This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R478C-e_hBaN-zMlqgTQQQiAjdU.roa
File:                     R478C-e_hBaN-zMlqgTQQQiAjdU.roa (raw, json)
Hash identifier:          z9VWq67Kto6yr+ZasBtnEtxECp//ZKVOzAxeOY4/jDk=
Subject key identifier:   47:8E:FC:0B:E7:BF:84:16:8D:FB:33:25:AA:04:D0:41:08:80:8D:D5
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       019B7F850AA776A5DD2A9BFD83C14F849F9B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R478C-e_hBaN-zMlqgTQQQiAjdU.roa
Signing time:             Fri 02 Jan 2026 16:23:04 +0000
ROA not before:           Fri 02 Jan 2026 16:23:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209954
IP address blocks:        92.38.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:0a:a7:76:a5:dd:2a:9b:fd:83:c1:4f:84:9f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 16:23:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=478efc0be7bf84168dfb3325aa04d04108808dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c6:f4:78:46:3d:2b:f1:07:c4:7c:7b:70:4e:
                    53:dc:a1:ee:40:da:c7:c9:84:e1:bf:38:a4:75:a2:
                    27:dc:ae:2e:bb:84:ec:8b:75:44:95:92:38:fb:2d:
                    39:10:bc:95:cb:35:8b:cb:6a:17:00:5e:9d:74:5c:
                    6b:2e:11:10:6f:ed:d6:3b:3d:0a:44:b6:4e:be:af:
                    94:56:81:5f:75:82:e2:7b:d9:10:ac:17:85:46:3b:
                    b9:a0:c2:d1:7b:39:e7:07:60:1a:ed:b1:19:ce:62:
                    0b:69:87:33:83:a6:71:60:b3:15:c3:b3:73:a4:e8:
                    67:af:f3:25:c4:28:c0:98:66:31:e3:01:5a:e8:a5:
                    0c:c7:66:c9:66:30:aa:e7:88:cc:50:7d:9e:79:27:
                    a8:ca:0b:83:e5:5b:72:d8:3c:0c:85:3e:98:bf:7b:
                    93:f8:6c:1f:51:f8:c0:a4:46:3e:b2:47:ce:28:1c:
                    b1:17:06:11:70:9d:1c:0b:01:25:bc:8a:23:2c:16:
                    b2:b0:ed:56:a8:24:28:a7:c2:af:1e:49:9e:6c:f4:
                    4d:03:72:d9:c1:98:2f:ef:12:0f:95:fd:00:11:a0:
                    4f:32:70:ad:88:0b:41:67:5b:a1:20:68:4d:70:26:
                    b7:31:70:cb:42:8e:70:8a:83:7b:ce:40:d0:36:a0:
                    fb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8E:FC:0B:E7:BF:84:16:8D:FB:33:25:AA:04:D0:41:08:80:8D:D5
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R478C-e_hBaN-zMlqgTQQQiAjdU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.38.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:f7:a7:aa:1a:ac:8d:e6:d6:b9:29:85:fd:1f:05:ac:ba:59:
         60:34:9a:bc:d6:4e:49:86:9d:f4:d3:f5:6e:61:d3:fa:db:5d:
         e9:2e:e3:58:77:bc:91:0c:8e:db:59:02:2a:33:d8:99:99:bc:
         3a:37:0d:29:7b:b0:67:d6:11:39:43:29:22:8c:b3:c6:16:96:
         2c:0f:2b:9d:ab:ca:b8:ed:68:70:2f:c7:6b:76:f7:6c:56:8c:
         6e:30:31:27:e5:05:03:7b:56:9f:cf:ed:f6:89:01:c9:cd:a4:
         98:46:56:04:51:0c:6f:d6:71:11:41:53:00:4e:3b:5d:93:78:
         71:36:3c:2a:1b:6e:da:6a:b6:5b:c7:4b:79:ec:53:b3:39:ba:
         69:da:da:69:0f:32:78:18:69:11:bd:68:fa:e4:d1:af:c0:e3:
         04:4e:96:e3:8f:bc:c0:4e:51:98:47:bc:57:82:02:65:04:58:
         5f:77:93:ea:9d:c7:aa:b3:80:5e:1a:00:a7:b7:5e:2a:3d:e7:
         60:8c:7a:21:87:5f:19:03:5e:94:29:0c:c0:4e:b8:67:f5:a3:
         5f:35:b8:6f:e8:c8:ab:4a:c2:1c:c2:b2:04:bf:5a:31:a0:96:
         6e:69:84:5e:7b:81:26:33:9f:b0:d5:cf:5a:47:00:15:84:6c:
         25:26:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:27:38 2026 by rpki-client