This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/W7l72QV2vdVMrD8SuARpuo7GX-s.roa
File:                     W7l72QV2vdVMrD8SuARpuo7GX-s.roa (raw, json)
Hash identifier:          /Nd+zvjSO0M+A93rO4AFFCh0OOhQpr00TEIBKuESGqs=
Subject key identifier:   5B:B9:7B:D9:05:76:BD:D5:4C:AC:3F:12:B8:04:69:BA:8E:C6:5F:EB
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       019B77596856276E0AA7D90B02C3F01C7BA0
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/W7l72QV2vdVMrD8SuARpuo7GX-s.roa
Signing time:             Thu 01 Jan 2026 02:18:26 +0000
ROA not before:           Thu 01 Jan 2026 02:18:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62074
IP address blocks:        188.212.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:59:68:56:27:6e:0a:a7:d9:0b:02:c3:f0:1c:7b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jan  1 02:18:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5bb97bd90576bdd54cac3f12b80469ba8ec65feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:90:32:91:07:fe:97:ee:e0:71:6d:b6:0c:
                    65:95:fa:7d:f4:0d:4a:98:a2:51:3d:a6:9c:40:69:
                    97:dd:74:a5:3c:c4:9e:2f:3b:7f:a4:7b:36:92:32:
                    b0:13:91:01:38:50:3f:64:72:35:aa:7a:24:70:5f:
                    5c:ef:b3:ca:4d:f3:f4:aa:ed:5d:58:85:8b:be:6e:
                    ad:8e:5a:9c:9f:5b:00:1a:f1:99:be:dc:fe:47:c8:
                    8b:78:0f:1f:f1:32:ec:cd:07:67:f2:69:18:fb:7b:
                    ba:93:93:1b:1b:14:c6:27:b1:bc:ef:9e:8f:95:b9:
                    90:a8:87:db:a1:e8:54:1d:1c:de:c2:d1:35:2d:ca:
                    bd:94:8d:eb:8c:82:10:7f:9e:a4:d0:75:1b:ad:0c:
                    21:8d:a0:d0:eb:7d:e4:05:ce:82:72:a1:4b:7d:de:
                    bd:bc:b6:54:eb:09:cc:59:a7:20:6a:e8:36:4a:25:
                    bd:b3:f8:51:d1:70:73:ef:12:76:4f:4f:0b:df:3c:
                    26:64:c3:8d:07:b3:0f:b3:06:94:95:3b:3e:02:61:
                    39:82:82:6a:97:8a:a4:f5:d7:d9:63:63:5c:53:d4:
                    53:a3:9b:f6:a5:3d:43:70:0d:77:15:c7:74:52:e1:
                    3d:d5:14:9f:40:d1:93:43:e1:24:b1:a8:15:b1:ba:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B9:7B:D9:05:76:BD:D5:4C:AC:3F:12:B8:04:69:BA:8E:C6:5F:EB
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/W7l72QV2vdVMrD8SuARpuo7GX-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.212.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:8b:64:73:5e:85:c1:a3:76:50:81:16:52:c4:62:18:eb:4b:
         2d:f1:d8:07:58:34:4a:ee:96:b0:c8:32:cc:f0:f8:c9:ec:1c:
         62:1a:49:e8:d0:17:0c:34:32:9f:d1:31:a6:3b:ad:8a:c1:a2:
         56:d6:45:56:b7:6b:ed:f3:86:fa:2d:a0:68:b3:a2:af:ef:1c:
         b7:fe:b9:a5:c2:d1:4a:48:d0:60:f4:09:b7:d1:6c:3d:8b:88:
         4e:86:d8:a7:7f:97:5d:17:cd:5d:fd:c5:53:a6:d0:23:38:ac:
         aa:e6:b3:36:ef:c7:5a:25:e9:da:4a:02:98:95:90:a0:f2:0c:
         18:66:62:34:c4:56:97:8a:c5:d5:1f:4a:6f:ac:a4:fb:73:f7:
         1f:98:f3:5d:10:d8:89:35:91:6d:95:2e:a5:5e:db:65:35:6a:
         bd:88:26:79:d9:a8:ab:b5:a3:ae:03:2d:37:a1:c1:87:27:74:
         63:a0:75:d1:eb:e2:53:56:a0:b5:82:02:f1:e2:61:40:7d:52:
         94:3c:a8:16:e0:01:3d:bb:cb:d9:e7:e1:13:09:c4:2e:6d:54:
         4e:1e:3e:03:dc:67:c7:21:65:ea:13:3b:43:fe:bc:b9:8e:d9:
         b4:8e:90:8e:1e:da:a7:c1:61:9b:fc:dc:06:05:de:7f:da:08:
         96:6c:36:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:35:38 2026 by rpki-client