This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/1xBlob06V4OZHwqAUkwFisJ8hbE.roa
File:                     1xBlob06V4OZHwqAUkwFisJ8hbE.roa (raw, json)
Hash identifier:          fUNS9n+gbfLHDdSyjCsCUEORZD+YjwBO+Q4C1PMroB0=
Subject key identifier:   D7:10:65:A1:BD:3A:57:83:99:1F:0A:80:52:4C:05:8A:C2:7C:85:B1
Certificate issuer:       /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial:       019B7F850871144F971C17DB375D828DED12
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/1xBlob06V4OZHwqAUkwFisJ8hbE.roa
Signing time:             Fri 02 Jan 2026 16:23:03 +0000
ROA not before:           Fri 02 Jan 2026 16:23:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     15542
IP address blocks:        193.176.104.0/21 maxlen: 24
                          2001:67c:460::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:08:71:14:4f:97:1c:17:db:37:5d:82:8d:ed:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
        Validity
            Not Before: Jan  2 16:23:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=d71065a1bd3a5783991f0a80524c058ac27c85b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:d5:49:d0:57:15:93:db:9d:96:f7:72:f9:
                    71:1b:e8:02:09:84:2b:1b:51:16:c6:f0:74:bb:c9:
                    9f:1a:0e:2d:4a:f3:2e:c2:a8:2e:47:18:5d:46:02:
                    44:8f:ef:0b:20:49:d7:22:61:c1:f8:0e:e1:a5:e5:
                    23:22:8a:bd:6e:7d:1e:68:82:c7:4d:ef:2c:eb:0a:
                    a6:40:eb:22:bc:80:09:62:5d:c2:8d:04:d1:8d:2b:
                    4c:ce:f9:02:1e:08:6b:6c:f7:1a:65:34:5d:dd:4d:
                    f0:91:a2:35:73:a2:0d:70:23:0e:41:d3:49:36:04:
                    07:06:6a:09:71:cb:a4:52:de:a1:8f:3d:28:a4:03:
                    e2:aa:5d:2c:47:7e:9d:a4:c8:bb:7c:bc:8a:04:2a:
                    a7:9d:a4:96:72:97:1c:da:21:38:24:58:4d:54:99:
                    ea:a8:00:4a:cc:b8:2f:82:e9:c0:bf:00:f4:e2:44:
                    04:80:54:83:81:b1:32:53:73:d1:2b:71:df:c9:01:
                    df:89:c6:bd:5c:d9:7f:a5:7a:13:0a:11:b6:aa:96:
                    35:8b:7a:39:3a:67:b6:28:76:47:e7:36:ce:f8:45:
                    dd:44:79:6e:32:54:c0:c4:27:96:a0:96:6b:d1:00:
                    69:dc:59:4f:29:18:6b:a9:45:97:a0:df:26:ec:d0:
                    25:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:10:65:A1:BD:3A:57:83:99:1F:0A:80:52:4C:05:8A:C2:7C:85:B1
            X509v3 Authority Key Identifier:
                keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/1xBlob06V4OZHwqAUkwFisJ8hbE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.176.104.0/21
                IPv6:
                  2001:67c:460::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:79:bf:ea:dc:9d:00:34:76:3e:a5:ca:7b:c3:9d:c5:b5:76:
         19:54:c3:76:29:b2:ff:9a:ad:bc:57:b0:80:40:a0:07:64:29:
         6c:7c:4b:cd:6f:91:14:70:a7:09:b0:ae:5e:a3:3e:6e:94:ce:
         ae:63:76:38:2c:bc:a3:81:04:78:30:3e:f1:0c:6a:fe:b7:fe:
         b5:5d:ca:55:6e:6e:fb:95:b7:32:e0:6f:b9:11:68:ab:e8:bd:
         f5:dd:1f:f8:fc:66:7a:d1:93:67:17:16:1c:07:39:bf:bb:9f:
         91:dc:e2:7f:09:1d:96:55:13:da:bf:40:8e:63:54:50:80:e8:
         ab:f9:a0:eb:2d:e5:51:8a:6d:5f:12:44:fe:b5:d5:37:b2:a4:
         ae:f2:3a:a9:99:87:66:5e:07:35:d5:7d:fd:d0:27:05:34:8e:
         16:d8:76:4b:43:93:c9:3f:bb:2a:7c:b0:c1:af:33:ea:b7:cd:
         0a:a4:bd:02:0f:21:bb:3e:16:67:0c:14:6a:98:ee:bd:af:ef:
         51:1b:a7:f4:fc:3b:49:90:ab:08:3b:f7:80:08:2a:5d:02:88:
         49:e4:a6:c0:f2:7e:bb:af:72:b3:8c:20:5b:ca:8a:e4:e9:75:
         ad:8c:09:61:a4:02:2e:b8:52:39:54:f1:5c:39:0d:36:4a:97:
         ea:09:f3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:23:56 2026 by rpki-client