This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/DDJ2Ku9PtCg5SsS6DZq5i7HooGA.roa
File:                     DDJ2Ku9PtCg5SsS6DZq5i7HooGA.roa (raw, json)
Hash identifier:          KxL6L8WMtAezvZY85hKd4t9cB3JBSMBU1InlyKDbFbo=
Subject key identifier:   0C:32:76:2A:EF:4F:B4:28:39:4A:C4:BA:0D:9A:B9:8B:B1:E8:A0:60
Certificate issuer:       /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial:       019BE507C4FCD80C73C9E114915D165E0994
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/DDJ2Ku9PtCg5SsS6DZq5i7HooGA.roa
Signing time:             Thu 22 Jan 2026 09:27:30 +0000
ROA not before:           Thu 22 Jan 2026 09:27:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43242
IP address blocks:        78.135.0.0/22 maxlen: 22
                          78.135.4.0/22 maxlen: 22
                          78.135.8.0/21 maxlen: 21
                          78.135.16.0/20 maxlen: 20
                          78.135.32.0/19 maxlen: 19
                          78.135.32.0/22 maxlen: 22
                          78.135.36.0/22 maxlen: 22
                          78.135.40.0/22 maxlen: 22
                          78.135.44.0/22 maxlen: 22
                          78.135.48.0/22 maxlen: 22
                          78.135.52.0/22 maxlen: 22
                          78.135.56.0/22 maxlen: 22
                          78.135.60.0/22 maxlen: 22
                          185.171.92.0/22 maxlen: 22
                          185.171.92.0/24 maxlen: 24
                          185.171.93.0/24 maxlen: 24
                          185.171.94.0/24 maxlen: 24
                          185.171.95.0/24 maxlen: 24
                          2a0a:1900::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e5:07:c4:fc:d8:0c:73:c9:e1:14:91:5d:16:5e:09:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
        Validity
            Not Before: Jan 22 09:27:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=0c32762aef4fb428394ac4ba0d9ab98bb1e8a060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:74:32:61:57:b8:33:b6:05:12:3c:ce:3d:ff:
                    8f:06:15:17:98:92:be:18:0d:c7:0b:25:8d:bf:e4:
                    5b:ee:88:1f:4b:fa:f6:ff:b1:72:01:4b:58:b3:83:
                    08:63:4c:6e:b6:cd:db:81:20:86:b3:8f:3d:21:02:
                    14:30:48:b1:02:38:86:e2:48:7d:30:b4:ba:ed:26:
                    6e:a7:fe:1f:09:54:07:f4:68:4e:76:2a:f9:25:69:
                    c5:e7:9e:09:d3:e6:ce:f5:34:df:7c:1e:46:52:0b:
                    2d:89:4e:21:f6:cb:5e:bd:f4:ae:3c:2e:ae:6c:e0:
                    f6:74:5b:a1:f1:42:2a:39:68:6c:c0:05:04:04:30:
                    bb:04:54:0d:36:e6:51:8d:8f:c8:4d:26:5f:24:01:
                    4d:06:af:fe:6c:11:54:fc:a9:8c:76:3e:fc:a2:0c:
                    66:3e:1e:75:d9:d9:dd:6a:12:70:71:9d:ca:65:73:
                    28:53:29:41:cf:bd:fc:dc:03:df:e6:0c:79:16:1c:
                    cb:04:eb:b0:b6:4c:91:7e:a6:8d:6b:83:c6:00:03:
                    17:6a:9c:42:29:3b:e3:ad:cc:0d:bc:dc:11:4c:0f:
                    d3:72:20:3b:8e:58:84:30:6f:4d:9c:6e:1a:8e:83:
                    a3:dc:9f:f5:05:1f:fe:4c:36:cb:7d:b6:33:96:f2:
                    71:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:32:76:2A:EF:4F:B4:28:39:4A:C4:BA:0D:9A:B9:8B:B1:E8:A0:60
            X509v3 Authority Key Identifier:
                keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/DDJ2Ku9PtCg5SsS6DZq5i7HooGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.135.0.0/18
                  185.171.92.0/22
                IPv6:
                  2a0a:1900::/29

    Signature Algorithm: sha256WithRSAEncryption
         06:a7:7f:7e:6f:8e:a9:5d:ad:73:03:ef:24:c4:f5:ef:62:8f:
         8f:b4:64:0e:eb:9f:c8:52:0e:7f:4e:15:bc:3f:b1:de:40:23:
         74:78:60:e9:76:87:36:c4:d9:44:75:b5:26:05:19:19:a3:a5:
         ea:22:5d:47:20:da:91:c6:70:08:14:08:c6:82:ec:59:7a:31:
         c3:31:3e:2e:b2:07:13:6e:64:6c:d3:c1:f9:3b:c0:f5:4d:4c:
         17:50:a3:0d:b7:94:25:24:dc:4d:2c:00:b0:b4:3a:10:81:48:
         4a:61:dc:0c:20:44:62:cf:e8:00:db:f6:d7:e8:b0:40:79:78:
         7c:a0:dc:2f:d4:1b:10:dd:0f:a3:40:54:dd:b2:8a:7f:c1:a4:
         dd:af:51:95:0a:67:aa:ce:51:94:0d:2d:ec:65:a9:5d:ce:d2:
         8d:f0:1f:dd:89:d8:e8:7e:d5:fc:c1:43:c5:96:56:fd:19:4e:
         54:ab:3d:ff:71:7e:22:0f:eb:4f:78:02:64:4a:cb:34:e1:c7:
         23:b3:6d:14:e6:cf:68:18:14:fd:bc:74:81:31:70:ab:50:7d:
         04:2c:ad:d8:ef:85:bb:7e:e7:53:0b:e6:2c:81:65:c8:5a:48:
         ef:b2:6e:69:4b:36:0f:f8:52:4b:aa:15:17:38:0f:64:bd:2a:
         65:8c:47:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:38 2026 by rpki-client