This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/DJfBihRZbwpaAq2gb2LeUWFIQ5Y.roa
File:                     DJfBihRZbwpaAq2gb2LeUWFIQ5Y.roa (raw, json)
Hash identifier:          RXC2yOPV+Krqbr5/AaPtswnl9yPSpZbJSRhTazJ2Q+E=
Subject key identifier:   0C:97:C1:8A:14:59:6F:0A:5A:02:AD:A0:6F:62:DE:51:61:48:43:96
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B7758F1686D0341065C0D4F0030482726
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/DJfBihRZbwpaAq2gb2LeUWFIQ5Y.roa
Signing time:             Thu 01 Jan 2026 02:17:56 +0000
ROA not before:           Thu 01 Jan 2026 02:17:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     33895
IP address blocks:        178.16.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:f1:68:6d:03:41:06:5c:0d:4f:00:30:48:27:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:17:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0c97c18a14596f0a5a02ada06f62de5161484396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:68:2e:16:98:7c:b6:4a:2b:6f:d9:42:91:
                    49:28:0d:df:a5:36:1b:bb:40:89:b7:13:d9:b9:81:
                    e6:5d:c5:0a:d1:f1:6d:8c:c4:5b:c9:9e:5d:69:1c:
                    48:70:a1:28:57:8d:38:c6:b8:d9:2e:dd:ce:fb:3b:
                    69:21:73:4f:98:81:1e:1b:8c:b4:ba:27:0d:ae:ec:
                    a9:ce:3f:d8:12:3e:63:af:be:b7:e7:bc:18:4e:26:
                    a8:e8:f4:15:9a:24:6c:89:d4:e4:96:cb:b8:53:10:
                    33:ef:90:87:42:8e:2c:72:65:eb:d8:da:87:5a:58:
                    b8:83:aa:7a:60:6a:e2:59:9a:4b:cf:52:bb:ac:0a:
                    de:66:4f:f4:3c:9a:9a:39:1d:02:4d:0a:85:e5:83:
                    f9:c3:f0:d7:11:10:83:e0:4d:4f:23:0f:78:9d:92:
                    51:49:8f:67:ca:b1:b1:95:70:77:8d:26:49:97:8c:
                    38:d5:86:e0:c1:19:e4:f4:d1:13:3c:83:99:e6:a9:
                    f1:29:03:97:38:ce:01:49:1f:ce:12:e7:b9:a6:e9:
                    23:59:1d:94:c9:56:43:aa:f2:9c:64:df:db:d2:31:
                    8f:b6:0d:30:aa:8f:c5:1b:76:a4:dd:34:51:c7:c0:
                    81:b5:bb:95:ef:c0:f7:66:b9:7d:38:88:7d:e6:23:
                    d2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:97:C1:8A:14:59:6F:0A:5A:02:AD:A0:6F:62:DE:51:61:48:43:96
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/DJfBihRZbwpaAq2gb2LeUWFIQ5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.16.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:00:1f:29:2b:df:a7:72:6d:f6:1e:88:cc:eb:7e:ed:bd:3b:
         5f:75:74:99:1e:d1:16:f4:36:96:9e:8c:98:1e:fa:01:02:75:
         0f:e8:b3:5a:32:4c:01:50:65:c1:8c:14:de:80:48:ae:93:f3:
         c9:ea:c3:99:9c:5c:d5:2a:4f:f9:7b:e0:05:05:0b:97:53:b7:
         56:a9:2e:39:a6:84:cd:84:a7:30:48:f5:cc:14:61:42:dc:cf:
         94:88:0c:71:f5:c7:f5:5c:8c:ba:4d:00:26:b3:22:a1:8e:19:
         27:2e:76:0d:42:77:2f:34:a4:b4:23:94:9f:71:37:aa:72:2e:
         b9:4d:d2:e4:64:38:70:a2:cb:44:9b:04:61:fd:72:68:75:0e:
         e2:6e:fc:a4:c6:42:d7:92:b1:73:27:b3:9b:96:fd:a7:8b:88:
         e2:9c:bc:84:00:81:d8:3d:a4:b3:bd:a9:0a:3c:bd:b2:56:fd:
         32:83:9f:96:57:68:cb:c7:09:76:a5:fb:07:9d:f9:99:47:fc:
         51:41:18:e1:bd:e2:f0:1a:0f:5a:81:94:e5:c6:8c:44:d2:4a:
         af:67:be:03:7f:75:34:f2:d4:cf:75:ef:a0:a5:46:88:dd:4f:
         96:f0:77:69:58:2c:4d:96:c7:bc:e5:9a:35:29:9e:4c:a8:db:
         0b:ef:71:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:31:23 2026 by rpki-client