This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/dTdtChpCkEVrMVZHMHKE-jbH_GY.roa
File:                     dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (raw, json)
Hash identifier:          fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=
Subject key identifier:   75:37:6D:0A:1A:42:90:45:6B:31:56:47:30:72:84:FA:36:C7:FC:66
Certificate issuer:       /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial:       019B7C12C3DC147BF5ADA221F01023554945
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/dTdtChpCkEVrMVZHMHKE-jbH_GY.roa
Signing time:             Fri 02 Jan 2026 00:19:23 +0000
ROA not before:           Fri 02 Jan 2026 00:19:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     210381
IP address blocks:        83.139.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:c3:dc:14:7b:f5:ad:a2:21:f0:10:23:55:49:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
        Validity
            Not Before: Jan  2 00:19:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=75376d0a1a4290456b315647307284fa36c7fc66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3a:44:c1:c9:8b:9e:a3:56:09:d6:c0:a5:31:
                    0b:a9:99:09:52:da:75:4d:7f:5c:bf:81:7a:c0:42:
                    05:a5:d9:f7:c0:93:39:74:74:61:46:a7:ce:6e:d8:
                    76:10:9c:ea:60:0d:d4:ce:7b:b3:91:9b:c4:d2:bc:
                    20:4f:71:33:db:82:e9:89:48:39:ec:c7:5d:5f:88:
                    27:39:7b:a0:66:9f:84:3b:77:f2:7b:26:b2:9d:b3:
                    e1:fe:24:f9:9d:e2:ba:3e:58:a7:67:65:b3:90:97:
                    88:b6:d4:5d:1e:2f:a0:d2:36:5c:47:5a:3d:d9:65:
                    2a:63:71:cf:39:0d:d8:f3:09:9f:15:ca:16:71:66:
                    a5:7d:6e:95:23:ef:d7:57:4e:26:98:a7:41:b4:87:
                    c7:52:6d:9d:30:8c:3d:73:61:ea:e2:b0:bb:3b:2c:
                    77:19:ee:74:95:18:b6:f5:19:1c:39:43:99:ff:76:
                    e2:ba:2b:f5:7d:94:fd:10:39:49:4d:88:38:28:77:
                    f4:7d:b2:13:a3:63:26:c8:d6:f3:28:08:a7:79:9e:
                    c2:38:7d:e6:7b:95:ae:8c:66:86:9a:93:3e:71:84:
                    33:af:40:74:92:cc:87:3c:93:25:ba:a7:6c:58:de:
                    8f:a0:ba:b9:85:30:9e:84:b6:cb:a8:f9:87:17:11:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:37:6D:0A:1A:42:90:45:6B:31:56:47:30:72:84:FA:36:C7:FC:66
            X509v3 Authority Key Identifier:
                keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/dTdtChpCkEVrMVZHMHKE-jbH_GY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.139.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:89:ba:a6:7e:22:44:de:d3:d7:63:92:98:11:13:ef:28:7a:
         7a:47:ec:8c:9d:6a:27:5e:9b:d5:34:81:93:e1:ad:07:74:99:
         78:e6:a1:12:df:ba:d0:05:26:21:4e:c9:aa:30:cf:2e:07:be:
         69:3a:71:8a:f8:3c:8c:cf:bc:e9:82:90:38:6e:00:ac:6a:20:
         e0:28:9c:94:81:54:73:30:5e:90:1b:39:57:3a:5f:db:4a:d3:
         ba:d1:0b:b0:b5:cf:b3:71:67:bd:b9:47:23:ad:7a:46:a5:24:
         01:8f:cd:ed:60:97:97:58:11:dc:8b:af:c2:04:6e:d1:c5:72:
         9e:af:0b:66:b3:b6:ad:a5:48:e8:ef:29:9b:32:27:1b:fb:b3:
         95:6d:95:99:c6:7c:ae:53:92:05:ec:63:a3:5f:01:4d:ab:c2:
         69:21:e7:63:a3:f3:bb:03:70:ca:0d:c8:28:87:69:74:95:50:
         70:42:1c:27:bb:4a:72:a6:e6:b6:52:2d:f7:83:0e:33:58:50:
         5b:83:bb:42:8b:d8:73:b8:54:a4:be:65:82:4c:10:77:cc:0c:
         f3:cd:6b:c8:18:42:f6:3c:a1:60:8f:b1:41:04:d9:36:a1:8b:
         4f:b4:e0:25:1d:98:0e:23:a2:33:2c:e4:00:47:5a:14:84:aa:
         19:ee:25:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:50:13 2026 by rpki-client