This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/7gdlonHkctidA_Jgo0e1sPluTfw.roa
File:                     7gdlonHkctidA_Jgo0e1sPluTfw.roa (raw, json)
Hash identifier:          L7iWiH+YVCR3BgQWnot+ADKst5Rvum0Fp/JtCnJ65RY=
Subject key identifier:   EE:07:65:A2:71:E4:72:D8:9D:03:F2:60:A3:47:B5:B0:F9:6E:4D:FC
Certificate issuer:       /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial:       019B7E384E6369E06BB1504D0A1E50A013AE
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/7gdlonHkctidA_Jgo0e1sPluTfw.roa
Signing time:             Fri 02 Jan 2026 10:19:37 +0000
ROA not before:           Fri 02 Jan 2026 10:19:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214225
IP address blocks:        45.135.240.0/24 maxlen: 24
                          195.96.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:38:4e:63:69:e0:6b:b1:50:4d:0a:1e:50:a0:13:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
        Validity
            Not Before: Jan  2 10:19:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ee0765a271e472d89d03f260a347b5b0f96e4dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ed:a8:14:e9:46:ae:e1:12:f5:35:2c:31:22:
                    95:2f:8e:c2:49:c4:89:b4:f0:90:a7:63:ea:71:2a:
                    03:4c:0b:10:dc:bc:21:d3:5c:14:1d:09:50:67:fe:
                    ed:23:69:87:62:97:55:d4:99:47:b9:a5:f0:e5:6c:
                    89:e4:5e:88:3a:d8:94:23:41:2f:f1:3f:a8:a2:28:
                    67:b1:7b:2e:60:4d:88:15:6f:49:81:34:34:d9:f9:
                    31:00:67:e2:12:e0:1b:25:e9:fd:c3:94:4b:dd:41:
                    90:57:6c:01:c1:00:b8:ee:ad:19:33:bf:76:64:15:
                    e9:fd:70:cc:f0:2a:ba:50:d4:48:38:18:b9:ea:ea:
                    79:60:4f:6d:1e:89:6f:37:8b:a1:fb:96:ab:34:57:
                    c7:c7:06:17:22:a5:c0:c5:42:85:02:9f:19:a8:5d:
                    35:c4:48:74:95:05:f9:47:bc:e5:2e:25:bb:9c:17:
                    34:c1:4c:11:48:7f:12:ec:e1:af:0f:90:68:81:d9:
                    af:9c:a5:27:cd:6b:0d:f8:00:bf:d1:b0:d8:1c:5b:
                    70:38:e0:44:17:8e:c2:4d:0c:da:40:56:90:26:85:
                    34:40:f1:52:15:7d:d1:c9:4a:59:11:52:e8:5f:cb:
                    e7:ce:5f:19:8d:06:4a:b3:bb:25:5b:00:23:2f:01:
                    a1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:07:65:A2:71:E4:72:D8:9D:03:F2:60:A3:47:B5:B0:F9:6E:4D:FC
            X509v3 Authority Key Identifier:
                keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/7gdlonHkctidA_Jgo0e1sPluTfw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.240.0/24
                  195.96.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:19:e1:29:15:14:1f:75:59:77:8e:3d:cd:2c:15:5e:97:b1:
         9e:d8:70:44:e0:50:46:4a:b1:64:ed:8d:3b:9b:97:83:10:3a:
         bb:98:37:72:0d:f3:aa:5f:43:30:61:a4:94:76:df:15:e7:b8:
         5a:2d:e9:02:41:9b:01:b0:70:51:e9:2d:75:8c:f1:34:90:ab:
         83:63:38:94:59:c8:82:0d:ec:83:08:9e:50:7e:46:ca:6f:42:
         1d:e2:e2:b1:10:6e:1c:60:f2:17:de:41:16:8e:c9:65:67:7a:
         8c:c3:90:a2:66:a0:2e:6a:d6:e6:34:d8:72:64:20:cd:a5:7b:
         8f:ef:94:6a:9b:29:b5:77:2c:04:45:6d:eb:b7:87:b3:44:40:
         b0:92:a5:00:85:94:9c:59:0d:9a:cb:76:69:8f:94:f9:5c:0d:
         c9:5f:99:92:fa:6a:8e:f9:d3:0c:86:3d:54:cf:ae:fc:bb:ea:
         eb:5f:69:26:22:ec:92:73:4d:5b:42:78:ca:6d:6a:14:33:a6:
         fd:06:a8:5b:d5:4f:fa:08:5e:5f:91:03:73:c4:44:95:94:e5:
         83:24:61:bb:fa:81:d8:1a:67:31:d5:6d:4a:27:de:36:e4:4a:
         ab:e7:04:56:73:8d:94:1e:df:33:39:12:1b:b1:5f:07:00:ca:
         de:f8:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:22:08 2026 by rpki-client