This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DAWT2600AMwp5cRm_Tf9cD5p40M.roa
File:                     DAWT2600AMwp5cRm_Tf9cD5p40M.roa (raw, json)
Hash identifier:          OUeIumtcMoTzxUqtZeY7N0SmM5m0U4icaPmgjEtR5y4=
Subject key identifier:   0C:05:93:DB:AD:34:00:CC:29:E5:C4:66:FD:37:FD:70:3E:69:E3:43
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F84E873811BDDEA9098F6CF0261145B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DAWT2600AMwp5cRm_Tf9cD5p40M.roa
Signing time:             Fri 02 Jan 2026 16:22:55 +0000
ROA not before:           Fri 02 Jan 2026 16:22:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62447
IP address blocks:        93.170.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:84:e8:73:81:1b:dd:ea:90:98:f6:cf:02:61:14:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:22:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0c0593dbad3400cc29e5c466fd37fd703e69e343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0e:9d:d4:bd:5a:64:c2:a3:0b:df:d4:a6:1d:
                    71:48:d8:48:fd:a3:40:ca:e9:06:f2:fb:f2:0e:2a:
                    38:a1:34:d8:c6:a1:66:2c:5e:cd:60:f7:4f:46:0c:
                    45:64:e4:1d:3d:f0:61:04:38:b6:9a:09:1d:37:a4:
                    c9:8c:d7:1d:10:51:2b:3b:74:03:4d:0b:19:b8:25:
                    d8:bf:e3:83:c8:f5:3e:ab:bf:87:74:dd:6f:40:b1:
                    af:9b:22:48:d2:52:65:c2:01:b9:51:4f:f0:30:c2:
                    f0:da:8b:28:b3:d1:4f:5a:56:d6:30:b4:da:13:7c:
                    e7:c3:b8:b7:8f:f9:87:62:e2:a4:67:cf:70:b6:d1:
                    9c:43:97:cb:93:62:9a:7f:f1:49:d6:a5:a6:7a:64:
                    74:96:8b:30:49:7a:39:0f:4a:97:2f:ea:a7:bb:10:
                    13:bb:bf:97:03:d5:8c:40:66:33:cb:78:aa:a8:8b:
                    2d:f8:42:f6:5f:da:02:73:37:72:3b:b7:59:e4:a0:
                    c8:d7:ae:74:d8:ed:fc:1a:86:bb:ad:e3:46:f9:aa:
                    93:9b:9d:4e:47:8e:92:57:e9:1e:73:82:50:91:29:
                    34:45:f4:7c:b5:5c:8c:1d:c2:0e:ca:6d:58:c2:04:
                    ec:e3:9d:cb:95:ed:28:9e:bd:b5:26:1f:08:2f:fe:
                    61:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:05:93:DB:AD:34:00:CC:29:E5:C4:66:FD:37:FD:70:3E:69:E3:43
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DAWT2600AMwp5cRm_Tf9cD5p40M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:04:3a:53:71:7a:87:92:2d:61:2d:4c:3e:c6:5f:12:07:d1:
         7a:89:90:17:97:26:22:4c:89:65:37:6f:1f:fc:e4:af:e0:67:
         33:12:f0:de:bd:df:49:54:e9:04:56:fd:ce:f8:21:77:4a:7b:
         c2:2e:61:d0:09:5f:0a:92:d7:a1:9f:c4:bf:b7:ae:66:e4:df:
         37:95:75:08:4f:bc:07:3b:47:89:82:c2:00:ac:3c:ba:dd:fb:
         02:0d:9e:be:51:0e:6e:58:1e:6c:d2:42:73:1a:fb:4f:b5:8c:
         44:33:3f:3a:5f:e8:e7:89:3b:fb:1e:44:3c:db:40:9d:ab:62:
         2a:30:a6:34:04:24:96:ce:f0:09:23:d4:00:61:02:14:3a:af:
         20:d5:dd:48:9a:2e:30:08:91:82:07:5d:61:b7:a7:fe:4f:b6:
         dd:6a:07:23:97:72:d0:8d:73:5c:f0:c6:60:9c:5a:e4:46:97:
         4e:0c:e7:55:46:88:6f:35:65:d3:2d:7c:f9:80:07:19:d0:3b:
         79:e4:ab:c8:2d:d6:77:8b:eb:c6:8f:41:f8:7d:30:81:d2:61:
         52:24:1a:6f:fd:2d:5f:64:0e:5a:62:e6:50:c9:5c:0b:5e:18:
         3d:0c:4b:c2:2d:73:98:4a:33:87:a0:15:7f:bf:b3:2b:ad:bb:
         42:f0:e5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:18:29 2026 by rpki-client