This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/f078Ugq10Wo6YaxLwgbU88S2yDk.roa
File:                     f078Ugq10Wo6YaxLwgbU88S2yDk.roa (raw, json)
Hash identifier:          NfdEYroLgQuj2yntUSzl/hfdTDOIZxXu0Y5Dfx1m/Z4=
Subject key identifier:   7F:4E:FC:52:0A:B5:D1:6A:3A:61:AC:4B:C2:06:D4:F3:C4:B6:C8:39
Certificate issuer:       /CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
Certificate serial:       019B7E38EF5E4D937ECEBD698DEDC0059E8A
Authority key identifier: 3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/f078Ugq10Wo6YaxLwgbU88S2yDk.roa
Signing time:             Fri 02 Jan 2026 10:20:19 +0000
ROA not before:           Fri 02 Jan 2026 10:20:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     28878
IP address blocks:        176.110.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:ef:5e:4d:93:7e:ce:bd:69:8d:ed:c0:05:9e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da4c2fbdf10f8231f3df531ce5a3a2e3b23cefc
        Validity
            Not Before: Jan  2 10:20:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f4efc520ab5d16a3a61ac4bc206d4f3c4b6c839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:7d:22:47:cf:d9:b9:e4:80:fa:7c:23:9d:
                    c8:7e:23:8d:74:ec:9b:66:7b:97:30:68:20:da:6f:
                    d9:cc:56:ce:3e:65:77:59:ab:1e:bc:67:f6:e4:5a:
                    8a:07:12:60:33:f7:7d:68:4e:3b:61:f1:1a:1c:aa:
                    ca:ed:ae:d2:18:93:1c:b4:c8:9f:2c:ad:9b:2e:6b:
                    b3:2a:b2:c6:a3:23:63:32:aa:3f:98:e7:0e:1c:b8:
                    71:83:c7:db:63:13:3d:fe:67:8a:53:0d:5b:50:e0:
                    92:f9:7f:45:f7:78:7d:31:3d:2e:2d:ae:04:ab:68:
                    90:18:97:1a:ce:09:57:ce:1e:e6:7c:64:fd:a1:08:
                    75:27:3f:b1:e6:e7:87:35:85:ea:42:2b:1e:c6:16:
                    7a:80:59:d1:5e:81:cd:91:5f:6b:9e:64:7a:be:8c:
                    ec:3f:5d:24:77:9d:60:e3:16:7f:e1:4c:c1:b8:5e:
                    79:0b:2f:46:23:e1:db:b5:84:53:3d:8d:6b:95:74:
                    56:cf:bd:a1:eb:d4:7f:d8:b2:76:67:1b:ef:15:59:
                    6e:54:cd:f9:58:2b:af:4d:c7:73:3f:42:74:63:ae:
                    00:23:31:87:d7:7e:05:f7:2a:04:f6:a0:bd:7f:56:
                    3f:08:f6:96:0f:57:61:ef:e4:48:c9:57:c6:3b:f9:
                    dc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4E:FC:52:0A:B5:D1:6A:3A:61:AC:4B:C2:06:D4:F3:C4:B6:C8:39
            X509v3 Authority Key Identifier:
                keyid:3D:A4:C2:FB:DF:10:F8:23:1F:3D:F5:31:CE:5A:3A:2E:3B:23:CE:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/f078Ugq10Wo6YaxLwgbU88S2yDk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/349c58-fbb0-4ddd-a080-d2c97d65efa8/1/PaTC-98Q-CMfPfUxzlo6Ljsjzvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.110.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:37:ca:e4:5d:32:90:05:3f:7b:71:6d:c2:48:eb:87:a6:66:
         1b:35:c0:cf:bf:3b:8d:86:cc:40:46:0e:f3:ac:02:a4:34:97:
         d3:37:a2:bb:cd:00:ea:7e:86:81:75:7c:b9:d6:87:10:55:24:
         b1:19:67:af:98:19:f2:f9:e7:8a:d9:0d:8d:92:4c:f2:b8:d9:
         bf:4e:05:cb:ce:0b:82:b7:b5:26:f0:e9:78:da:dd:26:c6:73:
         c3:59:54:b9:84:92:73:91:77:81:f1:4a:13:69:2b:bb:fa:22:
         97:f3:f1:6c:87:20:ae:09:20:1a:c1:12:b8:ce:34:13:30:82:
         a2:6e:18:ea:e3:01:01:2b:a0:32:6f:cb:8c:c8:91:f3:64:58:
         4d:5a:71:8a:dd:54:3b:e1:03:b1:70:b7:18:d7:50:a8:3f:5a:
         dc:62:1c:9b:af:12:e9:c6:4c:4a:15:eb:86:1d:ff:98:09:35:
         d0:3b:33:a3:24:58:10:56:b8:d2:8d:04:b9:fe:f4:f6:22:99:
         8a:c4:d3:9d:2a:8c:29:1c:c5:a4:4f:77:2f:95:79:b7:40:28:
         c3:db:c3:2d:6b:12:f6:51:7e:89:b8:9d:51:af:0d:9a:5e:97:
         f7:23:ef:57:2f:05:b0:54:6e:bc:1e:eb:1a:ac:c3:86:bf:0d:
         72:23:d6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:03:57 2026 by rpki-client