This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/rVuwmGnwYv_V6whaEGlCtt_t-jU.roa
File:                     rVuwmGnwYv_V6whaEGlCtt_t-jU.roa (raw, json)
Hash identifier:          eOWfhOukOgYiBn4QdoGi9zhMMnx1blKy6/IzloDdoFI=
Subject key identifier:   AD:5B:B0:98:69:F0:62:FF:D5:EB:08:5A:10:69:42:B6:DF:ED:FA:35
Certificate issuer:       /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial:       019B7D5B541706137A68D66CACFB134CEB16
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/rVuwmGnwYv_V6whaEGlCtt_t-jU.roa
Signing time:             Fri 02 Jan 2026 06:18:15 +0000
ROA not before:           Fri 02 Jan 2026 06:18:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47592
IP address blocks:        78.40.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5b:54:17:06:13:7a:68:d6:6c:ac:fb:13:4c:eb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
        Validity
            Not Before: Jan  2 06:18:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ad5bb09869f062ffd5eb085a106942b6dfedfa35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9e:ef:d4:18:5b:7f:20:d9:9c:09:04:9f:af:
                    18:6a:a0:bd:90:6a:4f:d1:10:62:65:3e:e2:61:3b:
                    53:6a:8b:19:c1:4e:79:9c:9b:13:28:cd:b3:bc:2d:
                    78:a2:22:8d:bc:b5:88:4c:16:cf:ba:b8:90:d3:52:
                    c9:91:fe:82:4e:30:ad:2b:1e:74:e4:d5:7b:b5:48:
                    a5:68:ea:24:d2:90:26:38:81:fa:95:24:94:91:10:
                    0d:1c:a4:67:a9:d1:64:02:ad:96:2a:25:f4:d6:ad:
                    30:c9:fb:9f:e2:a3:7a:34:5c:8b:de:c6:c6:16:a0:
                    ab:87:6a:7f:87:ec:38:82:05:65:ee:0f:57:30:c5:
                    f9:ab:a4:f3:e6:44:91:78:77:c0:e2:38:2f:16:b0:
                    0c:e6:7a:68:21:b5:15:45:ec:2d:5d:22:5e:4a:b4:
                    d1:2f:e5:bd:8b:63:2e:a1:03:03:99:74:5a:68:03:
                    e0:45:6b:0e:e8:71:f7:6e:a9:7d:f9:61:da:4a:85:
                    68:8c:43:99:b1:4e:72:50:2b:60:58:49:39:94:a6:
                    0d:d2:47:b8:5a:03:74:f1:81:85:be:51:a7:e6:df:
                    04:56:1e:a9:c2:6f:3e:f5:b4:cd:ea:ee:2f:3b:fb:
                    ae:0e:d8:fd:73:60:ca:fa:00:56:7d:78:94:44:a8:
                    0b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:5B:B0:98:69:F0:62:FF:D5:EB:08:5A:10:69:42:B6:DF:ED:FA:35
            X509v3 Authority Key Identifier:
                keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/rVuwmGnwYv_V6whaEGlCtt_t-jU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.40.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:88:17:89:3b:22:8b:81:e8:b8:f0:1c:31:b3:08:ac:90:62:
         a1:cf:dc:ac:32:4d:97:9e:d3:99:15:4a:50:d1:b6:88:79:85:
         9d:00:36:ef:a1:19:c0:d0:1b:bb:1d:78:05:00:5b:b2:70:9e:
         ef:5c:68:8b:1d:07:61:af:d6:aa:18:c9:19:9f:d9:c3:74:6b:
         fb:ea:e3:d8:03:2e:a6:da:39:b7:94:a8:d4:b4:92:48:de:11:
         c9:55:17:f6:45:a2:32:b8:c4:12:47:36:ae:18:99:10:f5:a0:
         ac:91:ed:26:16:bd:24:4b:2e:e9:3d:e9:fd:20:ef:09:ad:aa:
         cb:b4:02:f5:15:12:5a:5a:6b:f7:47:2e:a4:7e:ae:56:2a:50:
         5f:75:41:a2:22:5e:ee:c8:8e:1b:7f:a3:cb:7b:fc:e5:9d:f9:
         90:76:25:ca:5e:c9:a4:6e:e0:c9:bb:fd:0f:11:78:f1:f7:9c:
         f8:2f:bf:81:ae:b8:89:9a:01:6d:ea:ae:fe:26:cb:19:bd:de:
         cf:0c:08:c3:9f:78:3c:d4:ea:e1:f4:69:84:65:5c:d9:31:9b:
         a9:14:07:6c:55:67:18:b6:4c:96:aa:90:11:84:aa:e7:c7:96:
         f3:5e:da:e2:1a:ac:dc:6f:d8:69:04:f1:fe:e3:49:c6:f4:8c:
         ca:bc:9c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:31:48 2026 by rpki-client