This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/1dPG2pffi4K4-5OsBGPNtLYur7s.roa
File:                     1dPG2pffi4K4-5OsBGPNtLYur7s.roa (raw, json)
Hash identifier:          9Fs/6pdtkOi4l1U0P5hZKI0rV4tLgfeKeJ0JtT1xy1k=
Subject key identifier:   D5:D3:C6:DA:97:DF:8B:82:B8:FB:93:AC:04:63:CD:B4:B6:2E:AF:BB
Certificate issuer:       /CN=192fc85b01f21a0d685c03001df47ac460937bf1
Certificate serial:       019AC0D3796F2710C7FE61EFF204A7A3C94F
Authority key identifier: 19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/1dPG2pffi4K4-5OsBGPNtLYur7s.roa
Signing time:             Wed 26 Nov 2025 15:41:15 +0000
ROA not before:           Wed 26 Nov 2025 15:41:15 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     207431
IP address blocks:        185.190.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:c0:d3:79:6f:27:10:c7:fe:61:ef:f2:04:a7:a3:c9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192fc85b01f21a0d685c03001df47ac460937bf1
        Validity
            Not Before: Nov 26 15:41:15 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d5d3c6da97df8b82b8fb93ac0463cdb4b62eafbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:78:3a:a1:ca:37:f4:30:1f:16:8c:7b:82:99:
                    93:50:87:a8:f9:3c:1b:5c:ca:7e:30:6f:b7:73:39:
                    ad:07:13:f5:f5:91:25:6e:28:9f:22:7b:6d:6b:f6:
                    2b:b9:1a:ae:6f:29:f1:64:c6:f4:04:73:d3:0f:74:
                    0d:17:cc:bc:de:87:47:37:23:5f:f4:52:9a:97:23:
                    76:15:ec:f1:74:71:04:af:aa:31:03:b7:1e:6f:fd:
                    3c:d7:4e:cc:40:63:12:d1:8d:b0:66:8f:4a:63:72:
                    24:32:89:ac:1f:8f:f2:39:6f:84:cf:4b:a7:c6:12:
                    6c:d3:9e:64:10:fc:17:c0:19:65:f6:47:93:76:03:
                    71:91:8d:84:32:86:fc:42:41:b3:62:6b:40:ec:77:
                    47:09:f9:22:cc:67:80:e8:57:7b:48:0e:9a:da:6d:
                    dc:ef:bd:f3:db:42:60:ce:6b:c6:a7:fe:67:22:57:
                    09:a2:31:f5:fe:3b:dd:05:3e:3b:5d:c9:45:e5:43:
                    5f:10:08:59:8c:ac:5e:1d:49:f7:fd:1f:62:61:5a:
                    6a:88:44:84:91:84:36:60:3b:f6:d4:80:4a:d2:15:
                    ca:24:f0:c7:bc:4f:4a:9e:57:2f:6a:f0:81:7f:35:
                    cf:c7:44:ba:d2:1d:46:1a:1d:25:d1:35:1e:0e:32:
                    4a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D3:C6:DA:97:DF:8B:82:B8:FB:93:AC:04:63:CD:B4:B6:2E:AF:BB
            X509v3 Authority Key Identifier:
                keyid:19:2F:C8:5B:01:F2:1A:0D:68:5C:03:00:1D:F4:7A:C4:60:93:7B:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GS_IWwHyGg1oXAMAHfR6xGCTe_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/1dPG2pffi4K4-5OsBGPNtLYur7s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/182915-feec-4160-88bf-b210447c07ff/1/GS_IWwHyGg1oXAMAHfR6xGCTe_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:3b:7e:c1:ec:d4:99:0f:8e:d9:d3:a1:52:48:a9:69:52:ea:
         1f:fc:3d:d0:3b:11:b9:df:cf:4b:9d:0c:8c:6d:e1:4c:02:f7:
         35:8b:2f:87:11:b4:9d:88:c4:66:bb:48:ee:18:7b:56:1f:e2:
         79:f9:69:ff:28:5e:8a:90:92:30:de:5d:55:56:fd:2b:2b:fd:
         99:b0:53:f1:f7:16:b1:43:5b:4b:e4:a8:65:30:aa:ce:0f:84:
         ba:f7:d3:f4:49:8d:f0:b6:9e:7e:d7:73:6a:d2:19:83:5e:2a:
         32:13:c0:99:8e:35:85:bc:03:41:18:43:4e:c4:35:e1:1f:a7:
         88:aa:e3:ea:23:11:db:a5:76:a3:9b:89:9e:57:3d:2d:00:ed:
         0f:da:4e:23:8a:40:15:17:f3:e0:aa:bc:85:48:00:52:be:47:
         f0:38:db:e9:d4:f5:2d:f6:5d:8a:ae:f6:2a:a4:4a:b0:f4:b0:
         cd:10:ee:8a:0e:10:fc:05:f4:21:cd:60:32:5b:c2:f0:a1:3d:
         61:c1:63:1d:f4:42:ea:1d:42:4b:4c:74:60:a0:8c:fe:08:86:
         98:0f:43:2b:01:51:98:31:0d:b9:29:e4:d0:1c:aa:50:57:bb:
         56:84:79:f4:b0:93:f0:33:b5:1d:e0:e4:f7:04:5d:10:82:f0:
         03:b3:6b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:05:31 2025 by rpki-client