This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Ngjr9wy51fkUA4X9nTsL9YfXGKU.roa
File:                     Ngjr9wy51fkUA4X9nTsL9YfXGKU.roa (raw, json)
Hash identifier:          i6JMeG81mq8rZ+g7yyAse10k7eBfXR8WF993t9kcOjk=
Subject key identifier:   36:08:EB:F7:0C:B9:D5:F9:14:03:85:FD:9D:3B:0B:F5:87:D7:18:A5
Certificate issuer:       /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial:       019B7F15AEEBC0487B5D1A202B33267085F9
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Ngjr9wy51fkUA4X9nTsL9YfXGKU.roa
Signing time:             Fri 02 Jan 2026 14:21:26 +0000
ROA not before:           Fri 02 Jan 2026 14:21:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62245
IP address blocks:        2001:67c:1918::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:15:ae:eb:c0:48:7b:5d:1a:20:2b:33:26:70:85:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
        Validity
            Not Before: Jan  2 14:21:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=3608ebf70cb9d5f9140385fd9d3b0bf587d718a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ea:cc:1b:53:53:a9:7a:ed:2c:8b:f9:0c:0a:
                    d4:25:1b:be:78:44:19:3f:fc:32:b5:4b:9b:bd:50:
                    69:ae:54:ad:c4:fc:df:0a:a9:e9:a9:0d:a6:65:f0:
                    46:21:52:3e:80:71:d5:c2:22:ec:e1:24:ba:63:6b:
                    16:49:4f:d6:ac:3a:b8:57:7f:be:c3:41:7a:ae:9c:
                    22:28:a3:82:d5:58:5f:49:9c:14:5a:4a:32:36:2d:
                    45:f6:75:62:2f:61:15:02:78:91:a1:01:a4:d0:f1:
                    1d:a1:87:ab:54:82:21:a9:97:ce:ef:72:43:ae:e8:
                    45:49:a0:a2:ef:ef:3f:a7:a0:b8:54:8d:f5:21:86:
                    62:b4:bd:1e:42:17:99:d7:b4:94:56:b1:ba:74:f4:
                    6f:64:81:1f:a3:fe:39:eb:eb:8d:13:18:1a:74:e5:
                    2e:fc:7d:e8:9e:d5:16:26:90:42:66:51:69:d1:c1:
                    40:74:c8:70:84:b2:d0:45:64:a5:d4:dc:3a:aa:80:
                    ba:79:e2:f5:ec:f4:d2:da:f8:fd:14:fa:d5:bc:80:
                    af:e3:df:08:ca:64:24:46:a9:13:f5:cf:c0:1a:82:
                    f5:8b:85:87:75:02:52:96:51:30:4d:7a:a5:b4:50:
                    04:38:6e:93:23:c9:af:49:f6:d4:8d:fb:58:d8:7f:
                    68:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:08:EB:F7:0C:B9:D5:F9:14:03:85:FD:9D:3B:0B:F5:87:D7:18:A5
            X509v3 Authority Key Identifier:
                keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Ngjr9wy51fkUA4X9nTsL9YfXGKU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1918::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:77:d7:6a:fe:5d:62:ed:ea:a6:0c:4e:21:f6:5e:a4:38:ff:
         31:e3:a9:19:8b:aa:d3:a6:0a:d0:42:09:76:65:74:5a:f5:a1:
         2b:c4:45:e5:d3:fc:ed:d9:b3:12:71:88:90:f6:0d:30:a2:75:
         d9:a3:d6:fe:8a:0b:a6:5e:01:ed:90:51:6e:82:f6:aa:2f:f9:
         a8:16:10:6c:1a:be:a8:4b:0f:63:e8:78:86:41:36:bb:35:f6:
         ba:77:63:61:d9:cb:57:93:d6:fe:c4:51:31:68:6d:2c:fb:aa:
         dc:0a:27:c8:43:1b:bb:5c:c2:ad:72:04:d0:97:12:64:60:96:
         c5:77:2a:54:f7:16:d0:70:2a:7a:0a:91:b2:e2:a6:8d:c5:8b:
         6e:6c:26:62:39:60:ca:b0:87:f7:82:c2:6f:06:62:d5:a3:09:
         1c:4d:3a:fa:15:4f:0b:ef:99:9e:b8:bd:a0:32:db:6d:5b:36:
         50:71:dd:51:53:3d:18:05:c8:47:fe:47:55:1f:7e:a9:5f:0d:
         1c:5c:a2:3a:86:dc:53:8b:04:71:48:2d:5c:36:6f:9c:93:78:
         86:0e:19:5f:69:43:14:2c:f3:2c:30:54:08:88:31:0a:03:dc:
         60:9b:02:18:4b:9e:be:d9:01:10:2b:43:e6:94:f2:65:9c:02:
         ca:d7:4a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:09:39 2026 by rpki-client