This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/PVz9Gm7LN9Tq2KRu45Pc1f_DRPE.roa
File:                     PVz9Gm7LN9Tq2KRu45Pc1f_DRPE.roa (raw, json)
Hash identifier:          y/EG63/LytG5CYGQVcEyPm+sORWaKC+8bRgmNn1nOAI=
Subject key identifier:   3D:5C:FD:1A:6E:CB:37:D4:EA:D8:A4:6E:E3:93:DC:D5:FF:C3:44:F1
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       019BE76E1861D759AFA51B7D1B36548E6212
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/PVz9Gm7LN9Tq2KRu45Pc1f_DRPE.roa
Signing time:             Thu 22 Jan 2026 20:38:30 +0000
ROA not before:           Thu 22 Jan 2026 20:38:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44559
IP address blocks:        92.118.88.0/24 maxlen: 24
                          92.118.89.0/24 maxlen: 24
                          92.118.90.0/24 maxlen: 24
                          92.118.91.0/24 maxlen: 24
                          92.119.200.0/24 maxlen: 24
                          92.119.201.0/24 maxlen: 24
                          92.119.202.0/24 maxlen: 24
                          92.119.203.0/24 maxlen: 24
                          176.125.242.0/24 maxlen: 24
                          176.125.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e7:6e:18:61:d7:59:af:a5:1b:7d:1b:36:54:8e:62:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Jan 22 20:38:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3d5cfd1a6ecb37d4ead8a46ee393dcd5ffc344f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9e:9b:3c:72:02:f3:28:d5:51:ed:53:53:6f:
                    78:01:70:9b:dc:07:ba:ec:5d:d6:de:c5:c8:ad:58:
                    9a:c7:fa:a9:13:ef:c7:1a:04:e6:10:d0:9f:25:25:
                    13:f8:29:1b:0d:ee:86:9b:5c:07:30:50:75:25:1c:
                    4c:39:56:86:7a:60:7c:a3:e6:e3:e3:4d:3c:f1:cb:
                    56:89:ec:21:39:97:b6:ff:25:bc:6c:bb:24:8e:fc:
                    45:d9:a0:d5:34:dd:4f:0e:ef:aa:d1:15:85:83:e7:
                    61:1b:f7:45:35:98:30:2d:ba:61:36:5a:74:c2:ba:
                    e3:50:d6:5e:23:b5:39:f7:58:8d:51:cd:cf:a4:8f:
                    73:d0:81:88:97:23:ce:4c:25:3f:6b:b6:52:0e:44:
                    04:4e:a9:65:b8:b8:68:2b:72:2a:8b:8e:83:8d:2e:
                    17:f9:96:8e:13:74:6a:27:97:61:0e:db:d4:e9:49:
                    4b:16:13:42:b9:d2:e0:aa:45:58:66:97:1a:7d:cd:
                    58:e8:f4:4e:cc:3f:2d:aa:7e:40:41:6a:99:0e:81:
                    54:88:d3:46:83:dc:d7:4a:87:f2:9e:87:9d:4c:ec:
                    13:ad:b1:4a:71:02:3d:4a:40:66:06:47:34:57:8b:
                    01:2e:f8:ee:22:6a:bc:4d:c4:37:77:36:a0:a5:f9:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5C:FD:1A:6E:CB:37:D4:EA:D8:A4:6E:E3:93:DC:D5:FF:C3:44:F1
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/PVz9Gm7LN9Tq2KRu45Pc1f_DRPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.118.88.0/22
                  92.119.200.0/22
                  176.125.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:c5:e7:f0:2f:1c:1f:22:ef:23:eb:a4:76:e0:82:10:37:d9:
         e7:b2:bf:09:8a:d3:ba:b0:57:97:b4:0d:99:a9:5b:f6:13:11:
         91:8d:22:2b:4b:9b:03:a5:01:51:bc:51:e8:d4:59:62:ce:ab:
         0e:30:82:72:91:a4:c8:43:9e:fe:0c:63:6d:7a:03:cc:9f:cd:
         b2:d6:74:a7:c2:d6:a4:06:71:e3:f0:9e:69:0d:cc:79:c5:93:
         84:74:d2:22:fb:18:a1:7c:12:ba:4d:61:7a:d8:9a:e1:0e:02:
         12:ea:d0:3b:27:9f:dd:cc:b3:12:59:56:c3:93:e2:8d:d0:cf:
         51:4e:b2:2f:ce:d2:e6:bf:36:67:bf:1a:75:bf:3a:6c:1e:4d:
         ad:5c:70:c9:0f:04:ad:a8:a8:31:ea:e3:3b:13:a9:0b:8c:f6:
         02:2c:22:ff:de:5e:05:82:0d:bb:c8:e5:2a:ac:b9:14:af:ae:
         33:1a:ad:90:d4:e8:81:25:3d:97:83:e3:ec:af:da:6c:89:ac:
         4c:49:78:2d:70:01:43:d3:a7:73:91:c5:66:d9:be:91:cf:3c:
         6f:ce:78:db:3f:b2:f8:0c:d5:5d:80:95:87:65:01:7b:36:1a:
         77:87:c8:07:22:1b:34:ac:50:88:b9:03:7e:a0:59:5d:eb:f0:
         ea:7a:6d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:40:31 2026 by rpki-client