This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Nm1WmzvZyBv0QX7kUWti6s0fygw.roa
File:                     Nm1WmzvZyBv0QX7kUWti6s0fygw.roa (raw, json)
Hash identifier:          LK6k3pFVBlbjOoI7rGyfAfmFQes9uOk/iJq0hN/qLgw=
Subject key identifier:   36:6D:56:9B:3B:D9:C8:1B:F4:41:7E:E4:51:6B:62:EA:CD:1F:CA:0C
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       019B7758FF0240645DF5E08A552F3693063A
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Nm1WmzvZyBv0QX7kUWti6s0fygw.roa
Signing time:             Thu 01 Jan 2026 02:17:59 +0000
ROA not before:           Thu 01 Jan 2026 02:17:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199910
IP address blocks:        85.202.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:58:ff:02:40:64:5d:f5:e0:8a:55:2f:36:93:06:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 02:17:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=366d569b3bd9c81bf4417ee4516b62eacd1fca0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:0d:31:de:d0:22:a8:27:56:94:08:f6:ee:
                    96:75:16:62:08:e6:14:42:2a:d6:1b:63:e0:ba:af:
                    14:9a:d7:16:f8:99:d5:1d:91:0f:28:a4:4e:2e:96:
                    70:69:14:b2:17:f8:96:63:02:d5:1e:88:bf:45:61:
                    ca:eb:99:e4:59:90:be:ec:5c:f5:b6:60:fc:f2:fb:
                    0a:04:dc:ec:3a:31:fa:6d:61:45:cd:4f:b7:ae:28:
                    c6:1c:b0:c3:3c:1e:19:c4:1e:68:8f:16:35:fe:ce:
                    00:51:b6:a4:94:f9:46:fe:8d:e5:67:a2:cc:69:25:
                    4e:7b:30:e5:88:73:01:8d:22:5a:4d:6b:32:a6:31:
                    ae:49:74:57:0f:46:c4:8d:6f:03:44:9f:f6:fd:3f:
                    ef:05:8e:ec:46:ca:6a:12:d3:49:14:ac:16:9d:b2:
                    f3:ab:be:2e:5c:85:87:31:11:21:75:cb:4d:5c:7d:
                    b5:58:ef:77:20:b4:d1:15:1d:d6:2a:27:95:bf:90:
                    3c:b8:83:ca:19:34:16:58:0d:b6:8a:1e:d6:46:b0:
                    a3:49:e3:45:cc:b8:cb:69:c8:c6:7d:08:c8:1d:2b:
                    70:7c:e5:0a:9e:ec:bd:f8:b8:22:6c:99:8c:8b:72:
                    43:13:df:b4:0b:99:c3:f0:eb:e3:05:c5:64:8a:30:
                    5d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6D:56:9B:3B:D9:C8:1B:F4:41:7E:E4:51:6B:62:EA:CD:1F:CA:0C
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/Nm1WmzvZyBv0QX7kUWti6s0fygw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.202.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:be:a1:b1:76:6c:fa:10:e6:a9:b1:95:bf:1c:59:62:8e:3b:
         ce:cd:f3:f1:5d:6a:f2:61:1c:79:48:90:19:5d:9f:9e:24:15:
         da:b8:a9:47:48:02:28:98:51:67:0a:6f:78:1a:f0:12:25:f2:
         5a:39:06:07:dd:c2:f9:3f:e7:37:7d:98:1a:43:93:fb:0b:bc:
         be:0a:42:51:a9:eb:4e:98:53:28:2f:a9:7d:1b:35:77:57:a6:
         c2:13:6d:55:c1:fd:9a:d0:4a:3c:81:62:79:db:1d:6e:fd:0f:
         8f:52:6e:2f:1c:b8:96:0d:93:4f:95:d2:c5:96:66:81:25:24:
         5d:d5:82:da:3e:d8:77:fb:60:f2:40:ca:ac:76:64:73:7e:13:
         b6:85:63:69:d8:18:09:40:dc:11:85:ca:f1:aa:6d:98:11:9d:
         99:d9:1d:43:b7:a5:6f:80:06:f3:47:68:af:b3:45:f5:40:43:
         24:99:f4:ed:fc:60:88:f6:4c:0b:47:01:0c:44:42:1c:9e:77:
         ff:d4:86:e8:b2:42:14:f9:a4:6d:eb:1e:2c:90:b6:76:c5:90:
         b7:bd:8f:33:24:cf:e5:3b:58:72:bd:f6:7b:58:69:a1:a4:18:
         05:84:d1:24:a1:7d:33:c5:32:84:9b:89:37:df:4d:f6:b3:9c:
         f7:a4:89:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:31:01 2026 by rpki-client