This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/rWa57xsNqA6h9p133SuFrfwT1jU.roa
File:                     rWa57xsNqA6h9p133SuFrfwT1jU.roa (raw, json)
Hash identifier:          nyGSyY5avNWGsV5nwcg1OwYhIlMW5PE6DQJT9vvTzMM=
Subject key identifier:   AD:66:B9:EF:1B:0D:A8:0E:A1:F6:9D:77:DD:2B:85:AD:FC:13:D6:35
Certificate issuer:       /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
Certificate serial:       019B78A2123A8A100B847DF9B6DE9291A32F
Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/rWa57xsNqA6h9p133SuFrfwT1jU.roa
Signing time:             Thu 01 Jan 2026 08:17:26 +0000
ROA not before:           Thu 01 Jan 2026 08:17:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        178.175.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a2:12:3a:8a:10:0b:84:7d:f9:b6:de:92:91:a3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5
        Validity
            Not Before: Jan  1 08:17:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ad66b9ef1b0da80ea1f69d77dd2b85adfc13d635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:38:d6:19:ec:8a:8b:26:d2:1e:cb:9c:3f:
                    56:ce:21:30:82:64:01:1d:37:50:14:46:d3:74:80:
                    db:bb:d1:f6:56:c8:5a:ce:e5:cd:d2:8a:b7:dd:c1:
                    93:99:ba:50:cf:e3:48:64:aa:56:ca:45:d0:68:c9:
                    e5:93:fa:c9:89:95:34:d3:3c:8a:7e:a5:05:d8:81:
                    c4:5a:fb:c7:04:57:be:10:94:f7:86:e9:4d:70:5a:
                    1f:f1:06:90:0d:6d:f5:33:95:9c:c9:82:be:08:a3:
                    2a:96:3a:92:26:ec:ca:19:2e:94:ee:45:74:38:f0:
                    6a:0c:5b:53:79:ab:a4:ce:68:6b:69:e3:a5:d0:59:
                    17:98:88:0d:0a:b9:b5:20:61:d9:f2:d3:88:78:4b:
                    36:e7:f9:c5:28:69:7f:91:dc:b0:47:27:40:25:63:
                    68:b0:68:28:cd:d9:5a:22:2f:85:a7:ba:e4:78:d4:
                    3a:86:69:5b:9f:03:67:36:9a:3b:f1:f9:53:dd:be:
                    fd:ba:58:61:66:25:a1:9d:1b:53:99:9f:6a:0a:0d:
                    56:4c:6f:3d:92:3d:0f:c1:5c:45:55:db:70:11:bd:
                    33:c0:f0:fc:d6:e5:28:5d:6e:1f:d0:97:7f:9f:b8:
                    43:1c:5b:c0:9e:fe:ff:a6:1f:81:11:bb:d7:d2:9d:
                    2e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:66:B9:EF:1B:0D:A8:0E:A1:F6:9D:77:DD:2B:85:AD:FC:13:D6:35
            X509v3 Authority Key Identifier:
                keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/rWa57xsNqA6h9p133SuFrfwT1jU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.175.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:90:44:60:9e:d4:90:a4:8d:e5:9c:20:dc:f8:24:ec:13:54:
         b6:69:c4:3e:fb:e2:31:34:a2:27:15:c5:7a:ac:03:53:99:79:
         88:bb:74:f9:6c:33:b3:34:45:8b:ad:cb:3d:c2:a4:05:e7:b5:
         c1:7b:eb:55:88:f3:f6:04:e5:20:c6:36:93:c1:c3:65:1b:8d:
         d3:63:1c:0f:ff:8a:1d:11:6f:5f:19:f1:11:05:89:a0:8b:2d:
         37:21:3d:82:f1:c4:71:ae:c0:04:6a:8e:ee:f9:98:e0:0c:51:
         72:2c:5e:73:1f:9f:42:7d:18:dd:12:26:66:b9:d6:b3:8a:1c:
         63:f0:3a:96:4e:c7:4a:ff:ee:61:c1:7b:4a:5e:4f:47:86:b2:
         60:29:de:91:b4:c4:bb:02:45:8d:fb:28:31:a6:de:10:b8:fe:
         36:4e:9a:4a:dc:d7:e7:e5:17:7b:fa:5c:c2:a6:16:31:f2:00:
         7c:93:14:43:31:ce:c4:5a:14:71:36:66:88:0e:32:eb:8f:0b:
         17:6c:a7:ce:41:d0:63:ce:b8:99:ba:fd:87:a4:11:ed:48:65:
         a2:d8:2c:ce:11:4f:3d:dd:ec:08:c4:a4:19:9f:09:22:49:38:
         cf:a7:03:b5:25:6a:24:c1:10:3d:af:fc:f8:de:97:74:a6:b0:
         ea:c6:f9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 09:27:05 2026 by rpki-client