This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/7JHxpyxpo02zkoPorIc6uG3BVuA.roa
File:                     7JHxpyxpo02zkoPorIc6uG3BVuA.roa (raw, json)
Hash identifier:          b8rxzTKBj6Qg6MVgNOKKZSKKJO0QmX7hL5AcNsaVFUw=
Subject key identifier:   EC:91:F1:A7:2C:69:A3:4D:B3:92:83:E8:AC:87:3A:B8:6D:C1:56:E0
Certificate issuer:       /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial:       019B7F82DC8D31F03732BB58D35C6F8CC0C1
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/7JHxpyxpo02zkoPorIc6uG3BVuA.roa
Signing time:             Fri 02 Jan 2026 16:20:41 +0000
ROA not before:           Fri 02 Jan 2026 16:20:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     207906
IP address blocks:        195.189.184.0/23 maxlen: 24
                          195.189.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:82:dc:8d:31:f0:37:32:bb:58:d3:5c:6f:8c:c0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
        Validity
            Not Before: Jan  2 16:20:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ec91f1a72c69a34db39283e8ac873ab86dc156e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:30:b6:d8:87:6f:75:9f:b9:0a:a1:f3:40:43:
                    9b:e3:fe:f7:36:ce:3b:7a:ce:73:69:71:9c:95:46:
                    b0:55:aa:be:60:b2:cc:92:dc:e3:06:66:4b:3d:b8:
                    10:5e:17:23:86:de:36:6c:4b:cc:c3:d3:4e:0e:03:
                    a4:1f:f6:a1:14:e6:9c:32:3a:ea:b2:4e:22:c2:aa:
                    e0:e9:19:67:86:7b:01:b6:25:21:88:c9:cf:3d:ea:
                    46:2c:fa:b7:2e:b1:e0:50:1a:ae:0c:b9:c7:00:87:
                    f7:e1:48:15:94:be:4f:de:ef:e3:96:55:f9:22:86:
                    bd:50:5d:be:ee:44:af:7e:66:60:8d:d7:f3:7b:98:
                    2c:34:36:c7:5c:4b:c5:18:7b:eb:d8:f9:cc:d9:93:
                    a9:6c:78:56:55:22:f6:0f:b8:57:60:f4:1d:f2:30:
                    d8:4c:85:15:9d:81:ad:6f:c6:84:60:e8:ff:c2:67:
                    6a:e2:4b:3d:90:41:0c:84:46:04:2c:b7:f0:6b:98:
                    e4:12:7c:09:38:65:77:2e:f4:52:f2:be:5f:c9:20:
                    d3:6a:69:bd:2c:21:66:9a:0c:f0:84:12:4a:f2:30:
                    69:e8:9e:32:29:a8:7f:3f:bd:30:23:ab:64:57:31:
                    e6:3a:59:d2:39:43:7d:14:16:dd:e8:70:12:f4:07:
                    6b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:91:F1:A7:2C:69:A3:4D:B3:92:83:E8:AC:87:3A:B8:6D:C1:56:E0
            X509v3 Authority Key Identifier:
                keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/7JHxpyxpo02zkoPorIc6uG3BVuA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.189.184.0/23
                  195.189.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:ae:cf:fe:14:79:1d:96:4c:48:2f:50:e4:70:8f:77:b7:6d:
         5b:e9:2a:23:c9:28:4b:9b:3b:96:62:57:a1:06:b8:c6:e2:d6:
         d5:3a:2b:7d:12:b3:2e:09:30:27:a9:66:1d:f1:6b:4d:fe:5b:
         ca:d6:fd:13:e3:70:fb:74:9e:2b:f7:5a:3a:b6:0c:69:b4:c5:
         ae:1b:2c:aa:8f:bc:41:e5:5d:e6:d8:95:90:3a:4f:4a:92:da:
         5c:37:00:07:70:61:42:7f:95:ff:09:8a:21:2d:bd:0d:b3:32:
         59:b5:0d:77:e5:2d:90:eb:75:e5:41:37:25:34:0f:86:2b:57:
         eb:43:77:34:3a:c9:42:0b:35:ee:96:33:ef:f8:a4:57:aa:a5:
         cb:f4:00:5c:ff:f7:93:0e:29:5f:73:82:9a:03:56:18:9c:71:
         3f:2c:1d:ef:35:9f:a6:fc:05:82:6e:87:0a:54:7d:d8:9a:4d:
         93:d6:13:bc:cc:d4:c7:9b:9e:24:8c:b3:99:4c:76:f8:8a:d8:
         20:8e:28:ca:7f:32:47:88:9e:8c:0c:de:e9:6d:16:2a:0a:e5:
         30:a7:b2:63:ee:2e:0d:59:be:3f:f8:7a:a6:b1:f0:8d:3f:94:
         d7:e8:c4:e5:80:44:b1:06:7e:c7:45:13:fb:d5:3c:5e:33:07:
         a6:2c:60:2c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt/gtyNMfA3MrtY01xvjMDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YTRiMzVjOGUwMjU2ZWFhMmZiZjc1MWU2YzAxZTVlOTA5
YzBhMWYwHhcNMjYwMTAyMTYyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzkxZjFhNzJjNjlhMzRkYjM5MjgzZThhYzg3M2FiODZkYzE1NmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzC22IdvdZ+5CqHzQEOb4/73Ns47
es5zaXGclUawVaq+YLLMktzjBmZLPbgQXhcjht42bEvMw9NODgOkH/ahFOacMjrq
sk4iwqrg6RlnhnsBtiUhiMnPPepGLPq3LrHgUBquDLnHAIf34UgVlL5P3u/jllX5
Ioa9UF2+7kSvfmZgjdfze5gsNDbHXEvFGHvr2PnM2ZOpbHhWVSL2D7hXYPQd8jDY
TIUVnYGtb8aEYOj/wmdq4ks9kEEMhEYELLfwa5jkEnwJOGV3LvRS8r5fySDTamm9
LCFmmgzwhBJK8jBp6J4yKah/P70wI6tkVzHmOlnSOUN9FBbd6HAS9Adr1wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOyR8acsaaNNs5KD6KyHOrhtwVbgMB8GA1UdIwQY
MBaAFEaks1yOAlbqovv3UebAHl6QnAofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMTkxZDYtNTQyMy00MmNmLThmNmIt
MTE3ODg2ZWI3ZDY3LzEvN0pIeHB5eHBvMDJ6a29Qb3JJYzZ1RzNCVnVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMTkxZDYtNTQyMy00MmNmLThmNmItMTE3ODg2ZWI3ZDY3
LzEvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw724AwQB
w72+MA0GCSqGSIb3DQEBCwUAA4IBAQBwrs/+FHkdlkxIL1DkcI93t21b6SojyShL
mzuWYlehBrjG4tbVOit9ErMuCTAnqWYd8WtN/lvK1v0T43D7dJ4r91o6tgxptMWu
Gyyqj7xB5V3m2JWQOk9KktpcNwAHcGFCf5X/CYohLb0NszJZtQ135S2Q63XlQTcl
NA+GK1frQ3c0OslCCzXuljPv+KRXqqXL9ABc//eTDilfc4KaA1YYnHE/LB3vNZ+m
/AWCbocKVH3Ymk2T1hO8zNTHm54kjLOZTHb4itggjijKfzJHiJ6MDN7pbRYqCuUw
p7Jj7i4NWb4/+HqmsfCNP5TX6MTlgESxBn7HRRP71TxeMwemLGAs
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:42:45 2026 by rpki-client