This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/m78D8LYX4KhY1xsBrwTm5nu8thA.roa
File:                     m78D8LYX4KhY1xsBrwTm5nu8thA.roa (raw, json)
Hash identifier:          e0yqakiAC0DmE2+ffVaENZ+z432+RyIMVwR3Q2dQuY4=
Subject key identifier:   9B:BF:03:F0:B6:17:E0:A8:58:D7:1B:01:AF:04:E6:E6:7B:BC:B6:10
Certificate issuer:       /CN=592c699f8fecbec847d3390b4658dd3cb21c52b3
Certificate serial:       019B7DCB5EC481B8C097B9E6B2E2D52A25A6
Authority key identifier: 59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/m78D8LYX4KhY1xsBrwTm5nu8thA.roa
Signing time:             Fri 02 Jan 2026 08:20:38 +0000
ROA not before:           Fri 02 Jan 2026 08:20:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62355
IP address blocks:        91.218.182.0/24 maxlen: 24
                          2001:67c:26dc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:cb:5e:c4:81:b8:c0:97:b9:e6:b2:e2:d5:2a:25:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592c699f8fecbec847d3390b4658dd3cb21c52b3
        Validity
            Not Before: Jan  2 08:20:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=9bbf03f0b617e0a858d71b01af04e6e67bbcb610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bb:9e:58:01:d1:c6:92:b7:b0:12:d5:48:30:
                    78:8c:54:fc:3d:1b:81:b5:97:30:8b:f8:85:8d:58:
                    0b:09:05:e0:58:0f:51:6d:bc:1a:d1:66:cc:04:25:
                    27:d2:f6:f4:9b:32:db:2e:74:c7:a7:0f:5a:ef:7c:
                    a3:9f:1d:a6:1b:d9:33:f9:c7:6d:d1:8e:03:22:89:
                    91:33:79:5a:b5:4c:20:be:76:a7:94:fe:3a:c7:1e:
                    44:f7:80:48:5f:2a:c1:50:98:98:c2:d9:8f:e3:e0:
                    5a:c4:55:fb:20:5e:8a:70:52:67:e3:31:20:4b:0e:
                    0f:f9:40:4c:ca:3c:01:cc:7f:fb:3c:ea:88:cc:1d:
                    d9:e5:ef:0c:ed:ba:48:b2:09:d0:b9:a3:9f:7a:7e:
                    78:5b:e1:d4:d7:f8:5f:8c:47:2e:61:1f:a2:2d:09:
                    2b:90:5b:7b:2a:94:ee:45:79:98:75:27:1f:c4:99:
                    3e:74:b4:e5:a6:b9:ea:79:3a:36:60:41:fd:1f:d8:
                    22:02:67:67:30:76:0d:44:df:74:95:50:db:d9:67:
                    26:cf:f4:68:37:21:02:ed:74:09:f9:35:e9:73:4e:
                    bd:cb:3f:0a:27:f9:2c:3c:0c:b2:2d:15:0c:e3:ab:
                    a0:08:d9:db:16:9e:78:8e:5f:0e:d0:a3:35:c8:18:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BF:03:F0:B6:17:E0:A8:58:D7:1B:01:AF:04:E6:E6:7B:BC:B6:10
            X509v3 Authority Key Identifier:
                keyid:59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/m78D8LYX4KhY1xsBrwTm5nu8thA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.218.182.0/24
                IPv6:
                  2001:67c:26dc::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:08:0d:5e:c4:f7:64:7c:2a:2c:88:a1:52:d3:28:7e:69:22:
         5e:f2:2b:c8:a0:56:10:f3:aa:91:a1:27:5b:80:d9:b3:18:45:
         13:22:e1:e4:5a:b9:51:76:59:2a:9d:e3:f2:78:56:74:1a:ee:
         63:d8:48:0f:f3:0a:05:37:38:db:2a:f0:93:a4:4e:2c:88:0e:
         5b:c0:8e:f2:bb:d2:39:90:8c:e6:33:07:66:0f:b3:a6:83:5b:
         6e:36:d3:e7:9c:0e:e9:ea:2a:b2:8e:32:03:97:4a:de:0c:64:
         fe:30:2d:f8:49:3a:be:25:e9:c1:2e:ae:0a:f9:ed:15:01:64:
         2f:7f:c8:cf:58:e7:ad:67:a7:c8:99:d9:de:c9:41:e7:d4:41:
         fd:31:fc:9b:44:2c:bc:17:c0:98:a7:a6:a9:ac:3a:fe:83:51:
         d1:35:3b:c8:03:fa:54:f3:ac:34:12:20:48:2e:55:a5:a1:4e:
         9c:1f:fc:53:d2:37:83:68:8e:18:70:eb:2d:7d:0f:ee:10:77:
         a1:5f:aa:dc:7e:b0:b8:ef:28:86:c8:f9:ff:80:56:7b:6d:a8:
         ab:4c:97:0b:92:0c:e9:b9:5c:ee:70:11:d8:6f:c7:13:78:2b:
         15:3b:2f:26:4c:85:bc:36:5d:72:d6:ad:8f:82:1c:8d:71:05:
         48:d2:95:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:54:31 2026 by rpki-client