This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ElQ5chtEAtBtP2GIXdac_TddA80.roa
File:                     ElQ5chtEAtBtP2GIXdac_TddA80.roa (raw, json)
Hash identifier:          HOH5oCt/YkRKpTxo1H1ugWQGWMm04Hcv5fnFxFjdw8s=
Subject key identifier:   12:54:39:72:1B:44:02:D0:6D:3F:61:88:5D:D6:9C:FD:37:5D:03:CD
Certificate issuer:       /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial:       019B7834B368F86ECC063A117564F2312CD0
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ElQ5chtEAtBtP2GIXdac_TddA80.roa
Signing time:             Thu 01 Jan 2026 06:17:58 +0000
ROA not before:           Thu 01 Jan 2026 06:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201145
IP address blocks:        185.75.97.0/24 maxlen: 24
                          185.75.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:34:b3:68:f8:6e:cc:06:3a:11:75:64:f2:31:2c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
        Validity
            Not Before: Jan  1 06:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=125439721b4402d06d3f61885dd69cfd375d03cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:49:9b:79:ce:23:6f:32:b4:fb:57:1d:5a:e4:
                    f2:aa:2d:7a:70:84:d2:94:04:63:9a:bf:9b:36:41:
                    f6:9b:fe:e2:b4:5f:e6:f5:0a:9b:03:c6:81:7d:64:
                    a2:72:41:f8:03:22:68:b2:0c:cd:f7:ee:4b:37:84:
                    be:fb:3f:79:ca:b2:56:25:24:a2:60:c0:54:29:11:
                    78:20:83:4e:0a:36:6a:dc:01:17:cb:eb:f6:fc:db:
                    fb:58:0d:5a:cc:75:88:a2:6b:d0:35:b4:58:51:59:
                    22:b2:88:d9:f0:2e:c7:d6:c8:15:0d:a8:97:41:cb:
                    65:0d:e2:d3:81:11:01:6e:fe:af:b1:99:55:1e:b3:
                    9b:68:93:77:81:dc:0c:b6:c1:07:5d:07:b4:10:f5:
                    06:29:16:e7:b6:40:59:38:66:bb:55:4d:76:76:a8:
                    e3:fc:a1:4c:fc:c2:0e:bd:72:16:91:fd:c1:17:ad:
                    45:2b:12:06:94:bd:a4:6c:dc:c5:39:d2:9b:ad:93:
                    13:5d:fd:9c:8b:aa:20:54:c5:60:2d:33:ef:a0:6d:
                    d7:00:d8:52:22:58:45:94:03:0e:41:83:56:86:94:
                    c2:03:16:60:18:8b:97:05:2c:46:ec:de:e5:a6:97:
                    7c:93:78:a9:42:06:4e:94:4a:5a:c0:75:e0:8f:59:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:54:39:72:1B:44:02:D0:6D:3F:61:88:5D:D6:9C:FD:37:5D:03:CD
            X509v3 Authority Key Identifier:
                keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ElQ5chtEAtBtP2GIXdac_TddA80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.97.0-185.75.98.255

    Signature Algorithm: sha256WithRSAEncryption
         47:cb:be:25:af:2b:8f:57:e8:86:f6:ae:3f:3a:47:76:d3:db:
         1e:bf:04:e6:e7:7e:4b:56:7d:65:52:d3:33:a8:1a:d1:70:5a:
         92:34:7f:dc:ca:0c:43:0d:ba:c1:c4:d2:1d:62:63:1c:0f:12:
         ab:4b:db:79:c4:aa:32:f9:61:c6:97:12:7d:e2:f8:b9:bb:df:
         c0:16:3d:f4:7e:40:6d:ff:ce:13:38:5c:bb:0f:69:93:a7:1c:
         27:32:6d:db:7a:5a:2b:05:a2:d2:88:69:a8:b6:b3:c8:bd:f0:
         76:38:f8:53:1c:1f:02:68:9e:4d:22:22:41:40:0f:78:42:78:
         e5:56:be:1d:6d:2b:34:e5:06:34:bd:b5:93:42:da:58:b3:1f:
         c4:ed:c9:65:bc:36:a4:2d:2f:70:40:e4:ea:33:ae:c9:f8:f4:
         f6:94:7d:d5:65:f9:92:e3:4d:55:c4:9e:9f:88:28:ff:b3:44:
         ba:02:de:b2:6b:52:9b:6c:25:fe:28:90:0b:8e:76:10:37:d8:
         cf:55:7c:8f:b7:ab:e7:b4:6d:20:cf:71:41:c6:15:de:1d:38:
         27:f4:b5:87:0e:b0:90:1e:78:34:58:9d:c2:7d:4a:9d:06:d8:
         9e:fa:95:3b:8e:2a:f2:aa:64:88:8a:bf:6c:ba:68:47:60:47:
         30:a7:49:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:24:43 2026 by rpki-client