This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/AnjhFMrWNEvE6l4HScTxK_j27SU.roa
File:                     AnjhFMrWNEvE6l4HScTxK_j27SU.roa (raw, json)
Hash identifier:          q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=
Subject key identifier:   02:78:E1:14:CA:D6:34:4B:C4:EA:5E:07:49:C4:F1:2B:F8:F6:ED:25
Certificate issuer:       /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial:       019B7910437A75EAFD7C623CDD3143446D05
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/AnjhFMrWNEvE6l4HScTxK_j27SU.roa
Signing time:             Thu 01 Jan 2026 10:17:47 +0000
ROA not before:           Thu 01 Jan 2026 10:17:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     60514
IP address blocks:        185.57.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:43:7a:75:ea:fd:7c:62:3c:dd:31:43:44:6d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
        Validity
            Not Before: Jan  1 10:17:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0278e114cad6344bc4ea5e0749c4f12bf8f6ed25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:13:cd:9a:bd:5c:4e:18:b9:98:5d:0e:04:
                    25:4a:37:f1:85:3a:f7:8c:48:6c:32:d9:ba:7c:a4:
                    71:54:5d:01:06:66:c2:cb:79:8b:76:32:e7:f1:15:
                    09:bc:2e:a2:0c:66:2f:30:ca:95:8c:53:c4:84:3b:
                    bb:69:e9:aa:85:3c:69:80:18:c5:45:3f:59:67:cd:
                    7e:68:ba:ee:37:05:ce:12:e7:48:59:3a:1f:c5:81:
                    73:5a:b7:6b:3b:dd:74:b6:51:1c:d8:72:ba:1f:62:
                    2f:3e:ad:76:22:23:74:04:a3:61:6d:49:ce:a1:70:
                    e9:66:86:f0:b1:ff:12:a5:f3:97:41:b4:72:16:93:
                    af:c0:3b:a2:a7:d8:bb:5c:c1:6a:e5:dd:4b:12:e7:
                    36:9a:69:56:60:2c:d7:37:1e:bc:01:c6:ee:98:68:
                    4e:d7:e7:08:2a:9d:74:c2:be:63:c5:ea:d2:68:67:
                    bf:b2:a2:66:da:0b:18:16:bd:14:42:1a:3d:30:5a:
                    20:50:84:d7:95:92:61:c7:4c:10:44:2c:0b:69:9a:
                    8b:3d:f9:93:57:69:4e:84:4e:87:59:ae:93:46:86:
                    de:f0:05:7b:51:53:96:0c:7a:ed:2c:48:63:70:c9:
                    3f:4d:df:8e:ad:b9:c9:35:a6:5f:3d:a2:e7:86:1a:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:78:E1:14:CA:D6:34:4B:C4:EA:5E:07:49:C4:F1:2B:F8:F6:ED:25
            X509v3 Authority Key Identifier:
                keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/AnjhFMrWNEvE6l4HScTxK_j27SU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.57.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:a2:67:2d:6b:3f:49:b0:b6:43:12:21:59:73:48:db:a1:5a:
         45:c7:50:52:dc:2e:28:c5:d1:89:ab:52:3d:70:5a:cd:51:cf:
         18:c9:46:dc:a8:33:81:cd:5f:50:05:6b:d0:c8:df:f1:96:0f:
         1f:16:3f:98:8f:b2:9a:31:c3:76:18:c1:5e:36:2d:dc:95:f5:
         9e:6f:c0:d6:7c:5b:e2:26:cb:7f:b8:2c:f8:47:01:79:e2:2d:
         62:e3:1b:8f:0c:ac:1c:69:83:aa:c8:3f:14:ff:23:41:a3:73:
         f8:ee:fd:d5:f9:a0:df:de:d9:6d:8e:df:64:20:42:0d:3e:9c:
         38:76:38:a2:b8:11:98:43:82:3b:bb:bd:52:1c:cd:a0:b5:14:
         b2:a7:3b:09:69:b7:2b:2d:0b:b9:0d:9a:cd:d7:5d:dd:ab:81:
         cd:7c:aa:72:ee:0f:15:86:45:8e:74:49:04:72:73:03:7e:f0:
         ea:cc:7b:49:0f:bb:ba:9c:03:1c:5f:9b:35:17:92:61:34:7e:
         ac:64:9b:60:b9:c4:83:1a:5b:46:d4:44:59:54:60:48:ba:71:
         3a:34:2d:a4:56:1f:ed:05:14:0f:46:20:61:3d:68:70:b1:44:
         c3:0f:e8:54:af:7e:69:8d:6d:97:89:7e:8c:af:c2:5d:91:5e:
         77:44:c9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:07:26 2026 by rpki-client