This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/37GSYGpAIN5FmTc65bBlmOruleU.roa
File:                     37GSYGpAIN5FmTc65bBlmOruleU.roa (raw, json)
Hash identifier:          JskQXpElXo63e0l7EMdmNpQ5SlR6rEV35BDXEtseiFQ=
Subject key identifier:   DF:B1:92:60:6A:40:20:DE:45:99:37:3A:E5:B0:65:98:EA:EE:95:E5
Certificate issuer:       /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial:       019B7CEE104FF4298BDE7D6A212F1B30650F
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/37GSYGpAIN5FmTc65bBlmOruleU.roa
Signing time:             Fri 02 Jan 2026 04:18:55 +0000
ROA not before:           Fri 02 Jan 2026 04:18:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     198621
IP address blocks:        77.234.47.0/24 maxlen: 24
                          185.51.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:ee:10:4f:f4:29:8b:de:7d:6a:21:2f:1b:30:65:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
        Validity
            Not Before: Jan  2 04:18:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=dfb192606a4020de4599373ae5b06598eaee95e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:10:1f:33:6d:6f:e1:75:bc:5e:4f:39:b7:
                    cd:fe:c5:92:d5:c5:61:26:98:94:74:a0:d8:7c:80:
                    2c:ad:57:8f:e5:b1:da:31:82:be:34:e6:97:52:09:
                    8e:0e:59:16:8f:e9:7e:de:8f:8a:03:e9:0a:60:36:
                    52:ef:0e:5e:73:d4:06:e9:80:a1:fa:a6:d9:20:27:
                    94:f5:43:dd:13:bb:fd:e2:d0:e8:08:41:ff:57:a4:
                    86:9d:fe:10:9f:34:e8:74:e9:d5:11:09:f4:3a:57:
                    69:98:61:e6:ce:f9:57:52:30:8a:99:db:ca:f7:f4:
                    e0:67:4e:6c:a3:00:83:e9:1a:f5:d9:fe:23:50:9f:
                    1b:96:15:d7:ca:fe:bc:dc:b4:f2:56:82:23:95:68:
                    7d:7c:55:b1:a9:5d:eb:2e:fd:2d:b5:fb:9e:cc:e6:
                    91:aa:0a:1b:b2:3a:6c:94:c2:14:da:74:eb:a3:1d:
                    4e:d8:f2:bc:18:3b:1b:30:3d:47:8e:fe:32:2a:74:
                    37:9d:00:89:47:cc:7f:0f:b1:8d:e5:38:53:5b:10:
                    80:58:f9:12:79:60:7d:de:c8:6c:43:de:5e:4e:95:
                    93:a5:ad:18:44:61:fb:59:65:db:3e:82:e6:20:8d:
                    bf:86:8b:4e:1a:50:e7:f0:58:0c:60:ca:02:d9:c6:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B1:92:60:6A:40:20:DE:45:99:37:3A:E5:B0:65:98:EA:EE:95:E5
            X509v3 Authority Key Identifier:
                keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/37GSYGpAIN5FmTc65bBlmOruleU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.234.47.0/24
                  185.51.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:83:8e:63:8b:04:f1:61:e8:5d:c4:69:26:f3:60:28:69:9d:
         c0:fb:1b:ee:36:58:cc:04:97:cc:7d:16:93:ee:9b:c7:43:0a:
         ff:9d:79:57:a0:a4:7d:f5:62:15:a9:58:56:cc:7e:3a:26:58:
         c9:66:9a:e4:47:b7:12:5b:ae:d1:1a:49:a5:0f:3e:7f:1c:35:
         89:69:95:f9:07:c8:8b:e0:54:09:41:3b:84:a5:40:b9:4a:ff:
         bf:d1:0d:13:13:0d:5c:ff:3f:6e:2d:79:85:65:b8:0b:d9:19:
         32:61:fd:53:22:31:5f:16:ba:08:39:05:a0:28:09:b4:16:86:
         83:2c:00:2e:89:8e:33:33:b2:87:6b:a1:7d:24:f2:54:26:4e:
         aa:6f:e4:8d:1b:47:95:8d:8d:8a:c5:41:d0:f7:9d:f4:fd:20:
         6f:95:6b:b2:09:3d:1e:4b:f8:4c:96:de:12:ad:f9:36:80:9f:
         de:49:f9:7e:25:f4:e4:7e:d0:6f:cc:59:d0:4d:60:e6:81:07:
         cb:67:f3:c2:48:fd:d0:ce:94:17:21:69:a7:57:25:a2:a8:e6:
         52:a5:8f:9d:7e:52:38:77:be:e6:c3:2f:77:ba:42:71:b4:b6:
         da:ff:ad:5b:df:a2:5a:07:33:3f:3e:a3:08:00:51:b7:24:ea:
         63:c0:2d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:20:47 2026 by rpki-client