkW65hC7ab29bJ4AU0NuL624g.roa
Signing time:             Fri 02 Jan 2026 10:20:19 +0000
ROA not before:           Fri 02 Jan 2026 10:20:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48631
IP address blocks:        185.162.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:f0:1b:0c:fb:4c:14:b7:36:58:2f:5f:94:49:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
        Validity
            Not Before: Jan  2 10:20:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ad20645bae610bb69bdbd6c9e0053436e2fadb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:02:c3:87:c7:0d:0c:6b:74:57:4e:22:a2:e8:
                    2d:eb:90:73:a4:6b:fa:6b:70:e1:96:5c:1a:1a:2b:
                    8e:3a:4c:0c:5a:98:ae:9d:98:b8:42:5c:31:34:bd:
                    9e:ef:7f:12:6d:a6:d9:30:45:21:e4:46:e4:a0:e8:
                    89:2e:c7:a7:3a:5b:fc:eb:8a:6b:5b:37:44:a0:91:
                    d1:74:24:22:49:fd:b3:12:26:50:50:49:d1:71:c2:
                    4b:50:72:48:d7:ce:18:ae:a3:76:67:19:c9:ca:9b:
                    94:84:0c:4e:39:5d:e9:de:1d:14:47:cd:79:45:bc:
                    d4:54:7b:be:00:54:3d:6e:eb:95:31:07:aa:fe:59:
                    06:d0:12:39:59:3f:6a:e6:1c:31:7d:8e:32:8b:52:
                    c2:0a:4f:9c:e4:ea:0e:ae:0d:63:99:a8:cc:0d:d2:
                    be:0c:c2:d1:20:f3:c1:fa:07:67:34:7b:54:9d:d8:
                    3d:bc:fb:ef:93:d5:7f:0e:5c:56:0a:ad:de:a6:b8:
                    7a:c4:50:a1:75:40:87:a8:40:03:5e:8d:de:d4:bc:
                    39:2f:08:bf:87:b5:78:c0:43:ff:9f:af:94:a0:f5:
                    f2:84:e2:9f:a5:67:d3:e4:14:9d:30:b2:da:a3:92:
                    e3:57:84:1b:7b:f9:42:fe:c7:1d:d1:a4:93:57:21:
                    9e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:20:64:5B:AE:61:0B:B6:9B:DB:D6:C9:E0:05:34:36:E2:FA:DB:88
            X509v3 Authority Key Identifier:
                keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/rSBkW65hC7ab29bJ4AU0NuL624g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.162.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:bd:98:49:26:23:ab:24:e5:d5:5f:93:3f:5d:35:27:a5:c8:
         7d:9d:cc:d0:65:fd:a9:3c:51:19:0a:e0:ea:db:1e:6d:2a:3d:
         a5:b5:2f:03:74:25:f9:04:e9:9c:99:4d:d2:2f:6b:e2:6a:21:
         f1:dc:cb:cf:fb:d5:26:8e:1a:81:bc:d8:4b:e5:eb:5e:4f:d8:
         65:5e:65:20:6c:f1:0d:1a:a6:f8:67:21:2a:e7:d3:63:13:68:
         cf:c9:aa:00:9b:9f:65:e6:45:b2:55:c3:25:4d:d6:07:a4:0c:
         57:78:69:7b:1b:97:e3:13:3e:83:28:62:ed:19:79:09:49:60:
         f0:da:f3:09:b2:30:99:04:e2:9f:fb:5e:d2:45:e7:c4:df:12:
         f0:80:75:0e:13:c8:41:11:d5:2e:03:b1:46:fa:6c:88:3d:ea:
         2e:33:d1:a3:22:b2:13:01:9c:f5:04:02:ae:35:52:c7:d0:4b:
         04:5a:ca:15:2b:e2:01:c3:c0:9f:1f:68:52:04:82:10:6b:75:
         d3:47:d5:89:06:24:3a:aa:9c:b3:86:62:f1:76:32:07:2a:3a:
         92:e2:32:19:e7:ad:a7:6f:fd:46:30:6b:6a:82:14:ce:41:1b:
         cc:78:4a:10:82:bb:81:ac:f5:4d:73:16:17:b2:59:c3:9e:6c:
         8d:e3:aa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:37:21 2026 by rpki-client