This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/plItPB8o1hNBs5V2UiiNbaUAUrA.roa
File:                     plItPB8o1hNBs5V2UiiNbaUAUrA.roa (raw, json)
Hash identifier:          xXIgUcms6entSFE/XBQ7IsjRqcQ1JB92BORcc15C1mo=
Subject key identifier:   A6:52:2D:3C:1F:28:D6:13:41:B3:95:76:52:28:8D:6D:A5:00:52:B0
Certificate issuer:       /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Certificate serial:       019B79EBC999E747D244CC345640D53153C8
Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/plItPB8o1hNBs5V2UiiNbaUAUrA.roa
Signing time:             Thu 01 Jan 2026 14:17:34 +0000
ROA not before:           Thu 01 Jan 2026 14:17:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29240
IP address blocks:        195.225.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:eb:c9:99:e7:47:d2:44:cc:34:56:40:d5:31:53:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
        Validity
            Not Before: Jan  1 14:17:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=a6522d3c1f28d61341b3957652288d6da50052b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:8c:35:17:79:7e:3c:0c:c2:5b:19:61:99:
                    57:9e:6c:a2:79:94:a2:08:87:4e:e3:ef:d2:31:2b:
                    be:84:0b:38:d5:fd:b6:4e:29:87:22:ac:c0:a0:82:
                    f8:7b:97:f5:00:35:20:34:1d:85:51:11:07:66:1d:
                    9e:52:1c:98:d9:fa:f5:5a:85:ed:e0:9a:71:f8:8f:
                    25:5f:b5:02:36:94:ae:a9:9b:9d:a0:e8:07:37:62:
                    c6:59:cd:64:5c:b6:c2:8d:78:90:56:80:79:f6:93:
                    67:16:31:d4:b3:51:08:86:f7:7b:f3:de:64:a0:36:
                    fe:92:5d:60:5a:ae:6b:db:a1:11:f0:8e:5f:5e:29:
                    e1:e4:9c:f6:8f:b8:99:44:5c:7d:09:e2:8b:00:84:
                    9f:31:24:81:05:02:2a:bb:6b:08:fc:1c:87:18:ef:
                    3c:b1:56:1f:27:8a:07:29:37:d7:fd:95:a7:ac:5d:
                    9c:c5:4a:5e:10:dd:9b:4d:8c:c4:d0:db:15:85:70:
                    48:33:50:a2:2d:82:96:15:c0:c3:e1:b7:a7:73:06:
                    4b:51:ee:2e:42:d8:50:f1:09:64:d1:f2:a7:75:71:
                    40:da:b2:6b:3d:f5:78:97:3a:6f:43:7a:a0:ef:da:
                    d4:e9:0d:b1:fd:65:63:92:1c:17:47:c6:93:73:41:
                    5a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:52:2D:3C:1F:28:D6:13:41:B3:95:76:52:28:8D:6D:A5:00:52:B0
            X509v3 Authority Key Identifier:
                keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/plItPB8o1hNBs5V2UiiNbaUAUrA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.225.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:5e:01:d0:1c:25:9c:42:96:14:5f:69:3c:8f:cc:ca:fe:d4:
         a6:7a:3d:de:5f:78:98:10:fe:e9:91:6d:82:e1:66:3c:4c:f7:
         76:e5:57:96:c0:3d:5b:dd:b7:78:8e:6d:16:b8:7e:b3:d5:fe:
         3c:99:13:ce:aa:fe:23:a5:3c:24:7a:f5:6f:da:e8:ae:da:7f:
         26:37:0e:0b:0f:3a:69:8c:cb:20:64:b3:8e:70:e1:8c:dc:ae:
         38:05:63:74:26:13:ec:6c:2a:ed:e4:6b:97:52:00:ce:2b:e2:
         78:09:a0:93:a7:43:35:31:fe:79:e4:92:d2:4b:a9:c4:35:c5:
         e7:58:51:0a:88:4e:6d:9f:d6:e7:e1:be:26:b1:1b:5c:c9:cd:
         03:25:7b:e9:44:9a:66:be:79:51:af:02:fb:14:18:7d:40:81:
         4a:11:26:cb:79:44:7b:ff:90:08:ce:9f:59:f2:76:46:21:54:
         fb:8a:e9:2f:ab:3b:bc:20:8f:83:23:ea:22:a8:b2:f8:41:b8:
         bc:43:02:44:a5:3f:98:22:b6:12:39:1d:33:4c:6c:b7:44:d5:
         7f:34:f8:5e:43:18:c3:74:47:a3:78:f7:1a:23:be:c9:ec:dc:
         6c:67:be:11:d9:50:d6:68:9f:08:53:72:b7:06:ff:08:eb:22:
         b9:df:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:14:05 2026 by rpki-client