This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/DaNzl7w617W61WMkK2mhl8jN5wU.roa
File:                     DaNzl7w617W61WMkK2mhl8jN5wU.roa (raw, json)
Hash identifier:          KfPIGqY3EVhRc2Ytnf57ChmISLtMr8fTABQiZHidkaM=
Subject key identifier:   0D:A3:73:97:BC:3A:D7:B5:BA:D5:63:24:2B:69:A1:97:C8:CD:E7:05
Certificate issuer:       /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial:       019B78A23D4087B30FA814FAC95B1D94D8A7
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/DaNzl7w617W61WMkK2mhl8jN5wU.roa
Signing time:             Thu 01 Jan 2026 08:17:37 +0000
ROA not before:           Thu 01 Jan 2026 08:17:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39100
IP address blocks:        195.60.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:3d:40:87:b3:0f:a8:14:fa:c9:5b:1d:94:d8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
        Validity
            Not Before: Jan  1 08:17:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0da37397bc3ad7b5bad563242b69a197c8cde705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1b:f6:24:8f:60:a4:aa:da:fb:7e:6c:87:28:
                    43:f2:4b:21:6f:cb:7c:8e:96:37:c7:90:93:c6:24:
                    ea:bd:8b:38:3e:25:6a:e7:9e:c3:c6:76:a5:d4:de:
                    b6:e8:a6:71:66:51:32:ec:e7:a1:36:14:6d:12:c8:
                    c3:62:25:2d:6f:5f:26:31:24:71:cc:74:f2:cb:e2:
                    86:b9:af:a9:3a:d2:2a:4b:72:5b:a9:a7:49:bd:a7:
                    7d:5d:99:8f:7f:90:80:38:56:a6:ad:5d:62:12:65:
                    55:be:cc:bf:be:8a:dc:dc:d9:ab:1f:4b:8e:5c:ba:
                    94:eb:77:01:b1:84:5b:25:66:77:12:5e:3f:43:a5:
                    21:b0:94:5d:6d:34:a0:91:2b:56:f8:ac:e9:9c:3e:
                    07:50:a2:d5:92:6c:4f:27:c7:2c:eb:80:02:c2:94:
                    ff:af:92:99:81:7d:dc:4a:02:7c:0c:9d:ca:72:12:
                    a0:d6:3a:93:21:2a:89:14:65:e9:f0:5a:4f:90:f4:
                    98:e9:95:ed:7d:19:ba:75:3d:84:5b:0f:50:1a:89:
                    6a:de:67:e2:85:19:fc:d0:c5:1b:a9:fa:a2:d8:c9:
                    0b:82:4b:87:15:47:77:b1:85:c6:e1:12:ac:5b:5d:
                    ea:da:08:30:c9:44:03:43:cb:85:b8:12:b5:32:e6:
                    4a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A3:73:97:BC:3A:D7:B5:BA:D5:63:24:2B:69:A1:97:C8:CD:E7:05
            X509v3 Authority Key Identifier:
                keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/DaNzl7w617W61WMkK2mhl8jN5wU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.60.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:43:7a:41:13:66:ac:80:18:4e:7f:b4:5c:1a:70:4b:92:48:
         00:54:4e:f2:5c:e2:1e:b2:1f:f4:9e:76:ff:9e:13:25:d2:f4:
         e5:1d:a2:97:1b:bd:8e:ab:68:73:c0:29:b7:fe:76:c9:47:65:
         dc:ec:c7:e3:45:83:d8:da:d1:43:5e:a2:6a:26:af:42:1b:a8:
         a0:eb:dc:93:b7:c7:b2:7c:ea:53:37:90:be:79:1c:c5:f9:bc:
         f9:0f:fc:32:da:74:09:b1:c7:3d:9f:0b:c2:89:09:7e:43:ac:
         ad:d5:59:20:ce:6e:5f:be:4f:1e:e3:3c:fe:03:fb:0e:2f:e3:
         1b:6c:ae:8a:b8:7d:06:f1:cc:b3:e9:ff:57:c4:d2:43:75:2f:
         5a:1a:92:81:96:6c:a2:c0:18:a9:af:51:70:37:9e:49:e2:21:
         0e:0c:c0:03:e5:12:76:e7:a1:d4:62:62:8a:3e:97:cb:0f:dd:
         4f:a8:9b:49:7a:c5:c2:93:83:f4:66:63:07:f3:b2:2b:7d:de:
         62:6a:19:f8:54:f7:85:dc:53:42:c9:eb:c5:91:82:e7:cb:1d:
         29:4c:87:e1:88:29:d4:b5:ca:4b:f5:4b:fe:dd:3e:ba:7f:00:
         3d:d0:8f:d4:1c:4a:82:22:91:ef:3a:0a:12:06:0c:92:fa:7e:
         eb:74:96:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:15:58 2026 by rpki-client