This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/Dv0Vw0VROLNm1BcBtDyYsL1OWew.roa
File:                     Dv0Vw0VROLNm1BcBtDyYsL1OWew.roa (raw, json)
Hash identifier:          01fMcqnBkdQNXIGFfqpx1E0l1qguhB0pAhcOj3jJeNI=
Subject key identifier:   0E:FD:15:C3:45:51:38:B3:66:D4:17:01:B4:3C:98:B0:BD:4E:59:EC
Certificate issuer:       /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
Certificate serial:       019B7C800FDD4E526AE82E19F8F2BDD1BABC
Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/Dv0Vw0VROLNm1BcBtDyYsL1OWew.roa
Signing time:             Fri 02 Jan 2026 02:18:46 +0000
ROA not before:           Fri 02 Jan 2026 02:18:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     18178
IP address blocks:        2a13:2200::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:0f:dd:4e:52:6a:e8:2e:19:f8:f2:bd:d1:ba:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606
        Validity
            Not Before: Jan  2 02:18:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0efd15c3455138b366d41701b43c98b0bd4e59ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:33:38:6c:85:ec:9e:9f:4b:6e:08:e7:bd:
                    d2:13:6f:c7:de:f3:20:d8:c1:c6:58:49:76:71:68:
                    30:8e:b4:78:c5:3f:85:6d:06:f0:1d:2f:ae:c0:a8:
                    1c:dc:39:1a:5e:63:3e:f5:6e:5d:50:d3:2f:40:15:
                    f8:e5:7a:c3:90:20:a6:a4:c0:bd:ea:0f:66:cb:b0:
                    52:cf:af:f6:16:1d:49:13:38:31:55:82:49:54:a5:
                    45:2e:29:7a:62:41:e1:91:23:3a:c3:d5:c3:70:32:
                    3a:19:5c:13:e9:10:f8:f6:e1:48:58:82:4d:9f:19:
                    a4:3f:f5:be:67:d7:00:42:5e:d9:fc:18:d1:4b:52:
                    05:d1:ab:90:76:68:ae:52:ab:ac:ab:59:77:82:63:
                    26:00:b6:2d:d9:97:d0:26:89:1e:8d:77:72:7f:d7:
                    65:6a:ef:83:e2:17:f8:b1:df:51:8e:d4:de:de:d6:
                    f6:14:39:85:cc:39:de:1c:27:21:10:30:1d:f7:0c:
                    78:b7:54:18:90:95:56:62:23:65:39:91:df:0e:38:
                    61:0b:4c:91:18:b7:c8:aa:fc:3c:e4:8d:bc:cd:42:
                    b9:76:fb:8b:01:23:61:91:56:fe:2f:46:29:fe:9d:
                    97:ba:d7:be:af:06:a2:ed:ac:b4:ce:01:0c:a5:77:
                    f1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FD:15:C3:45:51:38:B3:66:D4:17:01:B4:3C:98:B0:BD:4E:59:EC
            X509v3 Authority Key Identifier:
                keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/Dv0Vw0VROLNm1BcBtDyYsL1OWew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:2200::/47

    Signature Algorithm: sha256WithRSAEncryption
         5b:05:8d:f8:5a:8f:d1:55:e2:9f:99:98:3c:58:55:e8:87:34:
         ef:9f:d5:e7:72:c1:ed:fb:e8:27:c0:6b:ba:4a:c1:27:6f:07:
         df:af:8b:3c:e2:35:ec:56:a9:7e:3c:0e:1f:71:2c:e3:22:86:
         20:16:ea:e3:17:64:f0:6c:53:65:15:57:ee:57:50:01:0b:b1:
         4c:3a:21:bb:1a:b0:f8:08:6a:88:d2:9b:81:bd:c2:e1:9b:9d:
         6c:77:ae:b5:aa:b4:a0:0c:65:b5:e7:5f:ca:7f:fd:6c:81:be:
         b8:50:53:6c:38:8f:99:54:c3:11:aa:3c:d1:a8:64:d2:5d:e4:
         3b:6e:72:ac:f5:b8:95:cb:e0:f9:d9:e0:eb:2e:10:62:54:92:
         7c:93:49:ae:08:af:ec:b0:da:36:ed:13:f7:87:e9:2e:68:6d:
         34:5d:c8:35:92:af:91:cb:6b:3e:0d:b9:81:23:1f:a4:e1:a5:
         51:59:b2:c4:b8:81:5a:b2:8b:e5:bc:23:e6:1e:91:5f:31:a9:
         c5:f2:73:7b:56:56:99:e0:5d:21:23:13:49:1c:b4:8d:3c:bd:
         80:91:d2:26:0a:0c:b8:4f:2b:32:b3:ff:df:b3:55:6e:ba:5f:
         d4:93:3c:8a:b4:5c:5e:5c:4a:d9:ad:11:a4:42:e3:a7:fb:63:
         36:08:30:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:28 2026 by rpki-client