This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/7_06_d8m200d8_tjZSq2UCZKSI0.roa
File:                     7_06_d8m200d8_tjZSq2UCZKSI0.roa (raw, json)
Hash identifier:          Ljga78frhbutRTkwvilj4z5iYNMhtY6iOdl6O+mlPRc=
Subject key identifier:   EF:FD:3A:FD:DF:26:DB:4D:1D:F3:FB:63:65:2A:B6:50:26:4A:48:8D
Certificate issuer:       /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial:       019B7E37E5B82C0A6B1C42B7C7FA37AB5BEA
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/7_06_d8m200d8_tjZSq2UCZKSI0.roa
Signing time:             Fri 02 Jan 2026 10:19:11 +0000
ROA not before:           Fri 02 Jan 2026 10:19:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     31645
IP address blocks:        212.12.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:37:e5:b8:2c:0a:6b:1c:42:b7:c7:fa:37:ab:5b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
        Validity
            Not Before: Jan  2 10:19:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=effd3afddf26db4d1df3fb63652ab650264a488d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:19:d1:b2:67:50:8e:b8:26:e5:81:07:f6:
                    27:ac:54:5d:da:c7:e5:6e:e2:37:a3:8d:db:a2:17:
                    fd:13:2b:2f:d4:2c:96:45:b2:c1:53:b1:8f:06:1e:
                    ae:94:c0:5d:a5:04:ff:e2:5e:e0:7c:7e:4a:52:59:
                    bc:70:cd:bd:41:57:ef:38:5c:11:27:0f:11:61:15:
                    71:d0:77:82:98:fe:64:b0:95:50:3f:88:25:c1:a5:
                    13:c2:04:6a:ea:10:16:51:ac:ec:10:c8:43:90:48:
                    b1:73:a3:5d:e6:82:00:a0:71:43:34:27:c2:44:0a:
                    60:76:3d:3c:07:20:0e:1e:b4:a6:6a:12:b0:95:43:
                    9a:c9:67:4f:9f:04:74:b9:a6:ff:d8:ee:82:8b:b6:
                    b2:bf:8b:53:1e:77:ad:12:a7:84:dd:e7:1c:16:cc:
                    7e:02:cd:1e:2a:2d:74:ea:09:24:db:a3:c9:78:91:
                    bb:a5:4e:ec:f8:ea:6e:3e:81:b4:d5:e6:c9:17:3b:
                    9b:94:97:23:60:1e:aa:ac:79:7c:ec:6f:ac:58:61:
                    e1:5b:72:03:b4:04:86:cc:ce:c6:7b:90:6d:62:bf:
                    fb:13:f7:fe:4a:16:17:0d:18:21:fa:70:af:54:54:
                    29:9d:1a:2a:ee:4d:9c:c2:36:0d:ba:af:4d:60:e5:
                    be:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FD:3A:FD:DF:26:DB:4D:1D:F3:FB:63:65:2A:B6:50:26:4A:48:8D
            X509v3 Authority Key Identifier:
                keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/7_06_d8m200d8_tjZSq2UCZKSI0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.12.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:c9:a0:9b:7a:12:cd:94:1a:e4:f7:e2:fc:f4:52:4a:a0:c3:
         57:e6:dc:93:d9:b8:8d:cc:54:1a:e3:b0:ac:06:a7:ed:0f:ac:
         a4:3a:98:34:2c:59:e8:9a:6d:d6:01:f6:c1:f1:99:cc:20:d0:
         ee:2c:5f:14:08:e6:57:75:34:3b:f1:f2:c1:24:bd:a6:06:f4:
         18:dd:e6:ac:26:95:c6:0d:f6:56:c3:ae:4a:7e:20:40:e4:8e:
         5d:2e:37:e2:e9:fd:6c:5d:4e:26:a5:d4:d0:f7:29:8a:3f:7c:
         78:14:c3:06:af:3b:bb:6d:38:56:44:ac:97:6d:80:e5:9b:5e:
         4d:91:35:5c:71:4a:f0:6a:97:38:66:f5:ef:92:0f:4b:df:03:
         e9:81:b8:2d:ef:66:8b:49:a7:fe:b2:87:e9:76:8b:00:43:05:
         85:40:62:77:bc:c5:06:b2:ce:85:cc:6a:cb:82:e4:8b:b0:99:
         ac:b7:59:d1:48:43:48:38:92:17:a6:e4:11:9b:a5:08:4f:11:
         4d:cf:87:5f:43:bd:de:18:d6:ac:e1:79:80:44:01:85:69:8b:
         00:91:de:b0:aa:49:e7:2b:c9:c0:b0:66:82:ee:2e:10:de:61:
         b7:b5:ec:9c:80:47:a1:8f:27:47:f9:31:45:3e:53:51:c6:da:
         a0:56:df:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:44:39 2026 by rpki-client