This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/doGoX02hMamF9DY5FkiK3Hz0L1A.roa
File:                     doGoX02hMamF9DY5FkiK3Hz0L1A.roa (raw, json)
Hash identifier:          iVO738ggm8ZAbwUoGkG5FNzeeqtHgLdZjyBQ4SOavsk=
Subject key identifier:   76:81:A8:5F:4D:A1:31:A9:85:F4:36:39:16:48:8A:DC:7C:F4:2F:50
Certificate issuer:       /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial:       019A8388953F4FC320BBE5963F5043AF2A14
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/doGoX02hMamF9DY5FkiK3Hz0L1A.roa
Signing time:             Fri 14 Nov 2025 18:02:37 +0000
ROA not before:           Fri 14 Nov 2025 18:02:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     34828
IP address blocks:        194.110.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:83:88:95:3f:4f:c3:20:bb:e5:96:3f:50:43:af:2a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
        Validity
            Not Before: Nov 14 18:02:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=7681a85f4da131a985f4363916488adc7cf42f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:08:ec:b5:ea:07:5c:0d:51:9f:f1:88:db:
                    75:8f:38:c4:56:10:62:44:bb:ca:f2:5a:e9:55:b9:
                    df:bc:e1:ed:09:4a:29:98:5d:ec:72:f6:d1:83:2e:
                    22:00:30:a0:ef:3e:b1:9f:8c:86:7f:56:b5:58:bf:
                    1c:67:15:4a:90:9b:c2:4b:4e:64:86:22:56:0e:7b:
                    1c:c7:61:d0:96:84:a2:7f:4e:49:f1:5b:94:30:e3:
                    54:99:96:89:53:2c:b8:bf:8c:8f:81:21:eb:b2:8d:
                    7c:42:49:93:2e:2f:9a:10:ca:64:9c:44:f7:b3:0d:
                    b8:7b:55:06:42:d0:44:79:67:de:f6:e8:0c:7a:4a:
                    a5:20:d5:c4:3a:ba:39:b1:75:ab:24:75:4d:45:71:
                    9e:73:a9:ab:0c:b2:65:fd:83:47:17:9d:ea:b1:3e:
                    22:c1:7c:01:f3:d0:94:7a:a7:00:e3:24:97:6d:bc:
                    57:53:cc:dd:3f:4f:6f:98:28:dd:d9:f6:05:45:b3:
                    0b:16:be:93:3b:a8:68:8a:75:3c:29:e9:a1:22:e0:
                    2b:52:e7:5c:f7:da:84:fa:16:6c:20:5f:be:cd:ac:
                    83:28:2e:cb:9c:b1:67:27:19:c9:13:57:79:d3:6a:
                    58:0f:e3:95:f9:d0:39:d4:e6:e8:f7:57:9c:a9:91:
                    ad:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:81:A8:5F:4D:A1:31:A9:85:F4:36:39:16:48:8A:DC:7C:F4:2F:50
            X509v3 Authority Key Identifier:
                keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/doGoX02hMamF9DY5FkiK3Hz0L1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.110.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d7:3f:25:47:2b:9d:9a:fb:53:83:7c:f6:2b:97:91:7d:6d:
         d4:2f:d7:cf:8a:0f:66:4b:1c:c3:29:d7:e1:42:ee:0f:81:66:
         f0:64:5a:60:2e:95:56:cc:fe:fa:e1:59:c3:c8:24:ac:62:85:
         29:1e:be:dd:63:ca:00:27:e7:25:18:ba:9b:11:35:07:5c:c1:
         d1:0d:c9:a5:48:72:d9:10:4a:09:6d:b4:3c:4f:3f:be:d0:10:
         d0:c8:0d:08:bd:d6:dd:6a:01:75:f5:e1:a6:b7:86:fe:e2:7b:
         40:85:41:cf:52:96:d6:a4:91:25:79:8e:f9:7b:a2:2f:73:f6:
         71:9f:32:1d:5d:f5:0c:35:1e:99:e3:ee:45:3f:c8:79:9f:d0:
         a4:fd:a1:c8:6e:e6:29:2f:a0:9e:2f:c9:46:ca:86:62:40:29:
         82:a1:9a:97:38:f0:50:81:7e:62:f1:dc:2a:77:0a:11:b0:96:
         8c:66:e8:7b:59:6a:7a:29:13:a0:b5:a4:b2:77:6c:22:70:90:
         00:e3:fa:07:0a:9c:71:e2:dc:8c:b0:1d:65:88:bc:f3:b9:7b:
         c9:eb:5a:19:b0:00:b9:96:c8:fc:ba:eb:79:6e:aa:02:9f:b9:
         97:35:3a:0a:dd:1c:35:a0:2f:f0:86:a3:f0:ee:8c:e6:48:06:
         1c:e0:91:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:16:13 2025 by rpki-client