This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/dwTOvNNNs4_nLfL-zGTDIueq7wE.roa
File:                     dwTOvNNNs4_nLfL-zGTDIueq7wE.roa (raw, json)
Hash identifier:          OZz3Ati+0+Owv6ll3vAAGBWOgVo4lM5LfhjhBc+bzWQ=
Subject key identifier:   77:04:CE:BC:D3:4D:B3:8F:E7:2D:F2:FE:CC:64:C3:22:E7:AA:EF:01
Certificate issuer:       /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial:       019B7E378A2C5D792F2FE7D5A9B9B1E1300D
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/dwTOvNNNs4_nLfL-zGTDIueq7wE.roa
Signing time:             Fri 02 Jan 2026 10:18:47 +0000
ROA not before:           Fri 02 Jan 2026 10:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207440
IP address blocks:        185.251.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:8a:2c:5d:79:2f:2f:e7:d5:a9:b9:b1:e1:30:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
        Validity
            Not Before: Jan  2 10:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7704cebcd34db38fe72df2fecc64c322e7aaef01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:34:51:50:a5:95:f2:78:50:b0:98:e6:9a:
                    af:04:c9:da:c9:7a:af:b6:9a:3b:3f:70:dd:28:7e:
                    ca:57:c5:fb:20:69:01:6a:d6:ef:04:35:e0:52:ae:
                    44:df:03:86:10:a4:76:df:6b:58:53:4a:b7:67:ab:
                    72:bf:df:9c:a1:a3:b1:a9:2a:7c:39:b3:fa:ca:ba:
                    c0:02:b1:c6:2b:15:f3:67:a8:2a:5b:5f:29:c9:9b:
                    5e:28:d3:7b:f3:76:02:df:fc:b7:36:98:c2:ab:e5:
                    55:1c:e7:b7:db:f9:7e:50:60:a6:9f:0f:0b:dc:be:
                    7c:92:96:77:81:f6:49:b3:c9:e8:8e:65:b2:14:b1:
                    00:61:a1:bc:c3:57:02:6b:73:03:83:30:fb:79:db:
                    0f:d7:4c:34:b3:0f:39:71:45:e8:f5:17:4f:87:f9:
                    44:70:32:ac:32:f3:f0:c1:90:37:4d:22:e2:0a:70:
                    ef:53:bd:65:ea:a7:31:5a:e7:3d:82:65:ac:72:e0:
                    4e:2f:96:60:65:aa:2a:ae:e2:95:2f:a4:7c:90:13:
                    a1:ea:83:b3:c0:7e:57:2d:eb:db:b2:5e:89:6d:82:
                    cb:83:31:ae:63:6b:85:0b:ee:32:b9:a7:44:01:33:
                    da:a5:e6:7e:bc:63:16:68:30:bc:25:f1:83:0a:f8:
                    c5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:04:CE:BC:D3:4D:B3:8F:E7:2D:F2:FE:CC:64:C3:22:E7:AA:EF:01
            X509v3 Authority Key Identifier:
                keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/dwTOvNNNs4_nLfL-zGTDIueq7wE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:12:d3:31:1b:b1:9c:04:3f:13:78:d7:4a:e3:93:17:28:6d:
         47:a6:d8:8b:2a:d4:2b:03:9a:fe:fb:d1:f0:1a:b7:17:8c:ac:
         84:dd:b1:cf:1f:76:76:1b:dc:09:46:8b:e4:de:0e:75:c3:63:
         6d:2b:43:11:e3:85:46:d1:8c:98:e8:07:a9:f9:ac:bf:07:cf:
         52:27:e3:b1:67:31:01:e7:3c:d1:9d:e7:29:24:19:39:76:8c:
         97:e9:2b:55:43:41:0c:49:24:a5:30:20:d4:c3:9c:5a:70:c7:
         cb:f9:d7:d0:31:5a:6d:40:d1:82:7b:cb:fd:e3:df:78:ca:56:
         a0:27:14:6b:ed:d5:e5:6c:73:6b:4f:60:5a:62:d8:9a:41:a7:
         42:77:65:8e:7a:ad:48:ad:c6:87:53:cd:96:ad:9f:46:b2:a1:
         25:09:d3:c2:b4:c8:22:a4:e2:44:e3:51:0f:df:3f:74:0b:eb:
         9d:3b:0a:65:7c:a7:28:29:f5:4a:d9:79:07:51:fb:df:fe:18:
         c7:85:02:ec:3e:2e:20:ea:2b:bc:79:b7:c5:08:77:63:12:57:
         67:50:6d:f5:2a:ab:04:d6:12:26:f5:8b:d0:95:34:76:79:32:
         f5:96:bb:fc:5f:0d:00:8b:a3:e6:a1:4e:8e:43:37:cd:b7:9a:
         b1:aa:4e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:48 2026 by rpki-client