This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/coJoVPwD-NPH-ETwi5cG_7WPcf8.roa
File:                     coJoVPwD-NPH-ETwi5cG_7WPcf8.roa (raw, json)
Hash identifier:          GKRZPbLDmw4jESIu5RvOoK1/PXU2kw57mn7Q0tZcbW8=
Subject key identifier:   72:82:68:54:FC:03:F8:D3:C7:F8:44:F0:8B:97:06:FF:B5:8F:71:FF
Certificate issuer:       /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial:       019B77587660DF204B6B2FFCC43ACB8A81E4
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/coJoVPwD-NPH-ETwi5cG_7WPcf8.roa
Signing time:             Thu 01 Jan 2026 02:17:24 +0000
ROA not before:           Thu 01 Jan 2026 02:17:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     29119
IP address blocks:        185.160.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:76:60:df:20:4b:6b:2f:fc:c4:3a:cb:8a:81:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
        Validity
            Not Before: Jan  1 02:17:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=72826854fc03f8d3c7f844f08b9706ffb58f71ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:d8:de:2b:8a:8e:19:37:07:53:5d:26:d9:
                    58:d2:11:9b:79:99:0e:b0:3a:a4:6d:81:9e:8b:2e:
                    22:46:59:69:fa:d9:43:83:c9:ce:a9:c1:65:60:88:
                    80:d9:ca:49:56:f4:0d:17:fb:0d:42:e7:94:32:65:
                    da:44:f0:03:a4:5f:83:19:01:3e:aa:90:4b:51:d0:
                    0a:dc:48:4c:58:34:31:92:ca:18:80:29:0c:c3:0a:
                    83:cc:17:33:18:aa:dc:7f:fc:dc:d3:8c:f4:fa:3c:
                    21:3b:94:d9:30:60:0d:15:45:5d:e3:59:75:96:ca:
                    95:60:13:3e:5d:06:8f:cc:e4:89:8f:90:18:52:79:
                    f6:75:dc:be:f4:e7:de:a8:29:ea:fc:8d:0d:c2:4c:
                    87:20:b5:a5:d8:49:39:3e:e8:3e:c7:48:65:50:ae:
                    cc:3f:3d:2c:eb:3c:42:fc:3a:bd:5b:7f:e9:ea:bb:
                    fa:28:2d:26:a9:c5:f7:60:54:ff:33:78:38:65:25:
                    24:f0:3e:b6:8e:9c:b8:53:e2:4e:a8:49:0d:74:4c:
                    58:13:3c:16:e5:f2:36:ed:31:9f:7c:b5:b7:00:9d:
                    e8:e1:3e:83:a5:43:17:ab:86:47:fe:ca:24:ae:2b:
                    a9:90:95:06:f9:b2:38:4a:3a:f2:65:69:f2:57:96:
                    30:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:82:68:54:FC:03:F8:D3:C7:F8:44:F0:8B:97:06:FF:B5:8F:71:FF
            X509v3 Authority Key Identifier:
                keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/coJoVPwD-NPH-ETwi5cG_7WPcf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.160.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:60:6b:0c:43:93:85:a4:79:a8:83:ca:70:ea:b9:2b:79:0c:
         48:d8:64:59:46:b3:f4:c5:dc:6b:cd:4b:24:d6:57:3a:20:77:
         a1:42:b0:2a:59:06:ba:49:a7:42:10:4e:6b:e5:7c:f5:e1:33:
         66:72:71:75:99:42:00:e2:bd:0c:99:f5:e2:30:2f:82:d0:a0:
         f4:76:98:3d:f3:23:25:3e:7f:7e:33:bf:79:6d:7a:8b:ad:9b:
         da:83:1d:4c:10:4d:a8:59:84:76:78:fc:90:e7:09:5f:20:89:
         fc:62:68:51:f1:2d:12:bd:a2:b1:6e:5a:88:28:45:7d:5a:0d:
         da:ab:b3:9b:87:e2:ae:dd:37:47:78:80:04:16:a6:93:8f:41:
         17:ce:e3:e3:87:8c:dd:59:1b:56:2a:28:5d:4a:bc:3a:c0:79:
         76:dd:40:29:42:03:84:08:c5:f3:a0:8d:a1:7c:8f:ac:19:1d:
         99:7e:c9:36:73:e8:44:9c:7c:52:1b:9c:e3:5f:af:79:4b:c7:
         6d:d1:c8:a1:e2:51:f3:cf:db:e3:1b:7d:26:05:90:7d:0d:93:
         74:dd:bd:59:9f:b1:26:d7:e1:2f:30:fa:c6:8c:b3:a0:5c:cd:
         a4:59:72:2e:cb:f9:53:21:14:26:27:0e:8a:e0:7a:88:05:16:
         8b:26:36:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:22:25 2026 by rpki-client