This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/SVhcT7-f91GWHF3ezAp4CabQJGE.roa
File:                     SVhcT7-f91GWHF3ezAp4CabQJGE.roa (raw, json)
Hash identifier:          I2BGiiPzcbR9Xi/UTC8SBNMbYW3PmqoOXqk7AuptfuE=
Subject key identifier:   49:58:5C:4F:BF:9F:F7:51:96:1C:5D:DE:CC:0A:78:09:A6:D0:24:61
Certificate issuer:       /CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
Certificate serial:       019B7F8580726F5300E4FD3075F2CAAE10BF
Authority key identifier: 7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/SVhcT7-f91GWHF3ezAp4CabQJGE.roa
Signing time:             Fri 02 Jan 2026 16:23:34 +0000
ROA not before:           Fri 02 Jan 2026 16:23:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51301
IP address blocks:        185.135.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:85:80:72:6f:53:00:e4:fd:30:75:f2:ca:ae:10:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c772e1e26e6c23f40ad6668c85fe950da1063fc
        Validity
            Not Before: Jan  2 16:23:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=49585c4fbf9ff751961c5ddecc0a7809a6d02461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:72:a1:15:0e:21:61:ef:8b:08:a6:ad:ad:
                    f8:9c:5b:76:b8:fe:34:c5:e9:16:0e:cc:18:63:33:
                    74:b7:be:ef:c0:72:d6:8b:dd:53:ee:30:03:56:79:
                    89:15:42:87:07:ac:35:3a:fa:fe:2a:6e:1d:5f:d7:
                    67:88:12:e2:e9:9c:84:11:52:83:0d:18:1f:5b:3a:
                    bb:69:b0:41:6d:db:0a:8b:72:25:22:a7:df:51:e5:
                    b5:8d:42:0e:7f:69:73:a1:a1:98:38:bc:2c:c7:6f:
                    43:5d:6e:12:62:9c:80:fe:a2:02:98:7c:9e:1f:1d:
                    6f:c1:d0:f5:43:5c:05:43:28:bb:10:bb:23:00:2c:
                    db:15:20:7a:39:dc:65:fb:e9:80:56:5f:b3:33:cc:
                    24:0f:e2:f9:c3:80:b3:79:fb:bc:f7:c4:24:bf:47:
                    9b:96:cb:71:57:23:0a:67:88:c5:e5:79:c2:36:e4:
                    d2:8a:6f:c2:87:cf:7f:5c:94:44:98:b4:69:20:4c:
                    a6:e1:03:c6:b9:7a:0d:88:71:e2:09:be:60:5e:4d:
                    8d:c3:1d:2a:5b:a4:71:7d:b3:96:1d:28:aa:94:6b:
                    71:cc:19:52:83:dc:e4:1c:68:2b:72:8f:69:8a:bf:
                    1b:a3:fa:30:aa:5f:87:7b:6e:b1:69:63:42:0b:11:
                    ed:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:58:5C:4F:BF:9F:F7:51:96:1C:5D:DE:CC:0A:78:09:A6:D0:24:61
            X509v3 Authority Key Identifier:
                keyid:7C:77:2E:1E:26:E6:C2:3F:40:AD:66:68:C8:5F:E9:50:DA:10:63:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHcuHibmwj9ArWZoyF_pUNoQY_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/SVhcT7-f91GWHF3ezAp4CabQJGE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/03731d-4ab0-4981-8a3a-23c47e9535e7/1/fHcuHibmwj9ArWZoyF_pUNoQY_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:9d:6d:cb:6b:0c:b4:e9:1c:c3:86:68:df:11:68:1d:12:cb:
         6f:5d:29:ce:c1:5d:2e:66:bd:a3:b7:e5:40:10:d5:82:2a:c5:
         db:c0:b3:98:e2:52:72:38:0a:9b:79:34:89:2f:f3:80:19:e9:
         d7:85:78:ae:d6:c6:a4:20:01:0c:7f:41:f2:30:73:37:e8:b1:
         24:de:71:15:d1:0b:82:a5:0e:46:35:9d:eb:41:9c:b7:db:7e:
         58:96:70:c7:20:93:35:14:08:bf:16:00:ec:30:48:47:ef:7b:
         4d:4e:a7:2f:d5:2c:f2:e4:42:8d:20:0b:e7:ef:2a:0d:69:8a:
         ef:0f:fc:60:49:d6:09:e6:9b:0d:c1:61:77:9e:4b:b7:9c:5f:
         de:e1:a6:4b:91:2b:f6:0d:bd:94:0d:e9:55:ae:80:f7:47:e7:
         2d:f1:96:0d:70:4a:1a:97:5d:e2:df:d4:22:18:3a:15:8f:53:
         c9:03:6e:9d:38:f5:64:7a:13:b8:70:a1:ff:d7:dc:26:80:6c:
         68:1d:15:45:99:e7:6b:41:12:8c:ea:36:b5:ab:eb:4a:1b:41:
         b8:62:17:21:c5:d9:85:68:2a:2f:61:43:fc:c1:81:6a:b1:74:
         d4:14:5a:7d:5f:55:ce:28:cd:0c:33:48:ce:93:82:ca:e1:8c:
         32:23:81:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:54:04 2026 by rpki-client