This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/kulKF481vVCUBC9LIChr0PPnQ98.roa
File:                     kulKF481vVCUBC9LIChr0PPnQ98.roa (raw, json)
Hash identifier:          oPEQfzfrWrqmzt4RZKImfOn5GfilVn0rFFaSRAlyxh0=
Subject key identifier:   92:E9:4A:17:8F:35:BD:50:94:04:2F:4B:20:28:6B:D0:F3:E7:43:DF
Certificate issuer:       /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial:       019B79EC40FB30BADDDE6C7FFBC5B222DEF3
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/kulKF481vVCUBC9LIChr0PPnQ98.roa
Signing time:             Thu 01 Jan 2026 14:18:04 +0000
ROA not before:           Thu 01 Jan 2026 14:18:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206566
IP address blocks:        185.183.8.0/22 maxlen: 22
                          2a0a:ff80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:40:fb:30:ba:dd:de:6c:7f:fb:c5:b2:22:de:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
        Validity
            Not Before: Jan  1 14:18:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=92e94a178f35bd5094042f4b20286bd0f3e743df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e5:6f:36:7e:71:03:cf:d0:a6:a8:e1:08:b2:
                    d1:4f:a1:7e:c3:b9:c2:6d:a7:ae:4a:2a:5c:f5:8f:
                    bf:b2:b1:14:d7:1c:4e:ca:01:4b:8f:75:19:d7:d6:
                    04:e2:ef:3b:7e:d3:cc:1d:98:78:78:f8:d6:e0:8c:
                    34:12:81:9f:d3:72:19:2a:b1:18:3b:61:29:94:ac:
                    5b:7f:93:d0:11:b0:7f:49:bb:f9:7e:68:47:65:3b:
                    8e:8b:12:1f:2e:43:55:d6:f8:4b:6f:b3:21:29:2e:
                    bf:94:c5:c6:f3:ef:5e:6b:7a:2c:ff:e7:a4:fc:f1:
                    bd:48:85:dc:78:4c:c9:29:18:0b:b1:ab:29:ea:e3:
                    b3:96:29:6a:d9:73:3d:a4:77:18:d4:95:a3:91:7a:
                    9b:93:9e:0e:45:33:a3:7d:e7:fb:e5:45:4e:2a:8c:
                    fc:6c:72:0b:71:d3:b3:88:3a:4e:a9:cd:0e:81:9c:
                    8b:da:7f:73:1f:f6:86:6d:dd:7c:f0:eb:90:74:f5:
                    81:61:72:2d:6a:c5:1b:62:89:a4:99:7a:ce:a5:9c:
                    28:b7:aa:ca:34:c3:65:ea:3a:b3:c1:2f:68:e6:12:
                    b7:e2:2b:21:95:c4:63:2e:40:73:72:f0:39:ea:6d:
                    98:3b:da:1b:74:c7:cb:10:4c:14:bf:54:70:0a:e2:
                    10:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E9:4A:17:8F:35:BD:50:94:04:2F:4B:20:28:6B:D0:F3:E7:43:DF
            X509v3 Authority Key Identifier:
                keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/kulKF481vVCUBC9LIChr0PPnQ98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.8.0/22
                IPv6:
                  2a0a:ff80::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:48:f4:e0:de:c8:53:7d:d9:88:df:ae:2e:d5:b5:2c:51:73:
         02:14:cd:52:67:d8:97:6d:d8:84:9d:40:45:c8:fb:91:93:d3:
         83:cf:40:6a:cb:52:2a:c1:99:67:0d:5d:56:6e:60:c1:20:70:
         24:fc:b1:6c:5d:cf:9c:ef:3e:fa:98:5b:4d:7a:21:dc:7c:45:
         66:19:61:fc:e9:0d:53:c6:f2:ed:f4:3a:e6:d6:98:73:87:78:
         9f:66:3b:35:03:c4:bf:90:7b:c9:0e:97:0f:53:dd:fd:dc:7b:
         f8:91:76:05:9b:08:41:db:9d:2d:e2:99:7d:bb:8b:28:17:b2:
         49:27:59:f3:b0:f6:ea:c3:69:1a:a2:67:f7:56:93:fa:11:b7:
         d0:51:bc:89:50:dd:d4:7c:65:fb:6c:a2:16:41:3e:8e:10:6b:
         80:1a:18:eb:f1:1c:e5:9a:e6:dc:6b:b8:e2:9e:a5:f4:b4:76:
         8f:2e:e9:a8:62:ff:08:fd:97:62:7c:c4:3a:d7:00:5e:86:fe:
         4b:44:39:37:0c:11:51:dc:29:94:4a:c9:ed:05:45:83:af:87:
         8f:56:b6:42:44:1f:7e:2d:5b:a6:b4:c8:bc:9f:09:46:5d:e8:
         f9:0f:37:d7:08:4b:5d:9f:0c:86:21:a1:04:a8:50:d6:5c:4e:
         59:16:ca:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:40 2026 by rpki-client