This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/dCl0q4_GuogKF8XrFPMUNq696G8.roa
File:                     dCl0q4_GuogKF8XrFPMUNq696G8.roa (raw, json)
Hash identifier:          hFHFWlVTeWBAVwx1gQtse8jDVZwunN7tx8D56G5e0Is=
Subject key identifier:   74:29:74:AB:8F:C6:BA:88:0A:17:C5:EB:14:F3:14:36:AE:BD:E8:6F
Certificate issuer:       /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial:       019B7F15B03EC9DCF994D006875F829D5268
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/dCl0q4_GuogKF8XrFPMUNq696G8.roa
Signing time:             Fri 02 Jan 2026 14:21:26 +0000
ROA not before:           Fri 02 Jan 2026 14:21:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201628
IP address blocks:        185.68.180.0/23 maxlen: 23
                          185.68.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:b0:3e:c9:dc:f9:94:d0:06:87:5f:82:9d:52:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
        Validity
            Not Before: Jan  2 14:21:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=742974ab8fc6ba880a17c5eb14f31436aebde86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:91:b9:8a:da:d9:3b:50:31:6b:40:b4:14:
                    c8:a1:04:a0:10:e5:0e:64:4d:2a:5a:7d:7e:aa:b4:
                    16:ae:12:94:a9:ac:bf:c8:87:93:6e:7b:56:d8:46:
                    c8:59:bd:f1:42:6e:23:28:74:bc:8c:12:78:fa:21:
                    34:46:9f:22:20:6e:03:b6:3c:78:8f:35:e1:64:15:
                    4a:42:ea:9e:4c:cc:2d:12:ff:40:2d:dc:f9:b7:42:
                    df:7d:26:11:54:11:f0:de:76:2e:09:b1:13:c6:81:
                    58:02:aa:d1:f1:0b:4c:49:7b:88:7b:b6:88:aa:b2:
                    fc:06:c8:db:63:91:91:6a:44:ae:40:79:b3:da:c1:
                    1c:5d:bf:28:d2:0a:2f:11:09:b1:eb:c9:81:37:af:
                    90:67:1c:cb:1c:5e:47:0f:2a:31:00:75:d9:2d:93:
                    d1:04:0d:a7:83:ed:b2:10:63:ab:6d:e3:45:a8:42:
                    2e:25:c6:a3:81:aa:33:64:6c:13:14:94:8e:78:af:
                    03:1f:aa:92:e0:0d:e4:c9:7b:1e:15:91:37:e0:ff:
                    fe:ce:9c:51:67:b4:b8:6d:06:b2:28:e0:eb:32:12:
                    79:cb:88:e6:bd:db:87:cc:d8:5b:f9:3e:da:6c:05:
                    92:81:b1:5d:18:49:f1:0f:04:b3:b3:80:aa:cd:7b:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:29:74:AB:8F:C6:BA:88:0A:17:C5:EB:14:F3:14:36:AE:BD:E8:6F
            X509v3 Authority Key Identifier:
                keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/dCl0q4_GuogKF8XrFPMUNq696G8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.68.180.0/23
                  185.68.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:99:5f:ad:31:6c:42:56:d6:48:7c:9e:81:70:1b:6d:00:e8:
         a7:e8:7b:4a:a9:d4:67:d0:f0:86:2d:a9:02:4e:ae:d1:7e:ac:
         82:5a:aa:a3:c0:1d:2f:8b:4b:84:ca:cc:96:a9:eb:c9:de:1d:
         82:97:0c:01:7c:04:ce:2f:92:b8:68:06:01:3e:e7:c8:b4:d4:
         c6:39:49:af:89:3f:6e:3d:a7:85:1a:0e:88:20:a9:e9:0c:0d:
         96:5d:b2:e7:dc:f0:56:f6:fa:c3:4c:15:50:44:be:f1:3f:ec:
         36:44:af:33:3f:5e:66:90:bc:e3:8f:76:f4:d6:5b:3f:a4:01:
         bb:0d:6e:bf:c3:39:b6:a8:46:1a:f0:e6:7d:48:69:6a:ee:6e:
         2e:31:64:2a:f5:ad:ee:64:1c:e1:32:b7:23:8a:3c:a8:9d:a3:
         7e:60:c8:59:0b:d5:16:06:cf:90:5c:1b:2a:a3:8a:1b:f7:43:
         ea:1b:ad:cb:f0:be:db:bc:1b:1b:4d:c5:ee:d5:de:3c:df:03:
         cc:0f:31:88:18:ab:b1:0b:a9:79:bf:a9:de:10:2c:7b:13:b1:
         97:3a:96:0c:18:56:37:9e:cc:b6:8a:1b:67:d6:c6:c7:62:a2:
         21:0b:81:1c:ad:fb:50:6d:66:98:c5:b9:18:d1:ec:7b:8a:50:
         89:a3:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:22:07 2026 by rpki-client