This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V37GBknG3FvolquLoNEkX4ray6c.roa
File:                     V37GBknG3FvolquLoNEkX4ray6c.roa (raw, json)
Hash identifier:          9WFBrNi4mrsJY18dPcJfe5oW8HJMHTkDVqQkYSMqlV0=
Subject key identifier:   57:7E:C6:06:49:C6:DC:5B:E8:96:AB:8B:A0:D1:24:5F:8A:DA:CB:A7
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       019AD902C4AB2E482F6C9532C05C8A8C7F12
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V37GBknG3FvolquLoNEkX4ray6c.roa
Signing time:             Mon 01 Dec 2025 08:23:48 +0000
ROA not before:           Mon 01 Dec 2025 08:23:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        89.34.106.0/24 maxlen: 24
                          93.114.183.0/24 maxlen: 24
                          93.115.106.0/24 maxlen: 24
                          194.58.47.0/24 maxlen: 24
                          206.245.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:d9:02:c4:ab:2e:48:2f:6c:95:32:c0:5c:8a:8c:7f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Dec  1 08:23:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=577ec60649c6dc5be896ab8ba0d1245f8adacba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:51:f7:f6:13:d0:b5:5e:da:4d:e3:f8:3a:
                    db:f8:49:e0:37:07:20:46:69:a8:96:df:f4:27:42:
                    a2:a7:b5:9b:43:a3:8c:6a:74:0f:d2:a6:40:8d:ba:
                    19:d1:e0:1a:38:16:3a:bb:b6:12:f5:a0:63:35:8e:
                    f4:ac:93:77:2e:06:6c:c6:c5:12:88:97:b8:22:bf:
                    42:07:0b:c6:55:3f:73:d7:60:8f:8f:73:11:cc:45:
                    43:7c:b6:8b:b6:1a:9e:ef:52:05:40:e5:18:1c:6d:
                    1c:b7:59:38:4b:f8:70:c5:87:e5:bc:bd:09:23:0c:
                    f0:05:fc:6c:fb:56:29:42:ba:ef:7d:05:e3:c9:33:
                    e0:5e:f2:e6:3f:a2:ff:54:4c:ff:d2:9e:ff:b0:65:
                    d4:12:0e:6a:f8:11:58:e8:5e:a1:9d:94:e3:40:0b:
                    1e:a6:28:95:33:f8:2d:c3:b2:d8:49:63:35:8c:a4:
                    7e:57:ab:e8:9f:59:de:f7:f0:94:91:05:4b:af:d9:
                    37:28:01:0e:ee:93:68:f5:f7:e2:ab:97:2b:b0:ac:
                    d9:8a:bf:11:d7:cc:c8:a3:06:ca:75:2a:58:5d:c8:
                    16:a2:7e:58:ec:c1:bf:4a:00:1b:69:45:4b:a8:1b:
                    5c:ee:c9:4b:31:b4:4e:41:f4:a1:7c:c5:2e:ee:8b:
                    b5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7E:C6:06:49:C6:DC:5B:E8:96:AB:8B:A0:D1:24:5F:8A:DA:CB:A7
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V37GBknG3FvolquLoNEkX4ray6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.34.106.0/24
                  93.114.183.0/24
                  93.115.106.0/24
                  194.58.47.0/24
                  206.245.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:32:de:fd:5b:36:b7:6e:f0:29:2a:f0:67:f7:87:12:5a:b2:
         ca:57:cb:6a:3b:35:8e:96:5a:89:61:52:8a:6a:f7:23:e7:5d:
         f0:bc:f8:a9:ed:53:5d:71:56:da:10:da:fd:bb:87:ef:6a:06:
         03:71:f2:9e:d3:c4:32:1c:28:28:79:f8:3e:01:d1:19:69:c3:
         95:d4:5a:85:3e:8c:50:97:28:1b:f3:fe:65:55:7d:c9:fe:f8:
         15:fd:46:97:c0:f7:94:eb:1f:97:39:01:cd:3c:02:ff:ec:53:
         b0:8f:2c:f3:aa:0d:0c:51:84:64:69:54:71:3c:20:f1:0c:47:
         12:f4:d7:9f:1b:f3:c6:aa:47:13:56:ad:36:26:d8:50:e5:c9:
         e8:40:7d:15:cf:76:ab:04:bd:ad:b9:d6:aa:88:bd:69:51:1a:
         cd:e2:14:0c:a0:f4:ed:2d:f5:97:6e:80:b6:75:ac:a0:41:01:
         15:b6:02:d9:75:b0:19:cf:4c:98:2e:d5:8d:1c:27:1a:58:f5:
         65:64:34:8e:a8:3f:9a:34:5a:c8:36:85:89:88:6f:e2:1d:59:
         cd:9f:71:c4:30:71:ed:65:c5:d7:5d:9a:ea:28:80:11:9b:20:
         0b:7b:07:1f:4f:eb:ce:fb:78:7b:1d:73:a7:2a:6e:a8:e9:29:
         32:d3:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 07:58:52 2025 by rpki-client