This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/wj36KuC4KkbAWGdbhxPcToGipcw.roa
File:                     wj36KuC4KkbAWGdbhxPcToGipcw.roa (raw, json)
Hash identifier:          /SiPmXieUUyR1/NuMTzivGKUx8ZGueEIDbGfwzhdLBk=
Subject key identifier:   C2:3D:FA:2A:E0:B8:2A:46:C0:58:67:5B:87:13:DC:4E:81:A2:A5:CC
Certificate issuer:       /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial:       019B7A5B3DC5AF607D04E1B9AE67705DB6B2
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/wj36KuC4KkbAWGdbhxPcToGipcw.roa
Signing time:             Thu 01 Jan 2026 16:19:18 +0000
ROA not before:           Thu 01 Jan 2026 16:19:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     49121
IP address blocks:        37.77.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:3d:c5:af:60:7d:04:e1:b9:ae:67:70:5d:b6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
        Validity
            Not Before: Jan  1 16:19:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=c23dfa2ae0b82a46c058675b8713dc4e81a2a5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:82:62:d5:ec:ea:7f:ac:04:09:82:37:9f:e4:
                    5a:0f:5c:b0:93:6a:56:57:97:23:f0:12:c7:3c:fe:
                    78:83:15:b3:cd:0a:d2:7f:8c:4c:99:9e:2d:72:34:
                    ca:c6:b2:0a:0b:e2:37:84:6c:e1:e9:50:05:eb:14:
                    61:c5:b1:29:b4:55:4e:ce:ea:21:98:34:0d:e2:c0:
                    37:93:d4:fc:07:84:da:8b:0e:b5:31:1b:f7:c3:b2:
                    fd:8e:42:69:bf:44:42:e4:b5:b7:bb:56:74:fe:11:
                    ae:d7:31:03:76:06:1e:82:0f:00:16:0d:f1:b9:42:
                    e9:6d:1b:01:4a:fc:49:73:c8:c7:98:f6:bf:31:62:
                    78:ec:00:b0:d1:76:8f:a6:06:a6:f2:eb:a7:ae:8c:
                    cb:e9:b0:db:14:8f:28:87:5f:88:a4:4e:9e:d8:e1:
                    1e:ef:a7:1d:ac:2f:36:1c:00:7e:74:c5:a0:51:b1:
                    40:91:67:45:a9:fe:6c:75:a6:d3:c8:45:32:84:b1:
                    25:31:04:12:c4:ea:e3:f5:ab:6e:d4:58:3f:a5:a7:
                    e2:c8:91:53:8e:f6:b3:6d:5a:8f:1f:1a:69:66:13:
                    ae:60:de:8a:ab:25:4d:f5:20:22:01:7b:82:fb:6d:
                    51:d4:8d:90:a6:b1:ee:25:6e:15:d5:5c:0b:78:b1:
                    6b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3D:FA:2A:E0:B8:2A:46:C0:58:67:5B:87:13:DC:4E:81:A2:A5:CC
            X509v3 Authority Key Identifier:
                keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/wj36KuC4KkbAWGdbhxPcToGipcw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.77.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:e7:73:2a:bb:38:4f:13:0a:34:49:20:02:4a:12:81:1f:6f:
         82:52:4d:76:c3:06:a6:4e:c0:60:14:b3:8d:8b:a5:31:60:f8:
         da:ec:92:08:f2:31:60:0f:82:e6:b0:c2:f8:18:37:3f:6a:29:
         69:bd:f3:00:fb:62:bb:5b:e2:24:f5:83:4c:69:ac:f5:5e:19:
         8d:2b:da:ee:69:db:ef:ab:54:65:7a:64:6b:68:fd:31:12:23:
         7c:02:2d:2f:17:6f:d5:61:07:90:7f:82:fc:53:ce:20:5b:61:
         ab:e1:f5:fc:4b:52:6c:cb:e1:c5:7a:5c:f6:98:7e:12:a8:58:
         d2:60:68:9a:d0:7a:0b:fd:b1:40:e1:00:5c:1a:83:2b:69:2f:
         53:2a:39:f7:23:54:00:6e:0a:47:d1:d7:72:8e:b1:a7:1f:ea:
         a6:ba:01:29:c3:15:05:e5:07:fb:3a:0e:ca:6d:71:1e:38:4e:
         a3:9e:5e:4e:21:de:82:6e:81:23:52:4c:07:99:b3:bc:29:b5:
         eb:04:3d:22:ed:7d:58:43:af:75:1c:3c:f3:7f:29:6a:da:c6:
         97:dc:cb:0b:ce:16:5a:27:fe:42:51:cc:3a:b8:bc:84:53:5a:
         6f:51:ec:9b:e8:e5:42:9e:2c:8e:71:85:66:27:33:67:4a:c2:
         83:5c:03:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:24:18 2026 by rpki-client