This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/CCDVDQ2Oruym1KjDDrngcHA3Mew.roa
File:                     CCDVDQ2Oruym1KjDDrngcHA3Mew.roa (raw, json)
Hash identifier:          chiL5mGQkOXPpO7ivyw1/1nTMgncbyhd+zfPcNA0gXQ=
Subject key identifier:   08:20:D5:0D:0D:8E:AE:EC:A6:D4:A8:C3:0E:B9:E0:70:70:37:31:EC
Certificate issuer:       /CN=13fe9bcebae228b36c883c27ea5518e704c10991
Certificate serial:       019B7A5AAB6E19A78007B6C0DA188A7FCC99
Authority key identifier: 13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/CCDVDQ2Oruym1KjDDrngcHA3Mew.roa
Signing time:             Thu 01 Jan 2026 16:18:40 +0000
ROA not before:           Thu 01 Jan 2026 16:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     215540
IP address blocks:        185.42.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5a:ab:6e:19:a7:80:07:b6:c0:da:18:8a:7f:cc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fe9bcebae228b36c883c27ea5518e704c10991
        Validity
            Not Before: Jan  1 16:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0820d50d0d8eaeeca6d4a8c30eb9e070703731ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7c:08:cf:ab:51:82:51:9a:78:eb:eb:6d:53:
                    32:3b:df:93:ed:62:b3:c6:3f:75:e7:87:8d:c0:80:
                    f8:cd:32:6d:da:53:10:d8:76:cd:40:45:27:04:dd:
                    a2:fa:97:3f:70:5a:4b:dd:0a:e7:c3:cb:21:84:f8:
                    00:48:3e:ce:0b:0e:cd:17:04:e1:2b:7c:71:b2:de:
                    bd:ec:d1:c9:ad:98:58:2d:ad:fa:0c:35:7e:92:ba:
                    51:e5:be:97:13:c8:d6:88:d0:03:39:2f:96:a8:a5:
                    8b:15:49:f8:a8:1f:b7:36:6a:9e:82:23:ec:29:cb:
                    b4:39:d1:23:1f:89:5a:05:40:05:a7:0e:97:bc:25:
                    35:2b:1c:3d:e3:ce:2e:09:b9:03:2d:50:2c:37:d7:
                    7e:ff:3c:74:e0:56:28:21:8b:08:a6:06:62:14:cd:
                    db:f5:1e:bb:6c:98:ab:e3:46:6c:5f:aa:7e:77:df:
                    cd:6d:e9:a3:fc:a4:cc:1a:7a:53:89:85:ef:ab:f3:
                    45:b2:73:07:f0:60:fb:8a:f9:0e:c9:48:6c:66:30:
                    59:ba:60:77:23:69:87:0e:ef:ae:3f:b9:de:08:37:
                    60:a4:6c:37:aa:f7:4e:ec:70:df:ee:6e:b1:f1:e1:
                    dd:ca:c1:3c:02:cf:b7:88:a2:59:77:66:7e:14:a5:
                    d9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:20:D5:0D:0D:8E:AE:EC:A6:D4:A8:C3:0E:B9:E0:70:70:37:31:EC
            X509v3 Authority Key Identifier:
                keyid:13:FE:9B:CE:BA:E2:28:B3:6C:88:3C:27:EA:55:18:E7:04:C1:09:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_6bzrriKLNsiDwn6lUY5wTBCZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/CCDVDQ2Oruym1KjDDrngcHA3Mew.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/50a7da-162b-4bde-b0c4-5e2d6070ef83/1/E_6bzrriKLNsiDwn6lUY5wTBCZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.42.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:1c:95:18:78:09:a4:b2:5b:ed:76:b8:d7:c9:78:fd:19:
         9f:36:98:24:20:86:78:e0:73:01:e7:19:4f:46:fd:42:2a:50:
         0c:a0:a5:52:ad:aa:70:8b:51:73:92:ac:85:ab:50:92:7b:74:
         22:72:79:0f:7c:0e:72:7d:a1:fb:f2:21:2b:fb:55:eb:c2:97:
         d6:af:47:39:b1:7f:8a:3b:51:a6:f1:92:92:62:76:c9:24:d6:
         ab:f4:7a:51:c5:48:26:7f:4b:06:18:02:b6:b4:b1:3d:7e:92:
         d4:4e:6c:17:44:12:7c:4e:aa:84:b2:87:43:51:c0:c7:b4:ad:
         5b:2d:24:04:9f:77:d7:f3:40:78:c8:bb:63:8f:55:8d:74:73:
         cc:40:a5:b4:d9:78:0c:b0:e8:a9:67:a8:ba:d0:21:49:3e:3c:
         93:30:8f:bc:73:69:51:e0:3e:8f:c2:77:2a:b2:05:fb:64:91:
         7b:16:27:0f:a6:81:b8:10:38:52:9f:77:c7:5b:d6:c9:3c:3c:
         6f:bc:64:fc:53:3f:7c:61:82:1a:f6:9a:8a:d6:41:05:b3:1b:
         e9:5c:47:f7:9f:93:3b:36:a0:03:ac:e2:7b:c5:72:e0:79:be:
         c9:8d:5b:a2:b0:7d:4f:71:1a:8f:de:7f:96:d3:1c:9f:5a:a2:
         5f:40:7f:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6WqtuGaeAB7bA2hiKf8yZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmU5YmNlYmFlMjI4YjM2Yzg4M2MyN2VhNTUxOGU3MDRj
MTA5OTEwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODIwZDUwZDBkOGVhZWVjYTZkNGE4YzMwZWI5ZTA3MDcwMzczMWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXwIz6tRglGaeOvrbVMyO9+T7WKz
xj9154eNwID4zTJt2lMQ2HbNQEUnBN2i+pc/cFpL3Qrnw8shhPgASD7OCw7NFwTh
K3xxst697NHJrZhYLa36DDV+krpR5b6XE8jWiNADOS+WqKWLFUn4qB+3NmqegiPs
Kcu0OdEjH4laBUAFpw6XvCU1Kxw9484uCbkDLVAsN9d+/zx04FYoIYsIpgZiFM3b
9R67bJir40ZsX6p+d9/Nbemj/KTMGnpTiYXvq/NFsnMH8GD7ivkOyUhsZjBZumB3
I2mHDu+uP7neCDdgpGw3qvdO7HDf7m6x8eHdysE8As+3iKJZd2Z+FKXZwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAgg1Q0Njq7sptSoww654HBwNzHsMB8GA1UdIwQY
MBaAFBP+m8664iizbIg8J+pVGOcEwQmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQt
NWUyZDYwNzBlZjgzLzEvQ0NEVkRRMk9ydXltMUtqRERybmdjSEEzTWV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81MGE3ZGEtMTYyYi00YmRlLWIwYzQtNWUyZDYwNzBlZjgz
LzEvRV82YnpycmlLTE5zaUR3bjZsVVk1d1RCQ1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSqjMA0G
CSqGSIb3DQEBCwUAA4IBAQCIihyVGHgJpLJb7Xa418l4/RmfNpgkIIZ44HMB5xlP
Rv1CKlAMoKVSrapwi1FzkqyFq1CSe3QicnkPfA5yfaH78iEr+1XrwpfWr0c5sX+K
O1Gm8ZKSYnbJJNar9HpRxUgmf0sGGAK2tLE9fpLUTmwXRBJ8TqqEsodDUcDHtK1b
LSQEn3fX80B4yLtjj1WNdHPMQKW02XgMsOipZ6i60CFJPjyTMI+8c2lR4D6Pwncq
sgX7ZJF7FicPpoG4EDhSn3fHW9bJPDxvvGT8Uz98YYIa9pqK1kEFsxvpXEf3n5M7
NqADrOJ7xXLgeb7JjVuisH1PcRqP3n+W0xyfWqJfQH8W
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:12:17 2026 by rpki-client