This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/ExufsLq2JafGt9v_vHY46Z_MbY0.roa
File:                     ExufsLq2JafGt9v_vHY46Z_MbY0.roa (raw, json)
Hash identifier:          oL1Bx4iDdRZS3AGbouRdV9jlLHKuOqspb/EMUICH45w=
Subject key identifier:   13:1B:9F:B0:BA:B6:25:A7:C6:B7:DB:FF:BC:76:38:E9:9F:CC:6D:8D
Certificate issuer:       /CN=7cd162dec78209bc03add081527d54b27e84d26e
Certificate serial:       019B79106D3FD191F1B0404F008ABAECCF8C
Authority key identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/ExufsLq2JafGt9v_vHY46Z_MbY0.roa
Signing time:             Thu 01 Jan 2026 10:17:58 +0000
ROA not before:           Thu 01 Jan 2026 10:17:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     43073
IP address blocks:        45.128.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:6d:3f:d1:91:f1:b0:40:4f:00:8a:ba:ec:cf:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cd162dec78209bc03add081527d54b27e84d26e
        Validity
            Not Before: Jan  1 10:17:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=131b9fb0bab625a7c6b7dbffbc7638e99fcc6d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:dd:c3:39:97:0f:5f:8a:2b:9a:98:4b:45:
                    dc:ec:86:7e:fd:ff:8b:44:86:11:73:23:49:51:19:
                    ad:e7:58:41:e1:ff:c8:5f:17:70:b0:1e:f5:44:45:
                    91:6e:1c:08:68:58:3a:e0:a9:be:76:c4:dc:2f:77:
                    88:d0:3c:64:43:2d:55:9a:14:db:fc:f0:d5:bb:e1:
                    d2:2b:14:12:4f:a1:94:af:85:c3:cf:db:67:7e:1a:
                    00:43:e6:b7:a2:73:1b:fb:1a:7f:ea:c0:5e:4b:37:
                    06:43:84:61:8a:0f:6f:5d:1c:d5:f4:72:b0:d0:6e:
                    1a:a0:13:fd:14:2d:5c:c4:21:58:4c:d8:68:41:f9:
                    09:cb:e4:2c:42:2c:54:8b:21:c6:76:4c:59:ee:0a:
                    13:1a:42:50:aa:cf:e3:18:78:d3:3f:3d:4a:da:1a:
                    06:fe:4e:6f:cf:d5:3c:c5:a7:27:31:38:f6:ad:8a:
                    a4:0a:a8:af:33:66:9a:70:1f:be:0a:b0:9b:b8:9b:
                    cf:07:ac:1e:c5:a4:e3:71:fd:a1:6f:31:6c:e0:42:
                    89:dd:07:bf:f2:c8:54:2b:de:c6:7d:4c:04:1c:0c:
                    0b:74:18:8a:ac:13:bf:44:b0:d2:e8:bd:82:a7:57:
                    a3:a8:20:74:00:eb:f6:ad:0f:bd:a8:07:0f:f8:04:
                    be:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1B:9F:B0:BA:B6:25:A7:C6:B7:DB:FF:BC:76:38:E9:9F:CC:6D:8D
            X509v3 Authority Key Identifier:
                keyid:7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/ExufsLq2JafGt9v_vHY46Z_MbY0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:97:a4:36:9a:26:3e:ee:4f:37:24:8f:13:a8:31:39:f8:6c:
         90:27:37:f5:df:32:df:9b:d4:dc:79:0d:43:8a:93:37:05:5f:
         64:c4:7b:81:ba:50:13:52:f6:34:f8:c5:00:64:8c:c8:51:11:
         39:d2:fd:7d:b4:1e:26:64:7b:f1:5b:99:bb:dd:75:a7:f9:58:
         cd:cf:64:f2:42:f2:e4:f8:a1:27:f0:77:98:91:d0:d3:31:94:
         8e:ac:99:b4:17:fd:47:b6:43:21:ca:79:a3:34:f3:79:29:76:
         8d:6d:49:f4:9c:4c:7e:4f:ce:bc:3f:64:09:20:8e:32:25:07:
         70:3a:f6:05:bf:97:36:8c:28:3b:c1:88:e1:88:81:91:32:41:
         a1:a6:04:bf:9e:ed:ad:56:37:e0:8f:ae:7c:a4:23:ea:51:2d:
         b7:3a:2e:84:8c:fc:46:af:d2:2f:9e:3f:ca:09:a9:2d:d7:b3:
         fb:10:03:37:00:61:39:6a:4f:ed:39:d4:50:96:fa:50:81:90:
         07:44:af:90:e1:39:c6:7f:51:70:52:b8:52:d9:89:70:96:b1:
         09:9c:cc:26:24:8e:d9:87:68:b1:43:aa:34:48:4c:58:e1:37:
         bd:c0:fa:f2:81:b1:e5:c3:ee:01:79:7a:6b:a9:5b:8a:c2:94:
         aa:19:57:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:02 2026 by rpki-client