This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/7_ksMt69-ko9Gs3LCNVMY5Yua58.roa
File:                     7_ksMt69-ko9Gs3LCNVMY5Yua58.roa (raw, json)
Hash identifier:          psyoJRhZwf9m2YaavxF9lBoTofEe6e2bqkYbKXhQaKc=
Subject key identifier:   EF:F9:2C:32:DE:BD:FA:4A:3D:1A:CD:CB:08:D5:4C:63:96:2E:6B:9F
Certificate issuer:       /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial:       019B7AC921877ABF05A463EBF235823E75DA
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/7_ksMt69-ko9Gs3LCNVMY5Yua58.roa
Signing time:             Thu 01 Jan 2026 18:19:20 +0000
ROA not before:           Thu 01 Jan 2026 18:19:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     203823
IP address blocks:        185.122.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c9:21:87:7a:bf:05:a4:63:eb:f2:35:82:3e:75:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb190d102ac9603b405b36374d429868604937af
        Validity
            Not Before: Jan  1 18:19:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eff92c32debdfa4a3d1acdcb08d54c63962e6b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:c6:16:50:93:81:07:37:27:48:dd:66:92:
                    b6:2d:5e:55:ee:64:bc:c2:5a:16:0e:f0:0b:9e:f1:
                    a4:e8:16:58:55:7a:a2:a5:ba:4e:20:24:dd:f2:42:
                    a3:18:f7:5b:6f:6f:5a:d5:0d:0d:66:70:25:0c:7e:
                    46:4b:82:0e:df:b8:d1:0f:4f:b4:2b:cd:87:84:5b:
                    74:c6:5e:84:ce:31:54:ee:fb:01:a8:57:92:3a:54:
                    38:fc:44:9c:aa:16:53:32:e9:ef:a6:4a:2f:4e:e4:
                    0d:cc:6d:bc:76:56:1b:f2:06:b6:30:e9:2c:af:b1:
                    25:99:c3:16:c2:8b:89:19:96:36:c3:fe:c8:bd:2d:
                    58:8a:a7:1b:73:1c:d1:fc:bc:46:7f:da:04:94:0f:
                    1c:74:ff:9b:82:b1:6a:45:aa:ee:e4:da:4d:f4:45:
                    5e:18:0d:7c:e0:2e:c4:ad:e2:b5:d3:72:61:e1:d1:
                    d2:09:0a:0b:8f:5c:00:ba:8f:9d:e5:5a:d6:54:d2:
                    09:9d:86:b2:25:a2:2c:a3:26:5c:ce:a9:30:6f:63:
                    bb:b2:09:cc:3c:49:68:37:e4:67:80:19:c9:73:58:
                    93:e7:b0:cd:09:55:2c:75:06:c3:18:f4:9c:e9:31:
                    28:77:2f:74:11:40:1a:72:8a:4c:03:a3:62:45:08:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F9:2C:32:DE:BD:FA:4A:3D:1A:CD:CB:08:D5:4C:63:96:2E:6B:9F
            X509v3 Authority Key Identifier:
                keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/7_ksMt69-ko9Gs3LCNVMY5Yua58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.122.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:d4:9b:52:bc:07:48:ba:8e:7a:1c:0d:2d:cb:4d:d1:26:3e:
         9d:35:3e:f5:46:c6:93:a6:4b:7e:37:4f:1b:0c:a9:64:22:fa:
         51:18:7f:3b:08:3d:75:33:c2:dc:b2:d1:6c:4e:f9:bc:a7:e9:
         3c:d2:f4:e3:f4:3d:11:c5:e9:14:87:40:69:4a:15:b5:f5:a8:
         90:a9:10:d5:5c:33:e3:6c:76:8c:77:55:23:7d:40:cd:e4:4e:
         7b:8b:4e:22:aa:c9:ee:67:89:67:62:00:17:c2:75:37:eb:9f:
         c6:dd:96:c0:e8:ae:02:f6:fb:f2:4e:63:9e:52:8c:7f:3a:33:
         92:5c:d0:7c:b7:35:98:62:e8:57:b9:45:53:23:2e:ea:0a:26:
         82:d7:8a:c1:62:26:9b:88:67:3c:8c:b7:9b:84:e3:18:eb:16:
         41:9e:72:e3:91:15:62:71:c7:7e:09:c4:8b:bb:8f:6b:a7:91:
         0a:4c:36:65:06:6f:af:50:8a:37:d5:bd:58:28:a1:07:34:cc:
         33:df:de:73:11:0d:91:a6:22:c4:c5:a3:eb:a7:f4:d0:88:ff:
         56:e6:d1:47:93:8c:b4:52:ce:10:2a:27:2a:79:f4:87:00:07:
         6d:e7:3e:86:e0:2f:ad:4d:be:f5:30:aa:1e:5f:1b:c4:49:0c:
         30:13:86:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6ySGHer8FpGPr8jWCPnXaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMTkwZDEwMmFjOTYwM2I0MDViMzYzNzRkNDI5ODY4NjA0
OTM3YWYwHhcNMjYwMTAxMTgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmY5MmMzMmRlYmRmYTRhM2QxYWNkY2IwOGQ1NGM2Mzk2MmU2YjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjDGFlCTgQc3J0jdZpK2LV5V7mS8
wloWDvALnvGk6BZYVXqipbpOICTd8kKjGPdbb29a1Q0NZnAlDH5GS4IO37jRD0+0
K82HhFt0xl6EzjFU7vsBqFeSOlQ4/EScqhZTMunvpkovTuQNzG28dlYb8ga2MOks
r7ElmcMWwouJGZY2w/7IvS1YiqcbcxzR/LxGf9oElA8cdP+bgrFqRaru5NpN9EVe
GA184C7EreK103Jh4dHSCQoLj1wAuo+d5VrWVNIJnYayJaIsoyZczqkwb2O7sgnM
PEloN+RngBnJc1iT57DNCVUsdQbDGPSc6TEody90EUAacopMA6NiRQhJcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO/5LDLevfpKPRrNywjVTGOWLmufMB8GA1UdIwQY
MBaAFLsZDRAqyWA7QFs2N01CmGhgSTevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYt
ZTkzZTJlYmE2OWI5LzEvN19rc010Njkta285R3MzTENOVk1ZNVl1YTU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYtZTkzZTJlYmE2OWI5
LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXrEMA0G
CSqGSIb3DQEBCwUAA4IBAQDM1JtSvAdIuo56HA0ty03RJj6dNT71RsaTpkt+N08b
DKlkIvpRGH87CD11M8LcstFsTvm8p+k80vTj9D0RxekUh0BpShW19aiQqRDVXDPj
bHaMd1UjfUDN5E57i04iqsnuZ4lnYgAXwnU365/G3ZbA6K4C9vvyTmOeUox/OjOS
XNB8tzWYYuhXuUVTIy7qCiaC14rBYiabiGc8jLebhOMY6xZBnnLjkRViccd+CcSL
u49rp5EKTDZlBm+vUIo31b1YKKEHNMwz395zEQ2RpiLExaPrp/TQiP9W5tFHk4y0
Us4QKicqefSHAAdt5z6G4C+tTb71MKoeXxvESQwwE4b6
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:14:06 2026 by rpki-client