This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/Ane3kVXJDwOnCcrwevPbQSwdhlM.roa
File:                     Ane3kVXJDwOnCcrwevPbQSwdhlM.roa (raw, json)
Hash identifier:          GcB+WQ8GGExoABfliUP8dcPeehhXNomt7lmTMnKvHmw=
Subject key identifier:   02:77:B7:91:55:C9:0F:03:A7:09:CA:F0:7A:F3:DB:41:2C:1D:86:53
Certificate issuer:       /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial:       019B7A5B5566C195B26329F57556B8B101E3
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/Ane3kVXJDwOnCcrwevPbQSwdhlM.roa
Signing time:             Thu 01 Jan 2026 16:19:24 +0000
ROA not before:           Thu 01 Jan 2026 16:19:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49849
IP address blocks:        185.188.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:55:66:c1:95:b2:63:29:f5:75:56:b8:b1:01:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
        Validity
            Not Before: Jan  1 16:19:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0277b79155c90f03a709caf07af3db412c1d8653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2a:88:7f:22:fd:5b:30:f7:3c:3d:f6:a6:fd:
                    d3:2f:b7:16:10:c0:a5:fc:40:4c:b5:5c:ac:e4:9e:
                    6e:4e:14:a8:b4:f1:8e:f4:f7:07:4a:66:50:4b:fc:
                    88:63:8c:f7:d4:77:bc:4f:7c:3d:1e:4d:57:86:38:
                    1f:f5:71:7b:b1:87:4d:93:12:6a:2e:12:f9:e7:2f:
                    8d:d9:c8:a1:b1:f7:80:e5:5f:60:e9:70:7c:64:0b:
                    de:0d:35:d7:ee:77:d7:02:ef:dd:d4:a8:f3:71:a9:
                    5b:0c:93:0a:33:21:e9:24:c1:a4:8a:b0:c5:6a:7c:
                    03:f9:f9:1e:82:71:24:4c:a5:b3:d2:de:17:8a:5a:
                    38:8a:3a:02:f5:c7:08:da:53:f4:9e:bc:b6:ee:17:
                    af:41:9e:ce:61:35:78:ea:44:3d:7b:9b:68:01:ca:
                    99:9e:57:36:37:19:8e:13:85:4d:b2:36:87:65:ab:
                    1b:58:ab:f6:0c:9b:9f:9d:bf:10:d2:b6:ab:ff:b8:
                    22:dd:74:de:40:53:12:45:f1:55:3b:41:f7:34:ef:
                    ca:b6:ad:cf:24:ba:81:04:c6:39:4c:e2:94:79:56:
                    3b:35:3b:50:8c:e1:53:23:ec:13:16:34:26:3b:44:
                    ba:f7:d6:af:71:86:1e:68:ae:07:f2:65:9c:58:1b:
                    72:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:77:B7:91:55:C9:0F:03:A7:09:CA:F0:7A:F3:DB:41:2C:1D:86:53
            X509v3 Authority Key Identifier:
                keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/Ane3kVXJDwOnCcrwevPbQSwdhlM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.188.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:68:f9:d6:8e:38:7f:5c:5d:31:8d:bd:1d:3b:ee:a9:b3:ee:
         29:a1:fc:ab:46:cc:ff:8a:0f:cc:fc:5a:2a:06:ad:eb:d7:06:
         68:88:ec:0f:11:22:fd:ab:2d:4e:e3:94:03:8b:a7:6a:bc:6a:
         a1:b3:7a:e9:e8:db:d5:46:15:56:a9:37:0a:0e:80:38:62:74:
         de:0e:20:6e:f1:7d:0b:15:98:b6:c6:88:aa:85:9f:9a:8c:47:
         4b:2d:82:62:44:67:25:68:4f:86:e9:63:cc:ea:c8:bd:fc:2a:
         2e:08:50:9b:1a:00:3f:59:6c:da:d9:d0:3a:32:5e:32:13:30:
         b0:1d:48:a7:e0:91:1b:51:fa:17:92:49:08:32:98:e2:bb:46:
         f9:50:1a:c9:2f:80:76:02:d7:fa:a2:fd:68:71:ed:e0:a2:a3:
         c6:26:8c:63:09:6c:33:cd:47:24:69:1e:2c:0f:a2:1a:e7:33:
         2b:aa:5b:ba:fe:4d:a0:1f:fb:6e:cc:b9:b2:cc:66:52:48:64:
         d3:c0:43:22:23:1e:0b:9e:a0:ca:58:d3:71:ba:31:fd:9b:ff:
         3a:1f:2b:8f:43:5c:60:98:de:9a:8e:c7:26:a5:a5:4d:eb:63:
         13:86:ce:a4:5e:c2:84:5f:bc:e4:f8:ad:83:df:7d:8c:04:32:
         35:42:0e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:08:15 2026 by rpki-client