This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/26reGS5JGM2591eEk2BzmmAasUs.roa
File:                     26reGS5JGM2591eEk2BzmmAasUs.roa (raw, json)
Hash identifier:          3M1FfFlULQW8/C7W2Zc2Fn0/lGmaDkz7biCpnx34NUk=
Subject key identifier:   DB:AA:DE:19:2E:49:18:CD:B9:F7:57:84:93:60:73:9A:60:1A:B1:4B
Certificate issuer:       /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial:       019B79113D4161EA903DF26AF8DDE14145CC
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/26reGS5JGM2591eEk2BzmmAasUs.roa
Signing time:             Thu 01 Jan 2026 10:18:51 +0000
ROA not before:           Thu 01 Jan 2026 10:18:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15995
IP address blocks:        185.97.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:11:3d:41:61:ea:90:3d:f2:6a:f8:dd:e1:41:45:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
        Validity
            Not Before: Jan  1 10:18:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dbaade192e4918cdb9f757849360739a601ab14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c6:c4:db:f6:9a:0f:f1:b6:4f:00:53:e0:bf:
                    22:54:2e:10:0f:c1:b1:48:ac:c8:f4:59:40:f5:29:
                    29:8e:db:78:76:b6:11:26:c1:bc:31:b1:70:d2:df:
                    ad:f4:08:e8:8e:23:04:7a:46:d6:f2:24:58:0c:bc:
                    d7:af:71:0f:3c:68:97:4f:94:a0:01:e0:17:98:2e:
                    4e:6f:f8:2d:86:80:de:cc:0e:32:3d:7f:f0:78:e3:
                    50:45:c1:a2:68:b6:22:56:32:5a:bc:a9:67:d7:74:
                    ac:52:8a:9d:4d:a0:9b:43:45:b6:5c:63:89:ae:d8:
                    1a:7f:3d:cd:6e:e9:83:02:e1:4e:c8:8f:5e:db:c1:
                    8c:67:1b:0e:85:dc:8b:50:38:c2:df:e7:c5:67:33:
                    d2:f3:72:ca:3f:ac:cf:1c:22:4e:6a:b3:e3:ad:a3:
                    30:19:14:a4:b7:d5:c8:a4:9a:bf:c0:a3:b9:28:43:
                    16:7d:4a:1a:39:a9:5d:ae:81:ab:69:fe:33:d6:55:
                    85:21:72:c3:b7:30:b6:4e:f8:34:d2:5e:9c:68:cd:
                    f3:bf:0a:93:73:b5:5d:70:4c:3d:ce:21:c0:8d:04:
                    35:a7:7f:75:33:d9:e8:da:dd:9e:43:5e:2e:a3:a6:
                    b7:c0:aa:35:df:c8:50:16:02:fd:bc:a4:6f:00:3e:
                    99:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AA:DE:19:2E:49:18:CD:B9:F7:57:84:93:60:73:9A:60:1A:B1:4B
            X509v3 Authority Key Identifier:
                keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/26reGS5JGM2591eEk2BzmmAasUs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.97.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:43:b7:32:46:81:8c:b2:ca:ef:72:85:cb:4f:99:33:0c:a7:
         20:50:54:45:cd:bd:e6:db:bb:e1:07:0b:83:33:36:91:72:64:
         99:1a:ff:66:2a:7e:ee:64:cf:89:dc:bd:36:8f:26:16:36:ad:
         de:aa:bd:c4:bc:4a:0e:22:97:36:65:4e:ca:97:78:34:f5:fc:
         91:1b:6d:fc:e2:98:46:42:97:7b:d9:c0:a3:3b:1b:a6:57:8f:
         0f:74:8a:f2:f3:78:c2:ef:84:f1:26:e3:da:02:f7:89:33:24:
         67:f5:64:5d:6a:53:ca:14:b4:ce:bf:4d:f2:72:88:9e:29:93:
         d4:b1:fe:38:1a:d3:29:5c:74:5b:32:79:ea:fa:5a:32:02:95:
         0d:40:f5:ae:5c:5a:b1:26:35:f3:72:17:67:1f:11:8d:fa:b4:
         b0:84:c5:17:f6:13:07:58:48:a8:38:8f:0b:61:1c:b6:ae:a6:
         6b:a7:68:ed:78:2d:23:4f:a8:01:9f:dc:31:e1:2a:3c:1b:3a:
         29:64:be:18:f6:0b:ac:1b:39:bc:54:c3:3b:82:a2:bc:b8:2c:
         55:44:0e:79:96:3f:6d:b1:f3:0b:50:d3:0d:c4:60:34:7e:c4:
         e5:59:18:68:a2:ce:4b:5e:66:7a:79:1e:7c:5a:6b:17:75:de:
         9a:02:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:06:12 2026 by rpki-client