This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/W4SfK7LVjjxj4b0TkQOGGde1P4A.roa
File:                     W4SfK7LVjjxj4b0TkQOGGde1P4A.roa (raw, json)
Hash identifier:          FSzilaKZCTJ2hNW8MT0y1/bk1wNZ6lQ1QM8Hv1wN7Ss=
Subject key identifier:   5B:84:9F:2B:B2:D5:8E:3C:63:E1:BD:13:91:03:86:19:D7:B5:3F:80
Certificate issuer:       /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial:       019B76EAE7F307124166BB441440860C0E5B
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/W4SfK7LVjjxj4b0TkQOGGde1P4A.roa
Signing time:             Thu 01 Jan 2026 00:17:44 +0000
ROA not before:           Thu 01 Jan 2026 00:17:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     39134
IP address blocks:        77.73.239.0/24 maxlen: 24
                          84.47.138.0/24 maxlen: 24
                          84.47.139.0/24 maxlen: 24
                          178.236.20.0/24 maxlen: 24
                          178.236.21.0/24 maxlen: 24
                          178.236.28.0/24 maxlen: 24
                          178.236.30.0/24 maxlen: 24
                          178.236.31.0/24 maxlen: 24
                          213.208.186.0/24 maxlen: 24
                          213.208.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:76:ea:e7:f3:07:12:41:66:bb:44:14:40:86:0c:0e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
        Validity
            Not Before: Jan  1 00:17:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5b849f2bb2d58e3c63e1bd1391038619d7b53f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9d:4e:37:29:02:d8:07:e4:96:59:41:42:96:
                    86:87:58:54:06:de:34:31:43:cb:1d:ff:55:40:ba:
                    24:a8:4e:10:79:98:a6:e3:d5:d4:38:fc:68:8a:66:
                    ad:d5:f7:30:e9:80:ce:b5:48:a9:05:72:3e:ea:82:
                    02:66:66:98:af:36:00:86:d6:01:67:d4:07:c5:13:
                    ad:8e:ce:f7:c3:12:89:ce:bd:94:31:21:25:ed:95:
                    07:d7:a3:2f:bb:cc:4e:e4:7c:9b:3e:aa:da:a5:9b:
                    a2:36:ee:0c:16:62:ed:01:88:6f:2a:79:a9:06:e8:
                    2c:50:9d:09:1e:19:10:a4:6d:62:ec:de:8e:db:13:
                    ab:54:36:7c:e9:13:2a:37:a6:f9:85:9e:e9:a9:16:
                    c6:27:3b:e1:b5:a1:7d:db:10:8f:b4:9d:f1:69:6f:
                    3c:3b:9c:82:00:2b:a9:f3:f0:a9:f9:e4:89:da:72:
                    a7:b6:dc:68:7c:ec:9a:f3:90:17:2f:a3:ed:86:eb:
                    d9:64:a9:a6:6f:d8:8f:8e:a5:3d:2e:f7:c8:4a:28:
                    60:03:47:21:19:3a:f2:4d:29:2f:56:a6:a2:d0:b1:
                    6f:18:4f:6c:b1:ae:22:11:52:71:46:89:f1:76:bb:
                    fc:0b:de:62:7a:cb:c7:5a:ed:2a:ad:62:67:2c:08:
                    6f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:84:9F:2B:B2:D5:8E:3C:63:E1:BD:13:91:03:86:19:D7:B5:3F:80
            X509v3 Authority Key Identifier:
                keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/W4SfK7LVjjxj4b0TkQOGGde1P4A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.73.239.0/24
                  84.47.138.0/23
                  178.236.20.0/23
                  178.236.28.0/24
                  178.236.30.0/23
                  213.208.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:78:a0:8a:4e:17:38:05:82:1b:97:5f:38:74:e4:99:14:fe:
         11:35:73:d2:88:ff:6f:02:05:af:6a:fe:ab:ce:4b:14:30:19:
         aa:88:8a:2d:8b:a7:6b:6b:a3:5c:3e:7e:88:73:f6:5d:ee:be:
         64:5f:e3:3a:80:1d:f6:d8:9b:8e:d8:29:46:37:2e:a4:2d:ee:
         75:ac:ff:3f:61:90:8c:68:47:8b:dc:f4:3a:d2:0e:2d:c4:b6:
         e4:5d:5a:5f:6f:c4:9c:35:68:4c:2f:6f:64:3a:20:a2:be:ae:
         e1:ad:7a:00:2f:de:e4:59:d8:94:8d:f4:16:7a:6b:1d:c4:de:
         67:fa:40:ee:fe:5e:cd:0f:82:c8:77:70:2e:88:9b:c2:ec:c9:
         d2:8f:ba:c9:72:71:12:cf:7a:b7:1d:1f:ca:c9:0e:dd:4d:9b:
         f3:cb:2b:8a:a6:b7:5f:81:fd:b7:db:a7:a7:df:fc:b6:b3:fb:
         fd:91:aa:b8:a9:e7:2d:39:dd:8d:87:b0:d5:89:aa:3d:b6:0a:
         68:0c:cf:14:85:52:4e:59:de:7a:68:8f:90:76:19:72:44:de:
         a8:df:45:4d:98:54:47:2f:04:76:08:94:8d:6d:25:b0:d7:a9:
         86:56:94:a3:e0:6c:ee:8d:05:d5:14:37:34:ca:f8:3f:9b:e7:
         d6:3d:74:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:57:56 2026 by rpki-client