This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/9dGvdWlNpFyFHCXA6RbwTGwzlgw.roa
File:                     9dGvdWlNpFyFHCXA6RbwTGwzlgw.roa (raw, json)
Hash identifier:          EKwo4lR/lHxGWjUPRhdL7zbwa8l0PAt3OjON/sSOuEs=
Subject key identifier:   F5:D1:AF:75:69:4D:A4:5C:85:1C:25:C0:E9:16:F0:4C:6C:33:96:0C
Certificate issuer:       /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Certificate serial:       019B76EADAD0BB8B29C29EC3B2CD2B10BFB8
Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/9dGvdWlNpFyFHCXA6RbwTGwzlgw.roa
Signing time:             Thu 01 Jan 2026 00:17:41 +0000
ROA not before:           Thu 01 Jan 2026 00:17:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     33425
IP address blocks:        83.228.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:da:d0:bb:8b:29:c2:9e:c3:b2:cd:2b:10:bf:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
        Validity
            Not Before: Jan  1 00:17:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5d1af75694da45c851c25c0e916f04c6c33960c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b7:f6:48:8f:a1:30:b3:52:96:53:11:49:7b:
                    a8:b3:58:bb:83:2c:ad:4e:0f:fc:28:37:cf:c7:d9:
                    e1:ca:13:c8:c4:72:3c:a9:23:6f:ea:87:a0:fd:9e:
                    64:f7:81:61:85:43:39:49:12:d2:c7:fc:6f:ec:39:
                    71:de:01:9d:ee:c9:74:7e:ef:83:44:a4:43:32:03:
                    07:b5:9d:67:0b:75:58:96:12:8e:ba:96:fe:1c:65:
                    be:c1:f6:9a:de:13:59:7c:30:a6:ba:8c:b2:ab:5d:
                    83:3b:d5:f6:92:84:a1:83:b4:bc:ed:d7:f8:c2:54:
                    75:2b:b6:29:4e:a9:77:c4:c7:0b:2c:5e:b5:48:50:
                    10:bb:89:af:2b:eb:ac:35:45:3d:76:a4:b2:b7:28:
                    d9:59:a8:e3:fd:cd:97:29:7d:cc:5f:03:a8:6b:f3:
                    b3:30:53:b9:22:07:35:3f:7a:bb:50:be:30:b9:24:
                    e7:33:35:69:8c:51:4c:84:fa:af:e9:d4:79:e3:6a:
                    c1:17:46:3d:cc:d6:db:93:f8:ac:5b:ef:a9:11:01:
                    da:80:c6:66:ea:d6:b2:79:6a:16:10:29:42:0c:44:
                    02:23:b9:b1:89:ca:55:79:a3:78:5e:e2:3e:3a:cf:
                    5f:d8:9c:67:21:83:02:39:23:1a:93:ef:c8:16:56:
                    f4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D1:AF:75:69:4D:A4:5C:85:1C:25:C0:E9:16:F0:4C:6C:33:96:0C
            X509v3 Authority Key Identifier:
                keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/9dGvdWlNpFyFHCXA6RbwTGwzlgw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.228.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         95:43:2a:6d:e0:49:40:85:7e:49:a0:30:c1:54:7d:df:8e:ba:
         8e:10:31:47:70:e1:8f:5b:20:a8:d1:61:e3:9f:d3:c1:60:c4:
         fa:d8:05:b8:82:e7:f9:9b:71:0f:b5:13:1b:7b:11:26:0d:81:
         35:90:28:23:33:72:ad:2a:6b:55:d4:4e:ee:98:c1:1f:56:51:
         50:cc:87:b4:d2:51:b0:7b:ae:f4:3d:f8:13:b1:eb:bf:c6:ad:
         fc:b0:0a:1e:b9:c5:3c:59:a3:65:11:84:ed:04:59:02:41:a1:
         77:fc:8a:d6:39:0c:66:37:87:3e:62:76:63:4e:68:f7:88:a4:
         d3:22:65:fe:2c:f9:8d:43:73:f7:53:3c:52:82:6b:46:6f:0a:
         03:76:93:a1:3d:d3:a3:5a:f3:f0:50:a1:5f:78:ec:3e:83:62:
         59:e3:68:3c:6c:e3:66:44:c7:2e:04:48:e6:04:91:ca:3b:35:
         26:07:50:d0:bd:e3:ee:cd:db:6a:5a:db:07:c5:c1:31:bf:d6:
         0b:04:fd:fd:93:4c:81:3d:13:4a:79:9a:cc:14:a2:2a:12:a7:
         82:52:c6:80:0c:7a:cc:18:60:43:81:03:cc:40:8e:d9:40:12:
         21:bf:49:10:60:73:6f:1e:d5:5c:17:00:9c:df:0d:af:29:22:
         1f:df:34:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:59 2026 by rpki-client