This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/wC7Btg2M06QDjiihU8mKSzWp5h8.roa
File:                     wC7Btg2M06QDjiihU8mKSzWp5h8.roa (raw, json)
Hash identifier:          kuu4Nks2Rjh8eFlTc82CmwEI6yyNJcnC/Z9zLfsyT1A=
Subject key identifier:   C0:2E:C1:B6:0D:8C:D3:A4:03:8E:28:A1:53:C9:8A:4B:35:A9:E6:1F
Certificate issuer:       /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial:       019B7AC86E9D4D65813D5DE6C4A0F469DFBD
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/wC7Btg2M06QDjiihU8mKSzWp5h8.roa
Signing time:             Thu 01 Jan 2026 18:18:34 +0000
ROA not before:           Thu 01 Jan 2026 18:18:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207199
IP address blocks:        37.140.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:6e:9d:4d:65:81:3d:5d:e6:c4:a0:f4:69:df:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
        Validity
            Not Before: Jan  1 18:18:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c02ec1b60d8cd3a4038e28a153c98a4b35a9e61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:30:06:0c:91:78:b2:09:09:a3:10:90:11:
                    cb:05:ce:43:00:74:ed:ff:ba:4e:c8:20:c8:4f:41:
                    0b:4c:18:2d:fb:e0:3e:f2:2d:20:f2:65:88:ca:7e:
                    2b:4f:3d:42:c1:cd:d3:3e:d9:38:16:91:96:67:3d:
                    b9:d4:38:68:24:65:ff:95:29:8e:17:2a:c1:d3:41:
                    ea:4d:ee:d0:95:e6:a5:d5:5e:5e:4e:5c:28:9d:aa:
                    9e:54:3d:1f:29:0d:37:43:8c:45:c0:a9:b8:95:0a:
                    66:90:0e:2d:be:25:09:1a:cb:91:b1:3d:b5:81:d9:
                    78:39:b8:27:56:1d:d5:9f:b2:0b:cb:01:84:4c:95:
                    66:17:02:2d:95:97:06:85:d1:0d:17:55:d7:6f:36:
                    6e:e5:88:90:19:6e:e0:0b:d8:a8:67:eb:48:21:7a:
                    77:3d:3d:e5:74:99:7a:60:f7:54:32:22:67:d9:5f:
                    ea:0c:a4:5b:d7:45:8b:23:e5:e9:66:7e:29:65:95:
                    2d:00:3e:6c:bc:20:1b:f5:a2:83:4a:a4:7c:01:1c:
                    94:16:88:4d:e8:ec:10:a3:0a:f3:f2:1c:f5:7b:5e:
                    71:47:77:e3:ad:78:47:33:f4:d2:2f:4b:af:8e:34:
                    2e:bf:1d:66:c5:49:b2:83:96:aa:da:78:39:53:4e:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2E:C1:B6:0D:8C:D3:A4:03:8E:28:A1:53:C9:8A:4B:35:A9:E6:1F
            X509v3 Authority Key Identifier:
                keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/wC7Btg2M06QDjiihU8mKSzWp5h8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.140.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:60:e4:1b:a3:3e:80:19:92:a4:ab:31:55:14:a7:38:11:48:
         59:43:82:1c:7a:f6:f3:6f:29:93:00:8f:fc:1b:55:f6:ac:bc:
         5d:61:a9:8e:a2:61:98:ec:f6:1e:bc:45:7c:4b:e2:be:98:9e:
         49:27:fe:40:a1:f8:c2:86:61:0c:66:a7:14:61:27:e3:70:10:
         bf:15:43:27:d2:ce:18:cf:d3:b4:57:a8:34:4d:ec:9c:39:3c:
         f7:3d:fd:d2:58:f8:f1:84:28:6f:bf:cd:d5:18:00:f6:74:17:
         4c:da:2f:53:20:f9:05:bd:33:d8:0b:01:8a:55:9f:9a:d5:02:
         5f:ad:15:5b:6c:6a:48:99:e7:fb:ca:2f:43:eb:3f:9b:0f:db:
         82:ce:1e:77:20:c0:80:7b:fc:3c:8f:d4:c2:bf:ea:a9:a4:2c:
         1b:3e:8b:af:5f:21:3d:7c:94:f5:af:84:fe:a8:ca:c4:6a:0b:
         54:d4:7b:0a:c1:5a:b8:09:d5:d7:b9:55:f1:e7:cc:f2:eb:ed:
         e7:52:4c:77:80:f4:52:6c:c3:e2:27:94:dc:39:f9:5a:a0:3a:
         e7:3f:87:b9:28:c1:cf:e2:c0:6d:58:00:97:58:61:90:24:c8:
         3e:9f:87:44:f9:f7:9d:a1:75:90:63:50:93:8f:cc:38:de:c1:
         7f:ba:b8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:07:04 2026 by rpki-client