This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9tCT97HMKf6Vu3lYb84TRsC9dQo.roa
File:                     9tCT97HMKf6Vu3lYb84TRsC9dQo.roa (raw, json)
Hash identifier:          pPDvqO0b+oojZ2iJMEU88Q2z2RhhzplmDWJ4VjUFL3k=
Subject key identifier:   F6:D0:93:F7:B1:CC:29:FE:95:BB:79:58:6F:CE:13:46:C0:BD:75:0A
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       019B7E37E739E42184E38111832BD4A44DB9
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9tCT97HMKf6Vu3lYb84TRsC9dQo.roa
Signing time:             Fri 02 Jan 2026 10:19:11 +0000
ROA not before:           Fri 02 Jan 2026 10:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47376
IP address blocks:        37.32.44.0/24 maxlen: 24
                          37.32.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:e7:39:e4:21:84:e3:81:11:83:2b:d4:a4:4d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Jan  2 10:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f6d093f7b1cc29fe95bb79586fce1346c0bd750a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:5d:89:08:f2:62:29:a9:f6:64:f6:d7:fc:
                    ef:94:46:37:b6:19:25:f1:ed:06:cc:e4:1f:d3:01:
                    ee:8b:6d:49:6c:ff:06:c4:3b:aa:e9:e2:e6:90:5a:
                    4f:d7:e4:aa:20:2e:02:74:41:72:09:bf:b7:97:ec:
                    85:0a:ed:11:e8:15:0f:1f:b3:a9:07:58:f7:6c:59:
                    5a:da:38:f0:64:1c:4d:10:10:3c:ff:d9:93:82:72:
                    df:d2:01:4f:de:32:6f:94:d7:42:89:7e:4a:8e:7c:
                    e8:72:f1:cd:6c:77:de:53:c8:37:bd:bb:42:59:c3:
                    d8:fa:e0:b2:6c:86:c5:ce:a8:21:a1:f0:04:6c:53:
                    d7:fc:ff:81:f4:9e:31:ba:4c:71:a0:0e:1f:64:0e:
                    62:45:b6:74:ef:f8:3c:33:02:da:d6:9e:bb:dc:de:
                    c7:c3:2b:b2:33:b8:8e:c5:c1:c0:a0:cf:fe:27:f8:
                    44:a9:27:94:28:27:42:0a:18:66:c1:fe:ec:11:09:
                    e9:c0:d1:2b:c1:85:fc:91:8d:5e:77:29:8b:ef:31:
                    ad:00:04:be:da:c0:ab:83:f4:2a:8a:a9:05:a4:e4:
                    81:7a:f8:a7:eb:95:9c:6d:22:da:88:26:9d:c4:b3:
                    e9:95:58:2d:96:91:21:01:32:43:05:63:a1:25:be:
                    e7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D0:93:F7:B1:CC:29:FE:95:BB:79:58:6F:CE:13:46:C0:BD:75:0A
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/9tCT97HMKf6Vu3lYb84TRsC9dQo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.32.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:bd:63:43:78:78:c9:90:c8:bf:dc:4a:0a:87:a6:10:06:7b:
         d4:2d:69:2a:61:73:d8:6a:32:59:f4:52:4e:dc:89:5c:5c:a3:
         26:26:4d:88:ef:86:46:a5:0a:67:f3:fa:1e:d5:86:fc:15:7a:
         1b:d9:80:fb:13:cc:0e:dd:1e:ec:6f:a0:04:75:e2:81:18:44:
         ac:0f:50:6e:3f:3c:7e:56:ae:4a:11:d2:7b:72:80:d5:d3:e2:
         01:6f:2c:43:b5:35:aa:be:c2:86:52:23:82:6d:b3:16:6e:f0:
         01:54:51:b3:34:4e:ed:e5:4d:1f:15:fd:57:dc:94:cc:f3:8f:
         e4:8a:3e:1b:1d:90:8d:98:0a:ee:58:e5:03:63:c8:69:66:69:
         53:54:ad:cc:d7:98:d7:87:a6:f4:a6:cb:a2:10:63:3d:92:f6:
         0e:48:93:77:df:58:4d:29:c4:0a:3d:08:85:f8:8a:b7:ca:71:
         c1:07:f1:c9:9c:b1:2c:a1:5f:a8:cf:dc:b3:88:a5:07:bc:3a:
         6a:90:9b:75:ab:dc:b3:7f:f1:3b:4a:8b:6e:f4:d0:2a:5b:69:
         f5:45:74:e9:65:2a:61:2a:a9:9b:54:e4:6b:b5:38:b9:08:8f:
         9d:42:dd:d9:59:46:86:a0:fe:c1:e6:1e:4b:2f:fe:e8:17:a4:
         a1:f3:ba:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:48:04 2026 by rpki-client