This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/7G0NCEWyAUUTld6dbhxspAdwKu8.roa
File:                     7G0NCEWyAUUTld6dbhxspAdwKu8.roa (raw, json)
Hash identifier:          x0W+qVErOolxMsYnIkgUBz4sjWMNnyVZEzok5cCvMGQ=
Subject key identifier:   EC:6D:0D:08:45:B2:01:45:13:95:DE:9D:6E:1C:6C:A4:07:70:2A:EF
Certificate issuer:       /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial:       019B7E385984525B2BC581E0D7F77C192D8B
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/7G0NCEWyAUUTld6dbhxspAdwKu8.roa
Signing time:             Fri 02 Jan 2026 10:19:40 +0000
ROA not before:           Fri 02 Jan 2026 10:19:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6730
IP address blocks:        194.124.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:59:84:52:5b:2b:c5:81:e0:d7:f7:7c:19:2d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
        Validity
            Not Before: Jan  2 10:19:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ec6d0d0845b201451395de9d6e1c6ca407702aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:09:d2:61:c5:96:17:f3:f8:17:fe:39:dc:94:
                    73:dd:6b:09:67:41:e3:3a:39:67:ab:fe:cd:02:c7:
                    94:9f:65:12:59:a0:e3:f1:24:fe:79:e0:d2:e5:5a:
                    93:b0:14:a5:ac:94:dc:bc:3c:0f:18:0c:a6:a4:6d:
                    93:f2:e0:6c:3d:28:e3:30:21:72:34:b2:82:9c:b2:
                    26:95:90:a3:84:bc:1a:aa:64:3a:da:cf:af:e4:23:
                    3e:43:c3:77:5b:8c:6f:17:a0:11:d3:40:a2:54:88:
                    7f:0a:09:87:24:08:aa:0f:70:26:da:4f:6a:a4:08:
                    06:01:d3:6e:d8:4a:88:de:9a:9f:4a:9a:84:80:ef:
                    c8:0c:1c:48:c9:d0:ae:8a:73:dd:fa:aa:50:d5:a1:
                    06:4f:c2:6c:80:6b:c3:17:50:3c:f8:e2:af:08:11:
                    3d:79:ff:22:68:14:68:25:21:b3:30:10:58:72:73:
                    1d:b2:0b:b8:b7:1f:dd:d9:7f:3e:50:3b:1c:64:12:
                    49:42:61:4a:ae:08:4d:28:22:70:28:c0:9c:40:8e:
                    ba:9e:9a:d8:83:12:67:40:15:bb:1d:10:38:9f:ed:
                    92:b1:a2:2d:44:e6:dc:3b:d4:ef:53:2d:8b:44:40:
                    02:52:05:58:9d:1b:ed:86:c3:38:d2:c7:77:ae:4e:
                    a3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6D:0D:08:45:B2:01:45:13:95:DE:9D:6E:1C:6C:A4:07:70:2A:EF
            X509v3 Authority Key Identifier:
                keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/7G0NCEWyAUUTld6dbhxspAdwKu8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.124.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:22:50:39:1f:c6:f0:b3:46:33:b5:11:9e:6c:ed:2d:fd:da:
         53:6f:b9:a9:bb:a7:20:a7:af:c4:a9:1c:1a:67:7c:b1:57:65:
         e8:f6:e2:01:41:8d:b3:57:cd:97:7c:f5:5b:45:05:ee:ba:bc:
         c2:dd:28:14:fa:79:4a:79:39:a8:9e:3f:43:5a:c7:f1:56:62:
         86:4b:73:6c:84:81:94:6a:3f:56:9d:5b:74:9c:80:8b:b5:73:
         d4:83:63:7c:49:5e:26:a3:f6:7a:3d:e2:75:92:a4:91:74:79:
         d3:1a:c3:d8:40:5e:35:a2:74:f3:f2:78:28:bf:8c:35:13:95:
         8f:f8:f4:7e:12:16:23:93:c0:79:68:d0:f2:e9:81:9d:bd:94:
         7c:16:66:63:3a:bb:b9:0d:fa:49:35:15:19:f0:bb:a0:d7:2a:
         87:aa:98:18:28:45:15:3e:cb:da:af:44:03:04:ea:1b:87:cb:
         3d:cf:b3:ae:1b:fd:a2:30:80:6e:8c:c8:d2:2f:7e:9c:ee:bd:
         ad:db:90:f8:6e:99:3d:7f:9a:70:04:c3:e5:67:14:82:0f:5e:
         71:fd:72:83:24:b5:51:0f:81:6a:79:c3:c3:70:8b:54:2a:a8:
         37:bf:22:25:a7:be:d3:7c:13:07:87:f4:1d:7a:e4:a2:7f:cc:
         e2:ef:d2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:01:37 2026 by rpki-client