This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/7tVtNiyO9j_I6qx9pNFbd0tkZzw.roa
File:                     7tVtNiyO9j_I6qx9pNFbd0tkZzw.roa (raw, json)
Hash identifier:          orMvjxgtz9dgIxvBQuhbyEpCrOfBI/s+0aHhIMY/22U=
Subject key identifier:   EE:D5:6D:36:2C:8E:F6:3F:C8:EA:AC:7D:A4:D1:5B:77:4B:64:67:3C
Certificate issuer:       /CN=1c6ebf46582a243a798eddf35ab231f75ec5a382
Certificate serial:       019A970BB358CB6F3B4B51EFD8997BCF7D7B
Authority key identifier: 1C:6E:BF:46:58:2A:24:3A:79:8E:DD:F3:5A:B2:31:F7:5E:C5:A3:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HG6_RlgqJDp5jt3zWrIx917Fo4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/7tVtNiyO9j_I6qx9pNFbd0tkZzw.roa
Signing time:             Tue 18 Nov 2025 12:58:37 +0000
ROA not before:           Tue 18 Nov 2025 12:58:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     204815
IP address blocks:        203.23.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HG6_RlgqJDp5jt3zWrIx917Fo4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:97:0b:b3:58:cb:6f:3b:4b:51:ef:d8:99:7b:cf:7d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c6ebf46582a243a798eddf35ab231f75ec5a382
        Validity
            Not Before: Nov 18 12:58:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eed56d362c8ef63fc8eaac7da4d15b774b64673c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:49:19:e7:62:18:a9:9d:94:a3:34:67:4f:
                    c6:d4:1e:d0:41:02:ad:2d:60:23:96:31:fc:bc:d4:
                    ad:e9:08:3c:96:2b:fa:4b:e7:f0:f9:09:8b:ab:e9:
                    83:17:5d:4f:7e:30:cb:59:95:29:20:77:5c:eb:57:
                    97:9f:75:da:10:5b:ed:ad:76:af:bd:8e:01:e4:43:
                    9d:0a:09:28:56:c4:fa:2e:14:62:14:fb:61:73:99:
                    f5:62:4e:7e:2d:b8:57:75:0f:e6:3d:fe:2d:f0:80:
                    09:d0:e2:f7:9a:2a:94:4d:67:eb:01:51:7c:33:0a:
                    2b:ac:45:6b:b9:27:12:7f:d5:ac:08:d1:41:c4:36:
                    d9:50:d3:ab:b9:eb:96:44:67:f8:5a:7c:03:61:77:
                    88:d5:2a:f3:7f:e3:18:03:34:53:c3:12:d5:c8:b9:
                    9b:15:23:b6:d5:37:5d:bb:18:f5:43:de:6a:0f:75:
                    6b:a4:95:d4:1b:19:2a:84:02:7d:6a:ad:01:61:a9:
                    40:8c:f9:f3:a6:f2:1c:1d:85:cd:71:1d:bd:f2:31:
                    e6:9c:d0:ac:e5:d2:57:a2:ca:10:60:01:cd:03:a2:
                    60:5e:17:47:33:21:c0:04:f3:3a:b5:65:08:d4:43:
                    60:2e:5c:3a:03:a6:a1:97:35:e6:05:47:e7:3c:67:
                    62:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D5:6D:36:2C:8E:F6:3F:C8:EA:AC:7D:A4:D1:5B:77:4B:64:67:3C
            X509v3 Authority Key Identifier:
                keyid:1C:6E:BF:46:58:2A:24:3A:79:8E:DD:F3:5A:B2:31:F7:5E:C5:A3:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HG6_RlgqJDp5jt3zWrIx917Fo4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/7tVtNiyO9j_I6qx9pNFbd0tkZzw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/309d30-b1f6-4442-a2db-2b335ac66af5/1/HG6_RlgqJDp5jt3zWrIx917Fo4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.23.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:3d:13:31:a3:1f:33:46:ac:0c:17:1f:01:94:37:fe:02:4f:
         45:40:07:e7:3e:ce:b0:f8:b3:f4:18:6c:20:ee:1d:92:0d:62:
         3c:18:75:ca:f4:b3:0e:dc:87:40:2e:db:f5:b2:e4:fd:ca:0b:
         ce:05:05:be:19:ac:07:99:43:bb:f4:85:19:47:5c:9b:7a:ea:
         6a:b3:40:53:2d:66:43:40:d1:f2:45:6b:6a:2c:e8:a1:15:20:
         78:43:80:a3:b9:37:f3:76:c9:3d:82:f9:c9:88:3e:9d:b8:bd:
         43:86:62:7c:0a:94:70:a4:8b:b0:e3:0a:f8:51:6b:08:11:47:
         b2:0e:8a:51:7f:f5:af:c0:0b:cf:ec:a3:d1:a9:1a:49:4f:79:
         af:0d:a7:dd:71:59:b7:a5:67:bf:71:52:0c:28:30:c1:14:21:
         ed:8c:ae:bb:23:f9:e0:e0:56:45:57:84:07:da:f1:0b:2c:0b:
         3f:80:e2:01:79:56:1d:d9:12:d5:ca:6a:6b:bd:32:ea:da:ea:
         8a:19:92:0f:23:16:9c:a7:3a:54:e1:17:b9:7b:2a:5b:e2:98:
         ea:10:ef:4d:e7:65:fd:ee:83:18:12:9d:f5:6f:0d:c1:94:c1:
         41:96:0f:e4:a1:c2:80:d4:8e:7f:af:f6:74:35:76:af:0c:1d:
         99:5c:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:34:51 2025 by rpki-client