This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/v0q74nFVUklRHXEbX3DfFnuxDhk.roa
File:                     v0q74nFVUklRHXEbX3DfFnuxDhk.roa (raw, json)
Hash identifier:          G3/kUDIGfBOfo10jBZiH7VnHCFywynXkvKClxNGu0gY=
Subject key identifier:   BF:4A:BB:E2:71:55:52:49:51:1D:71:1B:5F:70:DF:16:7B:B1:0E:19
Certificate issuer:       /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial:       019B7EA4C66AADE8BD87F962205E7A5B4C36
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/v0q74nFVUklRHXEbX3DfFnuxDhk.roa
Signing time:             Fri 02 Jan 2026 12:18:06 +0000
ROA not before:           Fri 02 Jan 2026 12:18:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208711
IP address blocks:        185.92.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a4:c6:6a:ad:e8:bd:87:f9:62:20:5e:7a:5b:4c:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
        Validity
            Not Before: Jan  2 12:18:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bf4abbe271555249511d711b5f70df167bb10e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:57:09:0a:cd:b5:36:f4:51:36:1c:7d:62:c7:
                    47:0a:dc:63:10:2d:b5:10:cd:fa:f7:86:4f:75:ea:
                    b0:c6:28:3b:21:84:94:d1:8e:8c:be:41:70:9d:95:
                    6d:42:20:9c:d9:dc:c2:64:db:f8:62:44:87:33:8a:
                    00:20:6a:54:dd:61:34:1e:8d:9e:3a:2a:5e:83:d9:
                    cc:5a:f7:8f:c1:21:ba:92:e4:5a:d7:66:06:3a:b1:
                    5c:ba:38:c8:bd:59:44:0e:f5:39:71:06:4c:1c:bc:
                    3b:2e:a4:d8:99:f6:cc:72:05:a6:6a:04:b5:3f:78:
                    bd:d0:b0:c4:54:f7:19:2c:d9:47:a2:b0:ba:a7:c5:
                    ce:27:c7:09:df:46:35:3a:03:2d:b5:25:a5:97:3e:
                    ae:ac:d1:20:72:67:91:2e:6b:de:62:58:ff:51:5b:
                    51:a0:ad:e3:25:c2:a2:3f:13:b4:14:e3:2d:9b:85:
                    74:e0:1c:50:a4:9e:cb:ed:45:91:f5:16:45:b5:44:
                    10:c7:0f:f2:59:b8:ab:56:9a:77:7b:c0:bf:e6:60:
                    bd:2b:f7:43:fe:dc:5b:7e:e4:0e:01:4f:fb:c6:75:
                    62:45:21:fc:10:2e:d1:c3:ba:6a:7a:f0:3b:97:de:
                    62:14:fe:42:be:c2:ff:ab:ae:dc:1b:5a:13:cc:2b:
                    d8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4A:BB:E2:71:55:52:49:51:1D:71:1B:5F:70:DF:16:7B:B1:0E:19
            X509v3 Authority Key Identifier:
                keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/v0q74nFVUklRHXEbX3DfFnuxDhk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.92.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:07:91:f8:a7:90:31:82:69:41:00:b6:c5:cc:eb:02:71:25:
         a6:9f:11:33:48:d8:3c:73:a0:77:55:be:d4:c8:ea:50:21:e2:
         87:3d:a2:d0:ca:4d:a6:03:35:74:8f:f1:1c:3d:10:c5:cf:26:
         26:70:1f:4c:16:a1:66:fa:73:06:28:50:89:14:73:a7:b2:fc:
         12:97:3e:f8:4b:a3:c5:d7:84:e5:17:84:9e:b2:28:45:bd:a9:
         6d:17:0f:44:94:2a:10:71:cc:e1:9a:fc:02:6a:14:84:f4:d1:
         1d:e8:c4:29:3a:92:b8:9e:0f:eb:6b:81:56:72:64:07:6d:21:
         bd:d0:31:ec:dd:6d:b7:f5:cd:ef:b3:fe:eb:8b:26:ab:99:04:
         ac:49:01:87:ae:b9:28:8f:5a:c5:a1:25:91:6e:6e:8f:f1:20:
         68:36:d1:f2:eb:5e:aa:8b:90:4c:9e:c1:6c:97:64:d8:35:a3:
         02:f7:fc:0a:f2:58:4d:2d:db:17:74:e1:ff:e3:b4:02:e1:e2:
         59:c0:61:16:2f:a1:ed:35:00:49:16:60:e5:5f:dd:d6:d2:9e:
         8f:90:dd:88:d4:4c:5b:56:ed:5a:23:c9:44:5b:be:9e:64:3f:
         2b:24:9f:3a:c3:97:b4:9a:c4:1f:f6:c0:fb:cd:d7:28:9a:83:
         4e:35:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:20:13 2026 by rpki-client