This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/fScuGoqudu5TxiE70DprlLcKYsM.roa
File:                     fScuGoqudu5TxiE70DprlLcKYsM.roa (raw, json)
Hash identifier:          Qna0Roz67B/VzCkvRv3pYKjnRZOrhXbgEhbWUZJL9So=
Subject key identifier:   7D:27:2E:1A:8A:AE:76:EE:53:C6:21:3B:D0:3A:6B:94:B7:0A:62:C3
Certificate issuer:       /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial:       019B77C66F981ECC84CA36B431E5D28EE520
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/fScuGoqudu5TxiE70DprlLcKYsM.roa
Signing time:             Thu 01 Jan 2026 04:17:31 +0000
ROA not before:           Thu 01 Jan 2026 04:17:31 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     50868
IP address blocks:        2a0d:2406:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c6:6f:98:1e:cc:84:ca:36:b4:31:e5:d2:8e:e5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
        Validity
            Not Before: Jan  1 04:17:31 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7d272e1a8aae76ee53c6213bd03a6b94b70a62c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:b5:e8:c6:61:67:91:19:cb:04:ba:63:4d:
                    ac:39:a9:a1:f8:3d:fe:f3:74:bc:af:be:33:ea:ab:
                    58:1d:07:45:c5:5b:6a:c1:3b:78:a7:2d:a7:7a:29:
                    63:94:db:a2:ee:14:80:1a:44:92:02:e8:14:2c:d8:
                    cd:1b:31:75:7f:6d:61:00:88:1f:17:69:b5:3f:c9:
                    9b:c4:dc:76:f2:bc:a0:8e:19:7e:15:f1:e6:29:08:
                    4c:b5:8f:2c:13:fe:31:d0:9d:c6:a5:b8:26:15:5e:
                    25:0f:a8:84:cd:a2:76:f9:63:77:c3:b5:ad:14:d6:
                    1f:7f:60:ca:b1:c9:61:a2:14:c7:ca:67:63:58:7a:
                    94:77:88:10:4f:5f:e2:b0:0a:ab:5d:4d:32:56:30:
                    43:14:4c:c6:da:ef:d9:b6:14:6a:6d:73:c9:1c:fe:
                    01:4d:9f:1f:48:12:11:eb:d4:26:e2:86:e2:b5:43:
                    e4:35:47:f5:53:af:e3:09:73:dc:a5:2a:07:f8:5d:
                    47:a3:97:3c:eb:c4:c4:7f:61:d5:31:55:83:0e:f3:
                    28:ea:eb:b5:23:4c:d0:30:de:fc:a7:8e:9e:02:09:
                    d1:36:e0:02:e5:bc:14:cc:06:ec:03:a4:62:ea:e4:
                    e2:87:09:ed:33:58:e8:ad:1b:2f:2f:de:9d:fe:13:
                    ae:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:27:2E:1A:8A:AE:76:EE:53:C6:21:3B:D0:3A:6B:94:B7:0A:62:C3
            X509v3 Authority Key Identifier:
                keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/fScuGoqudu5TxiE70DprlLcKYsM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2406:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:15:e6:dd:78:1d:ea:ab:77:f1:20:fb:57:9b:b9:f3:fd:35:
         26:ed:c6:d5:d1:51:86:ea:0e:19:86:86:86:b4:18:93:cd:a2:
         99:20:24:0c:8f:1d:82:76:7f:01:4e:74:0f:17:ab:ba:33:aa:
         0e:7a:65:be:4e:88:f0:00:ab:b1:c9:e7:da:f8:d0:b2:63:2e:
         06:30:d0:32:2c:07:83:f8:ec:02:b7:4f:8b:56:fc:cd:5e:c9:
         13:c4:d0:97:d7:e2:d8:3b:fe:fd:e4:2a:df:bc:6d:be:53:d3:
         18:f4:a2:80:ee:2e:0b:1f:47:8e:60:0e:ea:a6:b5:b2:78:c3:
         73:41:e4:41:a4:05:a1:8c:d1:94:d8:47:a2:f1:b6:95:93:e0:
         0d:31:aa:ec:49:0e:31:ea:a4:eb:c0:6b:dc:75:b3:fb:36:99:
         7f:ba:c3:55:19:97:46:3a:b5:81:91:2d:de:8e:74:ba:af:8d:
         47:8f:11:e4:29:fa:c8:08:11:4d:2a:78:9f:5c:42:07:68:48:
         05:cf:84:6e:25:b5:16:83:9e:34:3e:5f:5e:b7:53:e0:01:26:
         d2:e4:6a:96:65:6b:27:45:d4:49:fe:7b:19:41:37:32:5e:33:
         05:bf:3c:50:e7:26:6d:38:08:15:e9:71:1b:f4:d3:79:07:db:
         4e:b7:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:05:59 2026 by rpki-client