This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/TWuhNlll9GdwQT5xbU8YxqqhxGU.roa
File:                     TWuhNlll9GdwQT5xbU8YxqqhxGU.roa (raw, json)
Hash identifier:          V8GYFFSNGmnvziGMDmPfcsoWr5Onpn2xFpSEYeVEjp8=
Subject key identifier:   4D:6B:A1:36:59:65:F4:67:70:41:3E:71:6D:4F:18:C6:AA:A1:C4:65
Certificate issuer:       /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial:       019B7C12B864C5544894F00AE93326D69FBC
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/TWuhNlll9GdwQT5xbU8YxqqhxGU.roa
Signing time:             Fri 02 Jan 2026 00:19:20 +0000
ROA not before:           Fri 02 Jan 2026 00:19:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212842
IP address blocks:        185.38.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:12:b8:64:c5:54:48:94:f0:0a:e9:33:26:d6:9f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
        Validity
            Not Before: Jan  2 00:19:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=4d6ba1365965f46770413e716d4f18c6aaa1c465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:ab:c4:48:22:f7:67:b6:87:ad:4e:30:94:
                    8b:e6:7e:86:3d:25:11:4c:45:c5:63:bc:38:11:07:
                    93:cb:70:36:ea:c5:d7:d4:19:b4:17:c7:72:04:16:
                    f0:bd:61:c8:28:0b:97:76:ac:3d:e6:5d:da:94:53:
                    dc:5b:a6:08:fb:2a:97:e0:13:f6:3f:f3:2d:67:a4:
                    6b:7e:3b:69:33:6b:83:03:fa:f3:dc:fd:8a:a1:40:
                    b0:69:cd:53:34:93:17:76:79:41:f3:ba:3b:d8:db:
                    29:bc:9d:d6:37:9f:e3:38:af:d3:c6:e8:89:a5:fa:
                    07:dd:5d:cc:1d:64:26:3c:a6:9b:24:80:ab:55:eb:
                    e3:2d:ef:4b:09:34:13:42:56:51:25:61:60:aa:0d:
                    ba:db:ef:c5:b3:da:3e:74:76:52:74:4f:ba:18:85:
                    85:fd:f4:9f:0a:81:d0:ef:31:02:88:37:2b:f1:bc:
                    39:fa:e0:83:43:3e:28:d2:19:4d:fb:e2:8b:33:cd:
                    57:7a:90:47:21:a3:30:58:0b:14:10:df:ba:44:1a:
                    8e:f3:ce:93:e4:d0:e5:47:92:9b:43:d2:49:07:e9:
                    c7:6f:b4:23:52:2a:5b:00:c8:ea:f4:ec:db:9a:d4:
                    8b:86:9a:93:8a:fd:6f:e6:f3:9d:59:80:3f:be:d6:
                    b8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6B:A1:36:59:65:F4:67:70:41:3E:71:6D:4F:18:C6:AA:A1:C4:65
            X509v3 Authority Key Identifier:
                keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/TWuhNlll9GdwQT5xbU8YxqqhxGU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:e0:0e:c5:42:51:bf:c1:dd:7c:fd:57:12:15:03:44:62:f9:
         d6:44:af:f1:9d:af:91:29:d8:74:7c:7d:35:e9:57:94:9c:2d:
         5f:13:99:5a:4c:42:cc:97:95:94:01:5b:da:91:3e:7b:63:71:
         a9:81:e8:b3:5f:5e:d7:91:2f:e2:2a:b1:4c:dc:e3:4f:32:fa:
         65:88:74:4b:84:37:c0:35:44:7a:1b:d2:93:fa:47:9f:2c:41:
         07:69:2b:54:65:bd:58:5d:70:e4:13:7b:97:02:c0:37:f8:28:
         c8:cd:b6:53:6c:be:cb:04:43:f5:60:a6:40:88:c0:53:46:58:
         b4:fe:04:c3:24:50:18:d6:c9:9b:c8:e6:3c:8e:c1:b5:90:e3:
         b7:27:75:10:43:36:e3:49:76:35:0f:27:60:f5:ad:8c:40:9a:
         9b:80:7b:9c:63:5f:ca:58:8b:af:d2:12:e4:c6:40:4e:4c:70:
         20:59:de:9e:d3:52:ed:69:ab:b9:e6:10:97:d7:c9:58:34:13:
         90:27:e4:42:1a:eb:3c:58:b0:88:5f:82:5b:37:62:83:ac:ad:
         34:dc:16:a6:77:97:6f:8a:a0:07:bf:7c:4b:a0:68:a1:59:af:
         48:56:d1:c2:af:80:06:f3:98:28:76:a1:9c:73:b7:aa:27:f3:
         e1:8b:42:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 07:12:48 2026 by rpki-client