This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/rd1TYdEXPHhLUYvq912Q58Dh15E.roa
File:                     rd1TYdEXPHhLUYvq912Q58Dh15E.roa (raw, json)
Hash identifier:          ged8RYg6t00YYbjATYOf0qeEgk1jUhkA3s1XP4KCL6s=
Subject key identifier:   AD:DD:53:61:D1:17:3C:78:4B:51:8B:EA:F7:5D:90:E7:C0:E1:D7:91
Certificate issuer:       /CN=4d70af1a99886c9101d135f54bd2bdef358b266e
Certificate serial:       019B7C80D42ED8D050D3C78573E7DF20DAED
Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/rd1TYdEXPHhLUYvq912Q58Dh15E.roa
Signing time:             Fri 02 Jan 2026 02:19:36 +0000
ROA not before:           Fri 02 Jan 2026 02:19:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62053
IP address blocks:        188.215.115.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:80:d4:2e:d8:d0:50:d3:c7:85:73:e7:df:20:da:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e
        Validity
            Not Before: Jan  2 02:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=addd5361d1173c784b518beaf75d90e7c0e1d791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:d0:e0:cd:ea:90:42:a1:82:a8:1f:3f:01:
                    24:4f:31:eb:60:bf:be:9e:3d:67:1b:f2:64:cf:9e:
                    2b:b2:da:1e:ba:08:18:bb:db:b5:60:5f:62:11:55:
                    c3:45:b0:d5:5c:98:de:35:5b:78:2c:cc:fb:e3:74:
                    83:d6:2a:4e:55:21:8c:eb:7f:d0:73:12:ca:a7:d7:
                    e2:40:83:05:88:8a:a0:ab:f9:01:c1:75:67:c9:01:
                    c6:48:6b:9b:0c:ac:fa:5c:3e:8d:72:c4:87:89:1d:
                    24:38:53:21:89:48:cd:11:8a:4f:63:e6:5a:bc:ec:
                    4e:5d:2e:92:39:6d:6a:c3:60:77:47:11:a0:ef:6f:
                    17:40:f2:be:18:21:2d:19:2f:57:ff:d4:9e:56:55:
                    89:3e:07:61:d9:46:6d:fb:7d:e0:94:57:da:d8:85:
                    5b:49:70:d5:56:ca:75:31:d2:46:b6:b5:63:b6:23:
                    8b:d4:20:f1:2d:72:86:04:1e:11:8e:ec:7e:15:2d:
                    be:22:ef:f1:bc:9f:2b:d4:8e:1b:30:9c:30:3b:eb:
                    b0:56:e2:c1:f9:df:e5:15:af:e8:4f:2e:0c:76:9b:
                    b6:03:4d:2f:66:4e:64:db:ac:22:49:d3:8b:12:47:
                    cf:5a:c1:da:75:14:e0:40:7b:f7:fe:aa:3f:c8:55:
                    08:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DD:53:61:D1:17:3C:78:4B:51:8B:EA:F7:5D:90:E7:C0:E1:D7:91
            X509v3 Authority Key Identifier:
                keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/rd1TYdEXPHhLUYvq912Q58Dh15E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.215.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:3f:27:3d:ae:54:dc:47:cf:19:1d:95:18:1b:82:fb:2f:c0:
         b2:a8:5d:7c:7f:d5:01:d3:16:27:e8:31:e4:95:94:fb:50:d4:
         31:13:49:ef:08:32:c3:34:39:af:40:9a:b7:87:ff:65:dd:61:
         ad:d3:cd:46:8f:32:1c:c9:2f:7e:e4:c1:07:7e:49:27:cf:be:
         59:51:82:a8:e2:0f:be:fa:84:32:b9:72:6d:70:ba:5d:2e:d7:
         f2:45:4e:87:2e:93:71:e7:5c:e4:0a:f8:05:6f:51:8a:39:04:
         57:a0:70:40:6e:2b:c7:a3:b1:25:e7:77:ba:22:38:9e:70:b3:
         86:dd:1d:b3:06:9f:bd:a5:bb:fe:86:ea:d5:50:9a:ca:c8:64:
         e0:50:b4:6a:8e:73:74:c4:b4:c9:7b:62:e9:bc:89:f9:b4:09:
         ff:9f:f9:49:3f:cb:ce:f4:58:a5:61:e6:52:c4:3c:6b:b7:6a:
         ae:d9:72:b4:5b:42:c2:84:b7:34:ff:f9:38:1a:f8:36:40:dd:
         20:f5:72:f1:90:ec:01:a9:8b:f6:70:32:40:b0:df:f9:5b:a5:
         52:fa:91:9c:d7:a1:d8:8e:16:25:15:63:46:b9:dd:59:81:4a:
         19:dd:6c:e8:23:6f:5b:52:70:d0:41:8d:a5:1a:5d:be:f9:cb:
         99:41:f3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:56:34 2026 by rpki-client