This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/US44wcphD6LlMjq_XXuf83C94AM.roa
File:                     US44wcphD6LlMjq_XXuf83C94AM.roa (raw, json)
Hash identifier:          ZoeHyaeNCMvwVI+LzE+c+Ul6H+jb9UOCj4YZe6jJhyM=
Subject key identifier:   51:2E:38:C1:CA:61:0F:A2:E5:32:3A:BF:5D:7B:9F:F3:70:BD:E0:03
Certificate issuer:       /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial:       019B79ECC1F8608167EB036D886D8F2CBC7C
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/US44wcphD6LlMjq_XXuf83C94AM.roa
Signing time:             Thu 01 Jan 2026 14:18:37 +0000
ROA not before:           Thu 01 Jan 2026 14:18:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     202472
IP address blocks:        94.240.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:c1:f8:60:81:67:eb:03:6d:88:6d:8f:2c:bc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
        Validity
            Not Before: Jan  1 14:18:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=512e38c1ca610fa2e5323abf5d7b9ff370bde003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d0:9f:9f:76:f4:17:89:4b:a1:46:4c:54:3d:
                    2e:c9:c8:e4:bc:98:a2:d6:67:6d:5e:e0:f7:3b:f0:
                    ec:f7:5c:3a:cc:c9:6e:5e:73:16:51:f2:91:61:51:
                    16:44:80:a7:db:43:fb:af:17:7c:b1:89:73:6c:30:
                    6a:28:11:4e:2d:2e:bf:60:61:75:10:45:e7:49:d3:
                    f0:b0:24:18:d4:0b:e3:fd:82:3e:35:76:a9:c8:8f:
                    b6:b9:99:86:f0:21:f3:58:3b:09:95:42:4f:34:01:
                    28:9d:ee:60:bf:ba:b3:52:4a:61:e7:af:79:21:6a:
                    e4:98:2a:d1:fb:4e:58:bb:50:6b:27:15:7a:59:52:
                    0c:f4:28:c3:53:8a:81:38:ad:8a:39:5c:b8:31:2c:
                    9f:a2:fd:07:b9:a4:33:e0:57:05:03:27:71:eb:2c:
                    2f:99:4e:55:0e:95:17:09:80:ac:30:93:f8:4d:db:
                    05:46:c3:0b:b5:39:71:9c:4c:35:c5:6d:1c:e0:99:
                    eb:09:33:c8:9b:e1:9d:1b:0b:11:87:4d:e4:d4:25:
                    b8:64:4a:8d:21:ad:ac:9b:23:36:5a:76:4e:44:f6:
                    9f:1f:af:9e:37:ae:09:e7:45:a1:a8:2c:76:d1:d2:
                    eb:f0:b0:0f:7b:b1:dc:77:07:d0:fc:32:4f:14:16:
                    0f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2E:38:C1:CA:61:0F:A2:E5:32:3A:BF:5D:7B:9F:F3:70:BD:E0:03
            X509v3 Authority Key Identifier:
                keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/US44wcphD6LlMjq_XXuf83C94AM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.240.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:f1:02:bd:59:f5:59:ef:80:7f:46:70:08:93:90:0f:89:29:
         cd:39:19:6a:2f:de:f7:4a:68:41:d5:9b:82:dd:e2:f0:04:e8:
         0f:14:59:4f:f2:13:9b:fd:32:8d:21:24:31:7c:68:5f:2e:af:
         fc:9e:56:49:86:8f:a8:47:0d:3d:dc:da:b9:57:2b:6e:11:a8:
         a4:0d:44:1f:49:07:14:d2:b6:d0:79:fc:a0:3d:57:25:a7:3d:
         90:87:f5:c6:fb:ba:67:ab:c6:8d:d9:f4:6a:bb:d1:c1:19:70:
         ae:82:f7:ec:3a:fa:f4:21:0a:97:60:f9:e4:03:8c:fe:34:b1:
         54:42:7b:21:11:1a:ea:29:cc:9b:49:37:d0:10:d5:fd:73:61:
         d2:db:ad:06:9a:a0:ac:46:32:ea:7e:27:14:61:a8:60:bf:f6:
         b0:07:9a:00:a6:cf:4a:f5:d8:5e:1a:b3:53:8e:99:03:7a:4b:
         42:f9:0a:c4:0d:0f:7d:21:4b:10:e5:3d:c7:26:30:4b:10:2f:
         e5:98:7f:75:29:41:8d:d8:8e:f8:db:8b:27:d6:d6:e3:1b:c1:
         b4:dc:e2:e8:2a:22:b0:29:95:f5:ca:73:d3:10:ff:b9:1a:52:
         5c:01:2b:b7:d0:20:8f:d2:cc:20:c6:61:47:3e:ab:7a:89:33:
         29:a7:c8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:31:46 2026 by rpki-client