This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/J40_KlT3-Sey5bAIRfdyYW8QH2w.roa
File:                     J40_KlT3-Sey5bAIRfdyYW8QH2w.roa (raw, json)
Hash identifier:          ktrLXwF2mH8HpV61DUldxAl7PN7AxEoLl+QT4NZrtPw=
Subject key identifier:   27:8D:3F:2A:54:F7:F9:27:B2:E5:B0:08:45:F7:72:61:6F:10:1F:6C
Certificate issuer:       /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial:       019B7AC90370E3F7139C01234D0234B53FB6
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/J40_KlT3-Sey5bAIRfdyYW8QH2w.roa
Signing time:             Thu 01 Jan 2026 18:19:12 +0000
ROA not before:           Thu 01 Jan 2026 18:19:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     21427
IP address blocks:        37.235.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:03:70:e3:f7:13:9c:01:23:4d:02:34:b5:3f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
        Validity
            Not Before: Jan  1 18:19:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=278d3f2a54f7f927b2e5b00845f772616f101f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:6b:69:d6:d1:ef:25:49:cf:d3:ed:f7:58:
                    bc:74:97:62:f5:bc:1b:1b:4b:8d:f4:07:01:c7:28:
                    e9:27:82:a8:ed:53:c4:37:49:9d:08:07:35:07:51:
                    d1:a4:a6:5c:fb:c3:77:db:44:8f:12:6c:db:b8:b4:
                    28:e8:94:82:46:dc:db:95:8f:97:4b:31:e2:fb:bc:
                    4b:10:64:0b:9b:69:db:5d:0b:46:6b:65:a7:22:1c:
                    bf:6c:39:ed:82:a0:a4:cb:f3:3c:77:f7:cc:5b:5c:
                    55:27:4c:05:41:06:39:ac:e2:cf:f8:c6:0c:8e:9e:
                    54:01:a5:11:a8:7d:10:13:e6:ea:fa:ce:a6:b0:3a:
                    05:81:e7:25:6d:42:2b:75:9f:42:d3:4b:09:40:30:
                    c5:09:a5:f6:bf:18:03:e1:0c:6b:98:a0:c8:3f:b9:
                    8b:f8:75:81:e1:e9:d4:c6:59:ea:6d:cb:1f:b0:70:
                    76:67:d0:7f:03:f6:85:ec:0d:17:94:29:c4:8f:5d:
                    e6:e2:56:6d:ad:b0:21:41:6e:02:ce:76:6b:f8:e6:
                    0f:ac:ec:1d:7f:b3:d9:25:2a:27:2e:b2:d6:40:9f:
                    2b:29:e7:99:5c:b3:da:58:27:e5:9d:73:dc:74:b2:
                    7f:b5:3b:e1:dd:c2:97:48:f4:f4:aa:bc:5f:a5:32:
                    81:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8D:3F:2A:54:F7:F9:27:B2:E5:B0:08:45:F7:72:61:6F:10:1F:6C
            X509v3 Authority Key Identifier:
                keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/J40_KlT3-Sey5bAIRfdyYW8QH2w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.235.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:c1:d8:25:99:d5:64:93:77:4d:d1:b7:af:5f:28:00:79:2f:
         12:51:ff:f3:80:1b:c5:f0:40:0f:a8:f6:22:84:aa:25:b7:ef:
         bc:ba:58:c5:4e:fd:4e:b2:a0:3d:3f:ab:75:64:db:9c:45:b8:
         9a:76:c7:dd:78:45:bd:81:5e:91:d4:44:2d:ee:4e:a2:b9:57:
         ed:ea:50:67:aa:7f:5c:58:c6:8b:68:ee:b7:01:a7:da:5f:71:
         68:5f:d8:9e:bb:18:6b:38:a2:2e:36:25:24:09:ec:8d:29:24:
         85:aa:c6:d7:bd:4f:fb:bd:f0:22:70:62:91:46:76:1e:e7:00:
         35:fc:72:01:7b:c3:99:08:72:dd:89:e0:7f:1d:d7:5b:a9:67:
         ae:1c:e6:cc:c5:09:78:3f:c8:0f:1a:a3:19:88:18:d1:ac:cf:
         a1:2b:a0:9d:72:0b:9b:f8:fa:dd:b2:03:fc:fb:06:26:69:9c:
         d8:47:4a:e6:4f:ea:df:26:fb:10:8b:ac:68:ba:30:00:63:b4:
         52:88:42:ed:00:89:9a:46:11:b9:78:99:26:2e:08:27:2e:85:
         9f:02:3f:55:a2:2a:9c:bd:8c:00:1b:4f:ba:e6:e3:06:92:04:
         96:c2:4e:db:cf:69:f8:21:0a:5c:1a:d1:86:11:ac:17:c4:68:
         04:89:f9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 23:41:41 2026 by rpki-client