This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/R7gfvwzhv_W46cphs1BhPSFOvyc.roa
File:                     R7gfvwzhv_W46cphs1BhPSFOvyc.roa (raw, json)
Hash identifier:          wod0SGE8QyykHeeDPFL20He4yLAi8HULT2/ny8Us8w0=
Subject key identifier:   47:B8:1F:BF:0C:E1:BF:F5:B8:E9:CA:61:B3:50:61:3D:21:4E:BF:27
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       019B7F83AD6A12543A5AF4B3975163581B48
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/R7gfvwzhv_W46cphs1BhPSFOvyc.roa
Signing time:             Fri 02 Jan 2026 16:21:34 +0000
ROA not before:           Fri 02 Jan 2026 16:21:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     201411
IP address blocks:        37.18.62.0/24 maxlen: 24
                          37.18.63.0/24 maxlen: 24
                          37.18.96.0/22 maxlen: 24
                          178.170.156.0/22 maxlen: 24
                          178.170.182.0/23 maxlen: 24
                          178.170.184.0/23 maxlen: 24
                          188.120.36.0/22 maxlen: 24
                          188.120.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:83:ad:6a:12:54:3a:5a:f4:b3:97:51:63:58:1b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jan  2 16:21:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=47b81fbf0ce1bff5b8e9ca61b350613d214ebf27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:77:c7:58:fe:34:9b:2b:50:11:24:40:8d:
                    03:e7:d0:3c:f1:82:4b:8d:11:64:6b:7b:2f:60:b8:
                    c0:8e:e9:ca:e0:70:e0:b1:97:b1:d0:0d:7d:8f:00:
                    20:b8:eb:6c:b0:9e:c1:eb:e3:ad:b9:34:d3:2a:69:
                    40:47:d8:15:da:79:e7:81:dc:1f:e5:1a:62:85:22:
                    c7:4c:09:16:9f:5d:8d:77:a9:23:eb:d4:25:16:f3:
                    2f:aa:59:48:a8:0e:5f:86:61:fe:c5:f2:1b:72:ee:
                    1c:bd:c0:6d:0f:76:4b:b4:41:4e:e0:a8:cc:b6:ed:
                    76:e7:fe:65:b4:bd:91:67:d0:8e:f5:c3:f5:b2:d8:
                    03:b2:bc:2a:c5:cb:0c:17:e4:34:a9:f7:e2:63:6b:
                    6d:72:d0:01:89:c0:d6:f9:2a:eb:7b:58:a6:1e:de:
                    69:76:a0:8a:93:30:14:86:9c:3c:db:32:37:1a:36:
                    45:e7:f1:f1:7e:8e:9b:95:22:93:58:e7:58:a6:65:
                    d8:dc:43:50:31:0c:1e:65:49:03:6c:07:e2:b4:80:
                    7a:b0:d8:d0:1f:b0:9c:d7:98:38:b5:3f:cd:aa:3b:
                    01:c2:cc:6a:fc:5d:f7:e5:d7:64:25:3d:6b:5a:19:
                    f7:1e:6a:0f:3e:62:95:48:f2:51:9c:8d:2c:4e:1c:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B8:1F:BF:0C:E1:BF:F5:B8:E9:CA:61:B3:50:61:3D:21:4E:BF:27
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/R7gfvwzhv_W46cphs1BhPSFOvyc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.18.62.0/23
                  37.18.96.0/22
                  178.170.156.0/22
                  178.170.182.0-178.170.185.255
                  188.120.36.0-188.120.43.255

    Signature Algorithm: sha256WithRSAEncryption
         c6:56:56:af:d5:66:6a:48:b6:0f:50:77:16:1e:13:b9:1a:4e:
         15:84:07:31:96:53:9a:f3:95:e1:1d:51:1d:bc:b0:f2:ac:0c:
         b4:a1:e8:70:83:9d:76:ba:8a:3d:51:eb:e9:51:ba:59:f0:1e:
         3a:e5:3d:03:ff:f5:e8:b7:36:5c:ae:cf:6d:b6:07:e4:5a:47:
         41:d9:8d:7f:e1:fc:f9:02:c3:0f:dc:47:68:75:3c:b9:a2:bc:
         2f:a6:a6:65:ff:ea:85:ee:96:8b:fd:bb:26:b6:34:42:30:eb:
         e2:08:b4:2a:42:18:22:4f:85:1c:5c:83:36:16:1d:ce:7a:02:
         c8:7a:c4:a5:cd:d9:e4:d9:4e:b5:2e:4c:06:ef:57:b8:2f:4d:
         42:21:e9:fb:65:d7:da:b2:ba:e7:29:dd:0d:e9:2f:ab:c7:e6:
         04:5f:11:5f:0f:e0:6a:f9:e5:e7:ec:63:76:d6:4a:a2:81:4e:
         41:5c:2a:ef:1a:0a:83:e4:cd:dd:08:f3:d7:5e:41:fa:93:dc:
         e7:52:c2:ac:c7:fc:63:77:34:63:75:f1:70:db:d8:29:f8:9b:
         83:66:06:55:25:55:e9:87:1f:df:4d:4c:81:11:c5:87:c6:19:
         fa:0e:97:17:6e:79:1f:f1:fa:c0:32:30:4f:11:74:e4:f9:61:
         ff:1a:60:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:50:27 2026 by rpki-client