This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/TSModa-LABny3OYpVDVxvacd8aI.roa
File:                     TSModa-LABny3OYpVDVxvacd8aI.roa (raw, json)
Hash identifier:          hIqc5amM31Tv3k4RRh8nzbd5nZLZypZmgW9WNaeRtgs=
Subject key identifier:   4D:23:28:75:AF:8B:00:19:F2:DC:E6:29:54:35:71:BD:A7:1D:F1:A2
Certificate issuer:       /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial:       019B7AC8C3DF70BD53E73947344A552C38C4
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/TSModa-LABny3OYpVDVxvacd8aI.roa
Signing time:             Thu 01 Jan 2026 18:18:56 +0000
ROA not before:           Thu 01 Jan 2026 18:18:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     24634
IP address blocks:        185.44.152.0/22 maxlen: 24
                          2a04:9cc0::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:c3:df:70:bd:53:e7:39:47:34:4a:55:2c:38:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
        Validity
            Not Before: Jan  1 18:18:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4d232875af8b0019f2dce629543571bda71df1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:10:83:8a:ba:97:24:25:52:a1:64:cc:a5:43:
                    fe:6d:67:19:d8:f6:6c:89:12:f7:a3:8c:dc:30:63:
                    31:1e:5c:cb:92:c4:f0:e9:14:38:fa:75:ac:61:5d:
                    7e:a8:ac:1f:93:27:fa:87:ba:2c:a2:fb:7d:d8:b3:
                    00:a3:84:df:db:0b:14:cc:a0:c0:3f:00:1a:a3:64:
                    3f:5a:27:43:5a:07:9e:23:ea:7e:e2:9c:4b:0a:96:
                    7f:07:41:8a:d6:f6:9a:01:aa:b6:32:b2:43:c7:35:
                    fb:5b:ce:cf:2b:c9:ac:bd:64:90:f9:dc:52:78:e4:
                    4b:eb:3f:39:8c:63:18:39:f3:69:42:a2:b1:10:42:
                    81:57:87:69:18:fe:78:7f:ec:b7:c7:6c:7b:27:aa:
                    13:d8:ff:f8:44:fc:bd:67:ce:df:9e:10:55:9c:7d:
                    b2:11:44:32:70:1f:67:d6:cd:99:31:97:21:b0:36:
                    bb:3c:8f:30:b5:e3:48:b9:b1:26:3a:bb:ef:af:79:
                    1c:fd:7c:36:9b:a6:e9:6a:a3:b7:79:03:28:56:1f:
                    78:79:24:a0:a9:2a:2c:50:5b:a5:1d:a1:ad:c0:c6:
                    e3:c3:87:b1:00:c8:c7:9a:0e:81:21:61:76:36:e4:
                    da:3a:ee:3c:7c:7d:05:ec:fb:a3:fe:47:6c:63:dd:
                    af:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:23:28:75:AF:8B:00:19:F2:DC:E6:29:54:35:71:BD:A7:1D:F1:A2
            X509v3 Authority Key Identifier:
                keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/TSModa-LABny3OYpVDVxvacd8aI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.152.0/22
                IPv6:
                  2a04:9cc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         62:23:13:8a:19:0a:26:fa:b4:a4:81:cc:37:76:ef:36:92:b2:
         90:af:ae:19:f6:0b:1f:42:0b:bf:b3:b1:92:11:63:20:f6:9b:
         a5:f8:7d:df:64:02:2d:c3:16:ac:71:a3:10:af:d2:62:d5:d0:
         3d:e6:29:8b:5d:1b:ce:98:48:88:0c:68:54:d8:81:24:ff:a1:
         68:ae:91:bc:8a:e2:9c:49:6b:8f:64:0e:47:90:1c:87:0b:83:
         95:92:57:4d:09:73:a4:9a:f9:ab:92:41:26:5e:b9:b3:de:cc:
         d4:d1:c3:db:f0:53:cf:3b:a5:77:16:06:6f:16:11:11:a4:48:
         b2:be:a2:76:60:52:8a:01:13:47:91:4f:30:6e:bd:b1:6b:ca:
         07:4c:49:ae:83:5d:84:91:1b:ad:6a:9c:37:e4:0d:3e:90:54:
         a9:ad:d8:22:8e:92:ba:26:33:7c:1d:61:6b:f4:02:23:eb:fc:
         0b:54:11:22:d1:c3:f0:7c:0d:07:94:5c:6d:94:cc:56:7b:a0:
         c8:cf:a3:af:65:6b:cb:cd:a4:ba:d9:83:20:50:3d:2e:94:b4:
         75:e7:dc:9c:e2:74:7d:d2:ef:88:11:ea:d4:df:85:a2:db:a1:
         58:7b:3e:47:2b:b9:94:d1:71:45:27:ee:56:00:6c:db:75:6f:
         bb:6b:52:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:50:18 2026 by rpki-client