This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/987Zwgum7y9tKPJjuXS38mHP0Lw.roa
File:                     987Zwgum7y9tKPJjuXS38mHP0Lw.roa (raw, json)
Hash identifier:          ut78Qv7pqvcSD1j02UWSdM1alir0uFxN9Cz1xvUBXlM=
Subject key identifier:   F7:CE:D9:C2:0B:A6:EF:2F:6D:28:F2:63:B9:74:B7:F2:61:CF:D0:BC
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       019B775946B04D6302DE54B0532BF25F88BE
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/987Zwgum7y9tKPJjuXS38mHP0Lw.roa
Signing time:             Thu 01 Jan 2026 02:18:18 +0000
ROA not before:           Thu 01 Jan 2026 02:18:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     35664
IP address blocks:        46.102.108.0/24 maxlen: 24
                          94.176.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:46:b0:4d:63:02:de:54:b0:53:2b:f2:5f:88:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jan  1 02:18:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f7ced9c20ba6ef2f6d28f263b974b7f261cfd0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:8b:22:30:f1:32:b7:b3:24:3e:44:4c:03:
                    30:30:10:3c:8a:5f:12:ca:77:f6:7d:47:fc:06:9a:
                    e4:cd:c3:36:e3:0c:bc:19:b9:ad:3b:0d:9c:4e:86:
                    bd:ef:d2:78:c1:47:e8:49:6c:25:87:ec:f4:fc:c1:
                    af:4d:8d:25:d8:d6:67:69:16:dc:0c:62:97:5c:61:
                    e7:e1:4f:02:6e:bd:32:da:b9:72:b5:87:8a:b7:98:
                    83:8a:89:0a:ce:9a:10:14:07:a4:2c:ab:4f:80:f3:
                    03:c1:1c:59:ff:6a:7f:be:cd:a1:7f:5e:f5:e0:71:
                    d1:0e:d6:d2:d9:0d:53:78:3b:2f:26:95:a6:ec:57:
                    b2:75:84:bd:eb:30:21:d6:b4:bd:b9:00:6b:60:5c:
                    b2:25:ec:a1:93:f2:d2:26:4a:95:2f:b5:60:36:4c:
                    7d:3c:3a:f8:75:ba:b5:75:5c:3a:fa:18:c2:3d:f5:
                    8a:e5:f1:bf:0c:1f:b1:43:ff:1a:52:9e:83:e7:a4:
                    3b:45:e1:4e:ee:a7:b6:59:38:27:12:ea:ff:8a:90:
                    33:71:2a:21:ff:d0:b0:99:c7:a2:e3:82:b1:1f:b5:
                    03:0c:eb:90:c2:c1:d3:34:78:d1:c3:eb:4e:9c:55:
                    5d:b8:d1:88:2c:ca:4c:e3:59:e3:18:28:8f:47:68:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CE:D9:C2:0B:A6:EF:2F:6D:28:F2:63:B9:74:B7:F2:61:CF:D0:BC
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/987Zwgum7y9tKPJjuXS38mHP0Lw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.102.108.0/24
                  94.176.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:ac:88:e5:53:15:92:f4:b0:64:fd:96:64:44:b8:cb:08:f9:
         42:75:dc:41:32:25:1c:8e:0b:dd:4e:e3:40:9a:b0:b5:a8:55:
         68:c0:66:7f:ca:7f:b0:60:bf:f9:db:30:42:5f:50:e8:ec:c0:
         6f:3d:0a:6b:0c:7d:33:33:a9:c5:47:b6:1e:2c:c4:ac:f5:aa:
         b5:3e:74:1b:73:38:34:91:65:91:d9:53:35:35:33:2a:8d:d1:
         6f:b2:d6:e8:17:6c:e2:5c:75:52:3e:27:41:ab:58:bd:4e:64:
         b7:c7:55:7f:f7:28:d9:86:25:cd:5e:1b:51:48:65:49:73:16:
         24:3f:c1:52:ee:74:ed:54:23:8f:eb:d2:07:7e:2e:ec:0c:86:
         1d:2c:6d:6e:b5:81:b0:a7:9a:5a:54:a6:48:b0:c6:ef:97:99:
         b6:41:4a:64:c4:2a:24:c9:3d:d0:1d:6d:62:1a:16:c6:9a:e1:
         ec:50:67:2b:96:25:1d:67:69:d7:d6:1d:ee:d5:0c:ea:1d:ba:
         02:f1:e1:8f:fb:1d:4b:ab:23:10:f3:24:72:09:b0:7d:72:a4:
         de:21:cc:90:b3:be:d8:ae:e7:53:04:40:22:0f:08:ba:ef:c8:
         28:58:a7:17:4d:01:4c:84:7a:f9:eb:6f:d6:cf:1e:b9:d0:8a:
         9c:c5:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:04:47 2026 by rpki-client