This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/a2_9wwKBZMb8Nr8HZeMyqj6eUQ4.roa
File:                     a2_9wwKBZMb8Nr8HZeMyqj6eUQ4.roa (raw, json)
Hash identifier:          HfOJoJtir41J/f+2Eh1+jNbOpl4HZb7UfJBs0/Ovz88=
Subject key identifier:   6B:6F:FD:C3:02:81:64:C6:FC:36:BF:07:65:E3:32:AA:3E:9E:51:0E
Certificate issuer:       /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial:       019B78A3522F49C50A1A529ED87FBCB37A84
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/a2_9wwKBZMb8Nr8HZeMyqj6eUQ4.roa
Signing time:             Thu 01 Jan 2026 08:18:47 +0000
ROA not before:           Thu 01 Jan 2026 08:18:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     834
IP address blocks:        185.103.5.0/24 maxlen: 24
                          185.103.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:78:a3:52:2f:49:c5:0a:1a:52:9e:d8:7f:bc:b3:7a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
        Validity
            Not Before: Jan  1 08:18:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6b6ffdc3028164c6fc36bf0765e332aa3e9e510e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:f7:f6:42:b9:f0:64:66:d3:33:6b:c4:03:
                    c2:05:62:f5:85:51:07:be:4c:5b:4a:33:d8:e5:d1:
                    7a:8a:0e:7b:cf:99:6d:db:b7:d7:3e:06:e7:1c:f5:
                    c0:24:a8:d1:d2:16:de:5d:a8:b9:9a:a5:f3:ba:6a:
                    9a:6e:1d:93:df:f5:b9:c0:50:8a:98:4e:27:bc:68:
                    80:fc:8f:67:db:1a:96:01:a9:fb:89:a3:cf:c7:06:
                    99:f2:b7:11:2a:0a:d9:e1:27:c2:17:57:7a:e6:21:
                    37:d3:1d:ad:a0:da:1e:1b:51:98:8f:d5:41:0e:3a:
                    5e:f6:f3:85:3e:a8:20:6c:f1:bd:d8:15:f1:30:34:
                    b1:ac:52:70:63:9c:f3:23:40:a0:10:4a:19:fe:f3:
                    24:dc:8b:d1:15:57:36:6b:8e:34:6e:ab:c3:12:25:
                    ae:7f:68:0b:a6:16:50:18:63:37:e2:74:d2:d0:80:
                    62:9d:69:33:76:cb:8e:d9:d3:60:9a:ab:73:77:22:
                    32:1e:d9:fa:1f:7d:cb:c4:f6:68:fc:26:2e:73:72:
                    ba:5f:31:0d:be:d0:81:3e:61:1c:62:4f:84:75:d0:
                    24:a7:61:8c:d7:18:1a:88:13:75:81:71:bd:22:b5:
                    72:29:20:d8:3e:dd:0c:d3:89:68:07:63:5c:3c:5a:
                    5d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6F:FD:C3:02:81:64:C6:FC:36:BF:07:65:E3:32:AA:3E:9E:51:0E
            X509v3 Authority Key Identifier:
                keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/a2_9wwKBZMb8Nr8HZeMyqj6eUQ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.103.5.0/24
                  185.103.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:a5:3d:41:43:3c:b5:ce:bc:99:2b:f8:6b:e5:d5:4f:11:48:
         de:58:1d:6e:02:8d:d1:99:bc:df:01:88:22:31:5b:19:ba:d4:
         54:87:9d:77:1a:c4:c1:a1:25:39:34:75:c7:e1:6e:fe:1f:93:
         ef:84:a5:a7:af:0d:19:c0:dc:49:c2:6e:2c:81:75:0f:07:30:
         c4:62:b2:ef:3f:a0:ac:f0:6e:69:83:69:5b:d2:4d:3a:3b:50:
         33:0c:27:2e:cb:89:49:53:97:66:b9:24:ca:aa:07:8c:c8:28:
         f5:18:23:19:55:58:36:c3:aa:83:09:c3:0c:14:72:03:15:b6:
         c4:5d:e1:3d:3f:58:66:0f:60:d9:0b:22:f0:dc:cf:15:0f:6c:
         84:24:2b:09:55:73:5d:81:43:ff:c0:25:43:5e:cf:b1:e7:d8:
         0d:cb:ee:12:9f:aa:95:39:0c:dc:11:b7:91:19:8e:7c:1a:2a:
         0a:85:c0:ff:ed:6d:2c:aa:c4:3f:fd:f8:e1:81:85:f1:ce:d1:
         02:b9:db:92:9a:1a:14:92:b9:62:59:ec:f7:51:c6:90:12:14:
         8b:db:86:e3:05:73:97:e8:31:4f:90:8e:17:af:7d:73:3d:6a:
         80:51:63:39:7f:10:55:12:2f:a0:36:19:3e:ec:4d:34:23:f5:
         bf:ff:ca:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:14:05 2026 by rpki-client