This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/sWEyZCi5NDwyUie3aWYd5IPmfuw.roa
File:                     sWEyZCi5NDwyUie3aWYd5IPmfuw.roa (raw, json)
Hash identifier:          TSCcBZmyzZxP3eOaeaIBX8e9nFHBHGiKk40P3OCJfbo=
Subject key identifier:   B1:61:32:64:28:B9:34:3C:32:52:27:B7:69:66:1D:E4:83:E6:7E:EC
Certificate issuer:       /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial:       019B77C75F53FAE63E42151711B5A6268479
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/sWEyZCi5NDwyUie3aWYd5IPmfuw.roa
Signing time:             Thu 01 Jan 2026 04:18:33 +0000
ROA not before:           Thu 01 Jan 2026 04:18:33 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     206182
IP address blocks:        185.77.48.0/22 maxlen: 24
                          2a03:52e0::/29 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:5f:53:fa:e6:3e:42:15:17:11:b5:a6:26:84:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
        Validity
            Not Before: Jan  1 04:18:33 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b161326428b9343c325227b769661de483e67eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:0a:32:4f:1c:34:82:9a:ae:1c:1e:95:09:
                    f7:da:96:27:0c:58:72:68:85:12:fc:ff:6c:51:67:
                    62:27:ff:86:12:b2:c0:38:29:fd:01:1d:b0:52:56:
                    fc:db:4c:4d:1c:80:7c:f4:22:01:28:38:22:0d:2c:
                    19:97:47:50:c9:9f:65:e5:8d:76:83:d7:1f:42:84:
                    3f:52:ac:54:35:55:7b:23:98:0f:27:e0:c0:f2:23:
                    fe:ab:7f:73:d0:f8:62:d5:81:a3:e1:93:57:a0:9b:
                    bc:1c:96:04:72:28:49:36:72:8f:79:93:19:f0:3e:
                    21:4f:90:07:57:f2:7d:76:c5:7b:7d:bd:4f:0a:4e:
                    03:dd:57:ce:e0:23:63:d4:7e:10:2b:ca:c3:ee:90:
                    e1:f7:c4:dc:74:19:6b:97:1d:29:8c:f8:ba:4a:7f:
                    8a:bc:d9:fa:27:a4:db:a6:85:f0:d8:1a:cc:39:89:
                    8f:1e:e1:30:51:ed:e6:4f:a6:d8:20:8e:7b:90:17:
                    d5:03:79:ce:6b:c9:72:f2:da:63:2f:09:56:e1:73:
                    bf:7a:7d:90:b2:b3:9d:22:28:67:73:25:26:23:20:
                    9a:c6:ed:f7:5e:d7:7f:aa:f0:ff:e2:20:39:0b:d6:
                    69:09:84:75:57:04:87:fc:83:8a:05:17:d6:28:f8:
                    6a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:61:32:64:28:B9:34:3C:32:52:27:B7:69:66:1D:E4:83:E6:7E:EC
            X509v3 Authority Key Identifier:
                keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/sWEyZCi5NDwyUie3aWYd5IPmfuw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.48.0/22
                IPv6:
                  2a03:52e0::/29

    Signature Algorithm: sha256WithRSAEncryption
         aa:b3:fd:b8:00:4e:61:3e:bf:1a:b2:94:31:f9:4e:2e:3a:cd:
         99:c6:bb:56:26:80:58:de:17:95:4d:24:16:44:08:29:89:04:
         8e:4b:01:f2:15:6d:b8:8a:e3:2c:f6:52:8c:b8:f2:ff:80:54:
         2a:98:01:fe:11:8b:c8:c1:59:6f:fb:95:13:a9:1a:9d:a5:ec:
         8d:fd:a3:90:72:d4:6e:66:6b:c7:81:af:46:7f:e4:c0:a6:67:
         93:9a:ce:49:7c:0b:47:59:1e:1f:13:40:1c:1f:94:a1:78:9e:
         08:02:58:dd:5f:c8:48:76:77:af:d6:7c:d7:16:b7:12:c4:9e:
         28:0e:b6:da:39:c0:3f:0b:e9:2e:1a:ea:72:dc:08:5e:ea:31:
         45:9a:78:ce:69:0f:98:bb:4e:59:17:5c:9e:7a:ed:a6:ff:8b:
         95:1e:4d:85:f9:21:a6:e9:fd:be:ab:52:0d:0e:53:b2:74:07:
         4c:be:42:f6:e7:df:a4:98:0b:d0:08:fd:8e:a9:df:a1:54:57:
         a5:a2:92:d2:65:d2:35:88:83:10:08:c0:f9:d2:41:b0:f4:76:
         f8:87:5a:b0:19:26:e1:a1:fc:e1:22:05:a1:02:86:07:d1:fe:
         7b:fe:2f:57:1f:49:4c:a6:13:1f:8a:30:5c:9d:93:bc:2f:f7:
         59:71:f7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:36 2026 by rpki-client