This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/78KXix6rmYz3_6bjL4D3DTcmOIY.roa
File:                     78KXix6rmYz3_6bjL4D3DTcmOIY.roa (raw, json)
Hash identifier:          433c72hgwpEH/NcLGuRwMnl4ZIIE9aHeVVH8ucIJKQE=
Subject key identifier:   EF:C2:97:8B:1E:AB:99:8C:F7:FF:A6:E3:2F:80:F7:0D:37:26:38:86
Certificate issuer:       /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial:       019B7B35CD7D76AB5E703CD940B1C5587CB3
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/78KXix6rmYz3_6bjL4D3DTcmOIY.roa
Signing time:             Thu 01 Jan 2026 20:18:02 +0000
ROA not before:           Thu 01 Jan 2026 20:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     44124
IP address blocks:        78.31.136.0/21 maxlen: 21
                          79.124.96.0/19 maxlen: 24
                          81.161.104.0/22 maxlen: 22
                          185.34.236.0/22 maxlen: 24
                          193.189.116.0/23 maxlen: 23
                          195.20.218.0/23 maxlen: 23
                          195.225.244.0/22 maxlen: 22
                          2a03:6600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:35:cd:7d:76:ab:5e:70:3c:d9:40:b1:c5:58:7c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
        Validity
            Not Before: Jan  1 20:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=efc2978b1eab998cf7ffa6e32f80f70d37263886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:88:0b:09:f0:0e:86:c4:e5:81:8b:66:db:
                    3d:fa:d3:15:cb:47:09:d4:67:2f:85:74:86:57:c7:
                    84:13:a4:3e:27:e7:ca:01:6b:8a:70:df:f8:77:a9:
                    83:6a:a9:15:56:6c:d5:ce:4f:6f:4c:fb:c1:eb:c6:
                    20:05:3b:21:6d:55:de:cf:31:3e:fa:24:9f:98:b3:
                    9a:35:24:db:54:8d:55:5d:7a:60:c4:4b:5f:e1:ef:
                    5c:a7:f8:23:42:59:74:dc:33:07:02:26:a7:fd:bc:
                    d5:70:56:3d:98:4e:b5:37:5e:02:c1:31:26:1f:5a:
                    10:c3:b9:10:57:64:d6:5d:1c:dc:96:18:ef:4c:43:
                    82:fd:4b:eb:ba:85:df:69:24:e0:92:eb:03:cb:f6:
                    02:b3:d0:f9:62:02:5b:bb:50:ce:53:d0:48:73:2f:
                    32:54:51:25:6e:39:91:39:6f:a4:4d:f9:7f:28:a9:
                    e1:7a:98:08:db:1c:34:ce:a6:c2:47:4f:ac:80:d9:
                    54:e6:9d:5f:96:a0:7e:67:f2:aa:d8:3c:3b:9b:0d:
                    39:ab:5d:f0:7c:a0:fe:08:d5:0c:9f:1f:ff:b4:e7:
                    3f:42:a0:c7:2a:a8:58:7c:8d:bb:d8:72:4a:33:b5:
                    97:b0:3f:45:b8:8c:3a:94:15:d4:d1:d7:93:e9:f0:
                    b8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C2:97:8B:1E:AB:99:8C:F7:FF:A6:E3:2F:80:F7:0D:37:26:38:86
            X509v3 Authority Key Identifier:
                keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/78KXix6rmYz3_6bjL4D3DTcmOIY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.31.136.0/21
                  79.124.96.0/19
                  81.161.104.0/22
                  185.34.236.0/22
                  193.189.116.0/23
                  195.20.218.0/23
                  195.225.244.0/22
                IPv6:
                  2a03:6600::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:e7:f4:82:65:52:73:12:ba:2f:fc:0f:ad:6f:cb:75:18:a5:
         ef:77:59:7f:1f:7a:33:1d:ef:f4:8a:d0:be:0c:5a:92:8f:66:
         0b:4f:fe:df:b0:dc:8d:4a:ee:3c:13:6e:08:b0:79:9b:4c:d7:
         55:f1:b0:80:07:65:e8:73:d3:37:32:e3:89:d1:e6:89:0a:d8:
         1d:7d:7b:fa:4b:7b:7a:26:f4:bd:e2:35:f6:81:1d:f0:84:68:
         5a:bd:63:bd:16:aa:3c:d5:4f:be:6e:8e:fc:17:18:e6:f6:ee:
         6c:34:99:18:eb:88:65:70:4d:4d:aa:33:d6:01:7e:7a:a8:3c:
         3b:2e:97:64:ee:42:96:10:83:5a:d7:ad:f5:6e:05:ab:cb:b5:
         db:78:47:e4:80:6b:f3:0b:33:c5:78:6d:9b:b4:e2:01:32:a0:
         f7:f6:d7:d4:e7:ec:4d:cb:1b:0b:47:47:43:44:15:f9:c8:88:
         79:c2:2c:90:53:d8:db:b7:88:04:01:d5:cc:36:54:f1:8c:29:
         5e:fd:9b:02:a6:8c:0b:6a:79:4b:97:b4:50:6f:6e:c5:81:6b:
         91:58:9a:9a:74:7e:fb:35:df:6e:36:79:45:e2:7b:8d:a7:37:
         54:9f:d0:e1:85:c3:35:cd:0c:ea:43:2e:a7:d1:e8:2d:0c:4c:
         41:a6:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:10 2026 by rpki-client