This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/3138352e33372e3235352e302f32342d3332203d3e203233383538.roa
File:                     3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (raw, json)
Hash identifier:          VWPLpMhD5gFEQvg3MuBKWfEeg3FwVU68VyTabvkKo5k=
Subject key identifier:   8B:50:2B:2D:8E:3F:D1:73:E6:B8:36:93:1C:59:D8:C8:40:6A:DF:A3
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       4013B15EF988862123E3E41210012499F1A63E99
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/3138352e33372e3235352e302f32342d3332203d3e203233383538.roa
Signing time:             Thu 11 Dec 2025 14:53:05 +0000
ROA not before:           Thu 11 Dec 2025 14:48:05 +0000
ROA not after:            Thu 10 Dec 2026 14:53:05 +0000
asID:                     23858
IP address blocks:        185.37.255.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:13:b1:5e:f9:88:86:21:23:e3:e4:12:10:01:24:99:f1:a6:3e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Dec 11 14:48:05 2025 GMT
            Not After : Dec 10 14:53:05 2026 GMT
        Subject: CN=8B502B2D8E3FD173E6B836931C59D8C8406ADFA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:82:f7:61:00:2c:57:d9:7c:50:68:a8:a8:
                    4b:e7:78:ac:72:6b:16:ae:64:bc:5f:ce:9b:3c:89:
                    99:3c:7f:59:b2:b1:17:e2:b4:05:be:ee:36:98:f0:
                    d6:5f:d7:c3:78:30:fa:95:ab:65:3c:0b:76:c7:aa:
                    85:ae:7d:6e:e0:af:7b:63:dc:a6:65:d2:8f:4f:33:
                    51:9e:7a:45:22:ae:91:34:b9:13:78:9a:fa:3f:7a:
                    16:9e:80:6c:36:45:c2:7d:95:da:3a:dd:3a:e0:03:
                    4a:85:dc:24:f1:86:8b:17:26:b6:8d:3f:70:cc:64:
                    f5:d4:2d:94:8f:32:37:eb:48:ca:e4:63:b2:8e:13:
                    74:29:c8:31:18:50:15:a0:8a:ea:30:a8:62:37:91:
                    82:4d:77:2d:36:b6:19:d8:01:32:72:5e:8c:0e:a7:
                    8a:9e:45:c0:a3:4e:0a:10:fa:7a:92:c0:8c:d0:a0:
                    45:1f:1b:2f:f6:16:3e:a8:65:2b:cc:cd:1a:87:f1:
                    37:14:53:e8:6c:3b:10:4c:84:6e:28:8a:bd:90:19:
                    61:1f:eb:ac:79:91:f9:58:1d:13:5d:80:44:cd:21:
                    fd:e7:f3:cc:2a:dc:a6:d2:c4:59:00:1f:6e:da:90:
                    a4:2e:da:3a:11:a9:6f:69:f2:e1:cd:8e:72:4a:e7:
                    e5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:50:2B:2D:8E:3F:D1:73:E6:B8:36:93:1C:59:D8:C8:40:6A:DF:A3
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/3138352e33372e3235352e302f32342d3332203d3e203233383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.37.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ce:7d:58:b2:3a:bb:af:37:12:05:62:36:fb:7e:fa:23:91:
         98:7e:c6:10:9c:32:bd:90:7b:de:3d:fb:c8:f6:f1:70:6b:28:
         a2:54:ce:ef:dd:02:47:50:72:98:57:c5:bf:86:14:b7:61:c4:
         b3:b6:1f:48:9a:d9:e1:32:f5:56:0a:5b:22:7b:5c:c1:ef:82:
         3a:2e:9e:01:e5:12:c3:29:6d:5c:cd:95:3a:96:b8:9a:c8:7f:
         f9:87:be:88:b3:7a:a9:a2:5a:97:7d:ca:b6:0d:ec:1b:6b:78:
         b2:7a:7a:28:47:84:30:e5:9f:d5:0f:ae:0b:78:c2:a8:31:06:
         28:58:f6:ca:97:45:fd:fd:9c:38:93:1a:99:aa:f7:57:e2:f8:
         a9:02:01:03:63:0a:f8:0a:48:40:b4:00:33:08:a9:37:51:44:
         c5:85:7e:a7:7a:d9:3d:c7:b9:49:30:6c:72:7b:2b:88:fd:8a:
         e4:3a:97:fb:93:41:66:7c:1a:03:35:be:53:87:97:a9:cf:87:
         58:71:a1:0a:4c:c9:5a:5f:ce:d0:9b:51:ee:27:74:ce:20:0b:
         f3:c6:81:da:e8:86:bc:49:db:0c:b9:c3:23:03:cb:42:24:51:
         eb:53:2c:0b:f6:bb:1d:a3:de:64:85:f8:e8:b9:fd:3e:84:05:
         dd:1c:51:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:10:46 2025 by rpki-client