This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/dpzibW71BafVtewDmI9jnKwB0PE.roa
File:                     dpzibW71BafVtewDmI9jnKwB0PE.roa (raw, json)
Hash identifier:          Lb6hcW86Ys7t4OSo9igJpzp6AC9QU/RfmTo/e1nf/rs=
Subject key identifier:   76:9C:E2:6D:6E:F5:05:A7:D5:B5:EC:03:98:8F:63:9C:AC:01:D0:F1
Certificate issuer:       /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial:       019B7FF258DFA03075813F47E04351621BEE
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/dpzibW71BafVtewDmI9jnKwB0PE.roa
Signing time:             Fri 02 Jan 2026 18:22:27 +0000
ROA not before:           Fri 02 Jan 2026 18:22:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200884
IP address blocks:        94.126.50.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:f2:58:df:a0:30:75:81:3f:47:e0:43:51:62:1b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
        Validity
            Not Before: Jan  2 18:22:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=769ce26d6ef505a7d5b5ec03988f639cac01d0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:e6:21:a9:e7:f9:08:bc:75:61:08:70:6f:
                    ad:11:85:66:7c:a6:56:86:20:01:b4:d6:be:6d:3b:
                    c0:60:0e:02:fa:c4:29:ec:d3:1e:62:a8:af:c4:14:
                    f6:cf:63:4f:8d:8f:13:2e:a7:86:ef:05:ac:68:cf:
                    76:3b:d1:f9:1d:bf:e1:c3:a9:23:29:4e:35:49:3b:
                    c8:96:43:37:ea:ed:5e:80:16:7f:a8:34:4e:97:c7:
                    2f:16:92:2a:dd:40:9e:c1:47:a6:dc:0d:04:ab:44:
                    7f:1b:0f:41:b2:51:43:ea:48:da:93:a0:59:98:3b:
                    bf:2c:3b:0f:7c:9b:34:0b:c1:15:c8:6b:4f:b9:e0:
                    07:72:5d:92:cf:2e:54:23:81:53:5a:84:95:6f:88:
                    75:51:8a:16:fc:9d:56:5d:58:21:0b:11:79:45:76:
                    e4:64:af:b1:b3:da:ff:66:1e:80:e5:fa:cd:d3:b7:
                    67:91:c7:ab:51:1b:62:4a:61:ee:0c:6d:fa:75:48:
                    b2:ad:75:63:c8:f3:24:68:ae:e2:c1:29:f2:65:a4:
                    50:3e:41:07:49:fc:82:64:c4:e7:3b:81:cb:0b:16:
                    38:6a:23:84:c9:e3:5f:95:32:f6:46:d8:b7:ba:c8:
                    f5:fc:8a:ab:1a:5d:c3:59:95:8d:f0:ac:b4:6d:e1:
                    1a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9C:E2:6D:6E:F5:05:A7:D5:B5:EC:03:98:8F:63:9C:AC:01:D0:F1
            X509v3 Authority Key Identifier:
                keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/dpzibW71BafVtewDmI9jnKwB0PE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.126.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:05:86:d5:ce:2a:cf:e7:64:93:b0:2e:a6:17:ae:4c:bb:5b:
         26:43:46:2f:00:b0:d6:d7:af:91:97:62:31:93:b4:a2:76:54:
         ae:e1:5b:2a:d1:6f:07:4a:31:b8:86:35:8d:1c:13:48:e4:96:
         98:2f:9e:c5:5b:84:da:17:ea:55:a3:e9:d0:52:b4:de:a0:9e:
         14:da:62:3f:93:ff:5c:09:f6:17:db:ee:e0:0b:ee:2a:49:e2:
         37:69:80:43:b5:ed:be:15:39:c2:3d:e1:30:21:2a:48:9c:4b:
         10:89:59:9a:21:dc:af:f8:b2:bd:31:f9:a6:52:6f:df:9f:27:
         ed:47:86:d5:62:91:2c:ea:2b:d5:bf:7a:d1:e3:7f:c4:cd:21:
         c5:0f:97:e9:28:a0:08:aa:03:b6:62:b9:06:43:d8:46:33:59:
         81:ba:76:6b:db:b9:5a:1f:16:82:6e:7f:22:68:ca:71:96:c7:
         f9:c8:14:4f:c2:da:0f:32:d2:a5:3d:ff:99:11:53:0d:c0:8b:
         5b:ec:7c:b8:bf:f0:0e:b4:7a:af:f6:f2:0e:78:58:10:60:bc:
         a7:69:90:7c:65:a6:a5:75:6b:00:7c:ba:39:30:87:3f:51:72:
         ca:77:d0:9a:5b:30:42:03:1f:8e:9a:7c:9e:e1:af:e9:4d:8d:
         fe:f1:dc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:29 2026 by rpki-client