This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/DaHppUozY1kCYvwX88wtsnmWINM.roa
File:                     DaHppUozY1kCYvwX88wtsnmWINM.roa (raw, json)
Hash identifier:          ru4D4lVH2+jP/p2rQYVLF6vXvNKc/Al77YQMaktDxfM=
Subject key identifier:   0D:A1:E9:A5:4A:33:63:59:02:62:FC:17:F3:CC:2D:B2:79:96:20:D3
Certificate issuer:       /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial:       019B797F4BB97A5DB58011BA14D961ACDBB6
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/DaHppUozY1kCYvwX88wtsnmWINM.roa
Signing time:             Thu 01 Jan 2026 12:19:04 +0000
ROA not before:           Thu 01 Jan 2026 12:19:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     211444
IP address blocks:        193.58.118.0/24 maxlen: 24
                          194.62.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7f:4b:b9:7a:5d:b5:80:11:ba:14:d9:61:ac:db:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
        Validity
            Not Before: Jan  1 12:19:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0da1e9a54a3363590262fc17f3cc2db2799620d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:7c:2c:13:b3:e9:12:32:79:a4:32:04:39:
                    57:20:df:46:23:bf:8f:a9:ce:70:d8:8b:59:f8:12:
                    af:29:01:cf:88:29:c4:08:0d:25:ef:71:44:fb:12:
                    b1:51:ba:78:97:49:73:97:b9:61:e2:f1:e6:10:6a:
                    cc:9d:01:8f:0f:00:fa:04:29:b4:33:9e:17:0d:ed:
                    5e:23:e8:98:f8:0a:49:7b:46:c4:bf:ff:24:24:dd:
                    54:be:4a:c4:b6:9a:c2:0b:ba:87:27:08:d1:bb:e6:
                    41:43:1c:6c:02:07:63:cb:b6:df:ec:39:7b:b7:03:
                    03:d5:9d:69:e1:e1:e5:0f:22:44:96:88:fa:b9:e2:
                    c9:26:07:f0:87:f4:9f:05:43:aa:1f:12:b4:fc:d7:
                    a9:c0:59:15:50:ec:62:35:5f:ad:72:b4:53:03:47:
                    56:54:72:31:54:c8:86:d1:e5:06:6b:82:2b:37:e2:
                    aa:75:b4:70:78:52:b8:cb:15:4e:be:83:07:35:c1:
                    b6:aa:3c:c9:64:36:bc:84:ed:7a:24:48:2e:fd:c8:
                    3a:48:89:ae:35:f7:ee:b5:c8:1a:a6:71:20:0f:d6:
                    fb:31:ed:3a:fe:dc:4f:28:c2:b6:f1:5e:de:3f:60:
                    87:53:7d:21:a0:0b:c9:04:d7:ed:8c:71:7e:8a:28:
                    7f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A1:E9:A5:4A:33:63:59:02:62:FC:17:F3:CC:2D:B2:79:96:20:D3
            X509v3 Authority Key Identifier:
                keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/DaHppUozY1kCYvwX88wtsnmWINM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.118.0/24
                  194.62.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:52:be:8d:65:2f:6d:f0:0f:5a:af:93:c3:fb:65:19:97:b4:
         04:3c:3a:20:fa:f2:92:87:a6:a8:cd:43:d8:ee:b1:62:3e:79:
         b6:47:5f:2c:57:c6:bb:11:cf:b0:80:ba:c4:45:52:c4:e5:d5:
         cf:78:66:90:10:c5:c6:aa:0f:f0:8f:ca:41:41:28:fa:dc:ba:
         78:80:6d:66:68:b9:bf:2b:3f:5a:4b:61:9a:67:68:1e:14:9f:
         50:7a:02:50:02:43:65:d2:74:19:38:56:70:14:fb:50:4f:51:
         42:b3:61:e8:15:a0:26:2c:96:83:5a:fd:af:2e:66:fc:66:4f:
         ea:6f:44:d1:97:9c:9f:26:f2:7e:14:54:6c:0d:db:fa:02:3e:
         c3:ea:2d:49:34:2c:33:06:85:f9:56:08:d8:3f:4f:94:29:ff:
         35:6c:fe:ba:f4:ae:27:3d:26:b2:35:a9:6a:00:fd:16:b4:8a:
         2e:fc:9d:94:aa:dd:a9:4a:2c:53:5e:90:68:2f:57:db:d8:4e:
         07:c2:ea:4f:3a:ea:09:a6:20:30:b8:a5:d3:02:10:21:1c:7d:
         63:56:9e:8d:0e:9a:c7:71:0c:9d:cf:fb:bf:24:c2:8b:a2:26:
         a1:d6:c9:f8:01:2a:3e:1c:86:29:35:89:2c:c4:99:ee:71:2d:
         a0:dd:97:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:38:42 2026 by rpki-client