This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/9eN7qSejmD6NfaFbsmt0-Q4AgoA.roa
File:                     9eN7qSejmD6NfaFbsmt0-Q4AgoA.roa (raw, json)
Hash identifier:          EthJtYsvDPJskDLNQI0HAM0yvVrJhOQozB0uYpm7BsE=
Subject key identifier:   F5:E3:7B:A9:27:A3:98:3E:8D:7D:A1:5B:B2:6B:74:F9:0E:00:82:80
Certificate issuer:       /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial:       019B7EA4E7799BAEF0958D8CC8872C036575
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/9eN7qSejmD6NfaFbsmt0-Q4AgoA.roa
Signing time:             Fri 02 Jan 2026 12:18:14 +0000
ROA not before:           Fri 02 Jan 2026 12:18:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        185.135.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a4:e7:79:9b:ae:f0:95:8d:8c:c8:87:2c:03:65:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
        Validity
            Not Before: Jan  2 12:18:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f5e37ba927a3983e8d7da15bb26b74f90e008280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f9:d0:95:aa:16:83:31:b2:f0:91:4f:37:4b:
                    e4:82:f3:2d:d8:55:97:eb:84:28:e4:1e:1b:94:f9:
                    6f:3d:86:fe:13:a9:7e:67:ef:74:ef:7e:4d:79:52:
                    8f:5a:c1:35:bd:7b:5d:14:05:ae:ff:35:32:2d:f2:
                    9e:c2:75:c3:b4:64:d3:e6:83:1e:19:eb:e8:36:a1:
                    b9:5e:d9:d4:12:f5:37:cf:91:19:2a:8b:98:57:8a:
                    ca:e8:56:12:ca:28:bf:ac:5c:29:a2:71:9e:de:81:
                    76:62:bb:6d:8c:39:c5:a9:01:1f:be:3f:1e:2f:c1:
                    7d:65:e9:48:ce:91:bb:93:46:de:6b:7e:0e:38:07:
                    78:30:35:d0:40:44:a5:a5:e0:05:0c:36:21:e1:1c:
                    40:cb:50:1b:c3:c1:a1:70:c5:e3:f7:56:74:3b:cc:
                    37:1b:36:3a:87:91:08:ed:c0:45:e3:c6:50:7b:63:
                    75:ba:30:68:03:1f:7e:01:e1:b3:54:f4:74:48:84:
                    82:77:19:2d:8c:49:fd:5d:35:0c:7f:ef:64:26:85:
                    fc:2b:5f:e6:f5:a7:c4:51:7d:1c:ff:7f:ad:6d:a8:
                    dc:89:40:a7:d4:4c:21:01:a6:26:24:26:97:c1:4c:
                    18:2a:ac:61:0f:53:f0:df:6c:56:b5:43:f9:83:ea:
                    dd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E3:7B:A9:27:A3:98:3E:8D:7D:A1:5B:B2:6B:74:F9:0E:00:82:80
            X509v3 Authority Key Identifier:
                keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/9eN7qSejmD6NfaFbsmt0-Q4AgoA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.135.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:93:49:d6:67:20:56:a6:32:10:c2:3c:92:ba:19:9f:bd:97:
         78:33:ea:86:49:95:54:ed:d4:af:c1:1b:d9:ab:11:dd:0c:02:
         a0:9f:43:f3:82:90:65:72:4e:35:5b:39:12:1a:fc:a3:1a:43:
         aa:00:80:68:6d:cf:45:c1:6d:ee:f4:1f:8a:6d:b1:84:1e:9a:
         d9:71:09:72:0e:48:d0:74:79:9f:88:a4:f6:4f:e9:4c:22:71:
         38:2f:5c:b0:fe:14:5c:99:e9:b7:27:de:ac:f3:b9:a5:64:59:
         fa:ae:1e:de:d5:06:88:8b:6e:b7:20:1a:db:bf:9f:ac:84:64:
         04:48:c7:20:6b:ed:11:64:75:92:79:c6:cb:17:eb:37:ee:2e:
         f5:c0:a9:f1:63:2d:81:62:66:2b:38:f4:ab:38:5a:86:22:7e:
         47:ee:6c:2e:e1:26:52:27:44:ac:cc:b7:b9:d5:07:22:ca:05:
         79:bb:48:b9:45:15:4b:a3:3f:af:02:c4:db:b4:58:71:ed:d4:
         d5:4a:be:e0:31:d7:d6:ae:06:30:4e:75:9c:18:fd:1e:52:a1:
         68:fa:a7:1f:9b:66:06:d2:0e:32:1e:25:b2:f4:c0:f0:80:85:
         29:c6:20:f3:35:2e:5c:61:d1:ef:35:02:77:96:9e:15:a1:24:
         7b:0a:33:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 15:29:36 2026 by rpki-client