This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/NpN7l3_hUP3xVFpljOuMEBlStvc.roa
File:                     NpN7l3_hUP3xVFpljOuMEBlStvc.roa (raw, json)
Hash identifier:          T5g6uyNIkE7SmOO57cpKy2aBBJDWlR4fSl0bwzLwido=
Subject key identifier:   36:93:7B:97:7F:E1:50:FD:F1:54:5A:65:8C:EB:8C:10:19:52:B6:F7
Certificate issuer:       /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial:       019B7C129D099715BA2BF620967F7DCF6452
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/NpN7l3_hUP3xVFpljOuMEBlStvc.roa
Signing time:             Fri 02 Jan 2026 00:19:13 +0000
ROA not before:           Fri 02 Jan 2026 00:19:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57199
IP address blocks:        80.67.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:9d:09:97:15:ba:2b:f6:20:96:7f:7d:cf:64:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
        Validity
            Not Before: Jan  2 00:19:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=36937b977fe150fdf1545a658ceb8c101952b6f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:87:6a:70:01:fa:ae:e4:31:41:73:db:93:
                    52:93:3e:76:3b:9b:0d:0b:ba:7c:91:b9:a1:1b:ab:
                    dd:89:38:a9:60:6a:c7:68:e2:56:f5:ac:24:7d:5c:
                    6f:ad:e7:0e:b2:13:5a:ce:e9:4b:1e:82:2e:1b:5c:
                    75:5d:86:78:80:a6:4e:7f:c7:23:fa:ca:ee:e6:b0:
                    07:75:60:09:84:3d:f8:2d:b2:18:9b:88:7f:48:d4:
                    62:9f:d0:a3:6e:5c:53:57:54:f2:9f:51:af:75:8a:
                    c5:dc:97:ea:db:02:ef:8b:3b:7c:d5:9c:83:f7:d9:
                    a5:b8:fd:81:5f:a9:91:df:a8:d9:e4:6e:50:0f:39:
                    86:d7:39:31:74:8f:da:84:f0:84:22:cb:2e:94:89:
                    af:38:94:29:db:23:41:11:71:75:ba:cd:ef:c1:14:
                    8c:bb:74:a9:08:7d:6b:8c:2a:e9:5a:16:fb:3c:8b:
                    6b:f8:b1:a6:32:fa:1e:d4:3e:d9:9d:47:f1:ec:98:
                    eb:70:75:7f:f0:32:fd:8b:16:24:26:21:22:39:90:
                    07:8c:50:2b:fb:9d:a7:3b:ec:2c:60:9f:4d:f7:eb:
                    fc:50:58:67:77:a0:24:c1:c6:cb:57:08:72:db:de:
                    2a:a5:88:62:50:bc:14:ab:7b:72:ca:4d:6b:46:76:
                    3f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:93:7B:97:7F:E1:50:FD:F1:54:5A:65:8C:EB:8C:10:19:52:B6:F7
            X509v3 Authority Key Identifier:
                keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/NpN7l3_hUP3xVFpljOuMEBlStvc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.67.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:60:a4:1b:4a:71:95:86:fb:df:35:2c:9a:ff:5d:84:7a:cd:
         bf:c7:05:89:08:9a:1c:79:d1:b7:4a:b9:65:bd:85:94:00:54:
         ea:76:92:ce:b3:35:dd:0b:89:ca:12:13:54:03:9a:30:8b:76:
         bb:78:2d:ae:60:4b:27:b3:4f:b0:37:e3:94:e3:ba:56:97:4a:
         6e:d6:dd:bf:22:9b:9d:0e:44:9c:c2:6d:b6:5b:c2:b9:06:9d:
         76:01:5a:e3:92:ec:32:07:90:7e:b6:f1:72:fa:1f:8f:bd:f9:
         c1:48:1b:ad:34:47:ac:6a:d2:d2:98:37:ca:c8:a0:0e:f8:56:
         0c:f8:30:94:1e:2e:fc:fd:da:7e:52:bf:a8:b6:8a:2d:55:c0:
         bf:0d:98:dc:75:f2:6c:71:de:cc:db:c9:f3:aa:ea:f6:6b:ac:
         c2:a2:b2:35:8f:a9:85:d7:6c:cf:50:74:c7:cb:50:ca:99:40:
         c3:06:c1:44:82:e8:ac:de:40:7b:8e:6f:fd:21:89:d1:91:b5:
         6f:19:4a:f1:57:2a:47:8d:cb:0d:62:85:2c:c5:60:18:45:4f:
         79:12:2f:2e:f6:8c:2b:e6:d4:b1:d3:99:81:59:d8:8d:94:a0:
         c1:0e:0f:a2:65:61:42:b2:1a:c0:5c:5a:72:23:ff:3d:8f:12:
         7f:18:b3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:23:27 2026 by rpki-client