This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/elshSueRTtLz9IXDe5Idx8MlXE0.roa
File:                     elshSueRTtLz9IXDe5Idx8MlXE0.roa (raw, json)
Hash identifier:          fT4EOAp0/wWemJb7yt6TZdWcp4uWa2BxyOEfDAqAAAc=
Subject key identifier:   7A:5B:21:4A:E7:91:4E:D2:F3:F4:85:C3:7B:92:1D:C7:C3:25:5C:4D
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       019B797ED08968BFD6ECA8EA73B582A5C66A
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/elshSueRTtLz9IXDe5Idx8MlXE0.roa
Signing time:             Thu 01 Jan 2026 12:18:32 +0000
ROA not before:           Thu 01 Jan 2026 12:18:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200723
IP address blocks:        37.63.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:d0:89:68:bf:d6:ec:a8:ea:73:b5:82:a5:c6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  1 12:18:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7a5b214ae7914ed2f3f485c37b921dc7c3255c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:e8:6e:29:ff:ad:ce:02:05:97:ca:63:6b:
                    d3:e6:7c:58:22:9b:52:eb:00:8a:d5:53:5a:68:a3:
                    f1:8d:98:e0:6e:9f:b6:26:99:63:2d:c9:3e:af:e7:
                    a1:b1:6a:fa:37:aa:c4:3b:4d:88:63:a2:3a:19:7e:
                    21:40:c9:cd:cf:00:70:2b:2c:19:a2:b6:b2:31:b6:
                    6a:8a:a1:7c:f4:65:94:27:1b:0c:47:28:b1:71:06:
                    eb:79:43:d6:86:f6:fd:78:e4:e6:32:c1:bb:33:81:
                    a1:94:09:bd:b7:ea:2b:39:44:21:1b:9f:e6:af:2e:
                    b2:c7:7d:cf:9e:35:f0:d8:ef:ff:fb:9a:7d:7b:b7:
                    a0:f0:30:4e:d5:aa:58:01:78:d6:7a:22:99:66:91:
                    39:af:a0:18:ff:ba:ee:80:12:c5:8d:d8:a4:73:76:
                    88:cc:64:0b:17:fb:27:75:26:b0:6b:3a:dd:4f:62:
                    07:86:77:d1:84:dc:fd:d0:03:48:a4:3c:68:34:2d:
                    eb:0c:b6:a4:5c:8a:56:a9:97:d5:41:07:0b:f7:7a:
                    db:14:d1:6b:d3:75:b4:5e:97:53:71:06:68:00:d4:
                    f9:a1:70:a8:6b:6e:2d:08:3a:0f:ad:5b:12:6c:42:
                    51:0e:aa:c3:6c:98:b6:7c:7f:2f:97:dd:e5:95:98:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5B:21:4A:E7:91:4E:D2:F3:F4:85:C3:7B:92:1D:C7:C3:25:5C:4D
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/elshSueRTtLz9IXDe5Idx8MlXE0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.63.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:9e:e0:29:3c:08:90:b3:a5:78:c7:02:ed:fa:66:bd:4b:53:
         08:fc:1d:b3:29:02:9c:5d:b3:9d:07:60:e7:82:d7:11:33:4f:
         99:b8:1c:be:fc:10:20:35:4d:b3:8a:68:75:ce:d9:07:7d:66:
         5c:b7:8e:cf:a5:2a:7d:d8:fc:17:04:d6:47:ac:06:b8:1c:8f:
         d8:16:df:65:c7:81:9e:54:16:1e:dd:61:ae:14:af:aa:b3:bb:
         c7:80:65:e2:e5:c6:db:0a:80:06:58:d5:e5:93:b6:56:83:ef:
         89:88:ea:7e:b6:57:7c:99:7d:ac:ea:0c:56:ea:b4:f4:1f:4b:
         f4:7d:89:f8:d7:a0:ca:a4:32:48:04:b5:c1:5d:12:73:e6:45:
         c9:d9:1a:0f:37:a4:19:d4:ea:a3:64:b6:38:fe:c1:b8:f8:e1:
         98:67:87:46:56:ed:98:e3:da:ef:1c:24:0e:33:45:74:9e:5c:
         43:e3:84:32:00:38:9e:48:d1:db:c3:01:8e:5d:37:02:a8:35:
         7c:2b:0c:a5:2a:5f:ba:54:d1:8b:54:28:13:0b:47:63:f7:0e:
         91:58:d8:89:44:bf:94:f5:91:f9:e3:83:2c:0a:b9:e9:08:15:
         0f:f2:ed:13:94:bd:4f:e7:b6:fd:95:c4:e1:5c:66:df:2d:44:
         fe:c4:3c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:24:26 2026 by rpki-client