This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/f37o7GWNr_sV4ePor15LlLHpeGw.roa
File:                     f37o7GWNr_sV4ePor15LlLHpeGw.roa (raw, json)
Hash identifier:          YKLZAfeBxUgsMJleIvcnI+Fj3hSFa8GaTE9wCG/+M04=
Subject key identifier:   7F:7E:E8:EC:65:8D:AF:FB:15:E1:E3:E8:AF:5E:4B:94:B1:E9:78:6C
Certificate issuer:       /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial:       019B7F14B9FC9110218BA1664A0D65AC1CFC
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/f37o7GWNr_sV4ePor15LlLHpeGw.roa
Signing time:             Fri 02 Jan 2026 14:20:23 +0000
ROA not before:           Fri 02 Jan 2026 14:20:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     63199
IP address blocks:        194.231.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:14:b9:fc:91:10:21:8b:a1:66:4a:0d:65:ac:1c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
        Validity
            Not Before: Jan  2 14:20:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7f7ee8ec658daffb15e1e3e8af5e4b94b1e9786c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:92:4d:52:12:76:d3:eb:d4:3f:53:71:61:
                    60:17:20:d8:5f:eb:8a:32:bc:b9:e1:17:14:5d:a2:
                    d0:8d:1c:8a:ff:e3:21:20:cd:90:22:ca:1b:4c:7f:
                    af:57:69:66:c4:82:c1:c2:64:07:d8:90:09:37:2d:
                    08:98:6b:34:5f:70:1d:03:2d:83:5b:cb:ce:d7:5e:
                    9c:40:6f:98:7f:dc:17:41:f2:5b:fb:23:97:b1:73:
                    c8:59:ea:6c:eb:4b:c4:ad:5d:6a:bc:da:3a:4a:b9:
                    92:03:ec:72:ab:c8:5f:f8:5e:90:5b:94:1f:d9:99:
                    48:a1:1a:89:d7:86:da:81:8a:1a:25:1d:8c:58:af:
                    df:bd:95:3d:7e:5b:f2:72:d8:dc:94:9a:51:07:c5:
                    0c:ad:85:d8:70:8f:db:a3:96:12:6f:71:fe:e9:0a:
                    0e:a8:ab:47:3a:20:97:dd:32:d4:68:81:a4:96:2c:
                    46:cb:a5:d4:4b:c6:5b:e1:43:5d:0e:2f:8c:84:e8:
                    f1:b8:74:d6:db:c1:fb:4b:a3:29:07:7b:c5:0d:84:
                    a5:01:d7:fa:a4:8a:ea:67:e7:7f:47:bd:12:b7:27:
                    1e:45:d8:6a:ee:91:5e:c2:2c:5a:17:b5:de:d2:b2:
                    7f:d0:83:04:f4:3b:0e:04:71:6b:4d:53:43:95:09:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7E:E8:EC:65:8D:AF:FB:15:E1:E3:E8:AF:5E:4B:94:B1:E9:78:6C
            X509v3 Authority Key Identifier:
                keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/f37o7GWNr_sV4ePor15LlLHpeGw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.231.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:28:6a:45:01:00:68:0b:80:97:27:08:70:cf:63:6d:3e:d1:
         c6:14:d1:ca:df:84:c3:7c:22:14:70:03:8f:9d:fd:42:e3:09:
         2e:be:50:a0:d8:3f:52:28:d9:10:5c:ce:6f:cb:4d:5e:d0:33:
         5f:4c:fb:45:54:e5:b1:ac:cd:6b:ad:34:d2:af:f7:72:07:06:
         86:42:c0:27:6a:11:72:f5:9a:00:6f:e0:a9:eb:2d:da:ea:e9:
         c8:78:32:7b:e3:b3:e8:78:8d:06:8f:c2:86:e4:6c:4b:a2:45:
         99:82:fd:01:8e:4e:ae:bc:54:8b:df:57:a9:5f:43:c2:40:de:
         dd:1d:d5:27:17:9d:9e:04:84:a8:d7:64:23:1f:2d:88:80:43:
         b1:80:aa:fb:d8:bf:4e:e6:5f:73:ee:55:37:1f:9d:49:f1:fe:
         6f:69:00:93:f9:92:fc:8f:42:27:28:0d:d2:17:db:72:8f:26:
         f2:8f:95:db:1d:2c:db:79:8d:85:c3:f9:ac:22:53:b9:11:3a:
         74:81:c5:5c:c8:05:ed:1c:54:61:0d:97:f8:5f:e2:8c:a1:a2:
         85:78:ef:89:54:c9:67:07:f7:b5:5f:31:f0:f3:a5:9d:be:78:
         35:28:d5:77:94:48:fb:7c:e7:4c:26:eb:49:a7:a0:fc:98:8e:
         ec:73:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 17:13:35 2026 by rpki-client