This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/97PhypZv2zu5_OJfA9RRiy48R8g.roa
File:                     97PhypZv2zu5_OJfA9RRiy48R8g.roa (raw, json)
Hash identifier:          nIzEQ3BbMqorKqduXDknSy/VPwO4KFszJMOCHH7kKrc=
Subject key identifier:   F7:B3:E1:CA:96:6F:DB:3B:B9:FC:E2:5F:03:D4:51:8B:2E:3C:47:C8
Certificate issuer:       /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial:       019B7E39033657035F3616085489CCD91439
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/97PhypZv2zu5_OJfA9RRiy48R8g.roa
Signing time:             Fri 02 Jan 2026 10:20:24 +0000
ROA not before:           Fri 02 Jan 2026 10:20:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     12570
IP address blocks:        80.78.144.0/20 maxlen: 20
                          88.83.224.0/19 maxlen: 19
                          89.190.40.0/21 maxlen: 21
                          89.190.48.0/20 maxlen: 20
                          109.105.32.0/19 maxlen: 19
                          185.8.188.0/22 maxlen: 22
                          212.4.128.0/19 maxlen: 19
                          212.96.160.0/19 maxlen: 19
                          213.211.32.0/19 maxlen: 19
                          2001:4ba8::/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:39:03:36:57:03:5f:36:16:08:54:89:cc:d9:14:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
        Validity
            Not Before: Jan  2 10:20:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f7b3e1ca966fdb3bb9fce25f03d4518b2e3c47c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b4:ae:1f:d5:cc:ee:55:00:47:03:25:49:ad:
                    3e:5d:da:02:71:9b:e4:68:6f:31:69:a8:bc:de:93:
                    c2:1b:35:43:90:4b:ed:f3:f8:9f:03:cc:39:4e:b2:
                    c2:ca:77:51:1f:d7:01:73:50:11:ca:c3:5f:ae:f4:
                    b7:0d:99:ec:d2:91:e2:ba:5d:c1:8e:60:8b:ee:85:
                    8a:b6:52:93:ae:97:ae:57:2f:19:1c:f2:f4:c1:1d:
                    2e:4f:44:4d:f8:68:15:97:fa:12:ab:7d:50:a1:6c:
                    ec:b4:82:f6:0b:6d:b0:af:49:7d:c0:b8:f2:4c:5c:
                    03:c7:88:54:db:44:5c:ed:4b:f8:eb:ca:5c:26:a8:
                    49:8f:de:3b:bb:b2:b8:5d:48:e9:d4:e3:f8:fb:75:
                    88:04:f5:42:ac:f6:cc:17:4e:84:2d:38:4c:8a:1e:
                    a4:be:e2:1c:bc:0d:3c:30:35:3e:e6:bc:28:49:64:
                    77:e4:a2:6d:42:4a:ea:eb:3e:41:92:8e:b4:ef:68:
                    d7:c0:f8:c3:b5:36:f7:e5:2d:04:c7:c1:3d:38:96:
                    f9:1a:26:52:c0:5b:18:45:29:b9:e9:0c:6c:6c:96:
                    36:8d:d1:c1:71:e0:c3:f5:ea:ca:bf:01:c6:75:54:
                    f2:3a:de:3d:43:b4:d6:2f:78:c3:b8:0a:a5:f6:35:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B3:E1:CA:96:6F:DB:3B:B9:FC:E2:5F:03:D4:51:8B:2E:3C:47:C8
            X509v3 Authority Key Identifier:
                keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/97PhypZv2zu5_OJfA9RRiy48R8g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.78.144.0/20
                  88.83.224.0/19
                  89.190.40.0-89.190.63.255
                  109.105.32.0/19
                  185.8.188.0/22
                  212.4.128.0/19
                  212.96.160.0/19
                  213.211.32.0/19
                IPv6:
                  2001:4ba8::/29

    Signature Algorithm: sha256WithRSAEncryption
         24:19:fb:42:57:81:fd:99:a7:ec:a0:95:7f:84:5f:cd:7f:8d:
         38:3a:c8:cf:07:59:43:88:39:a9:9b:0e:69:5f:19:0e:ac:d2:
         8e:36:d9:4d:8a:4e:ed:59:ce:08:f4:78:5c:8a:5b:68:d0:9c:
         de:6c:f3:92:a1:56:23:34:8f:ff:29:4a:3f:7b:83:f1:01:08:
         6a:0e:cf:80:eb:8c:f2:e5:bb:e9:2e:52:03:c6:ae:5e:6e:15:
         04:01:04:79:6c:20:cf:9e:96:cd:2f:4a:8b:fe:51:f9:7e:99:
         2a:e7:0e:e4:56:42:1c:d2:d0:c6:e6:f1:61:f5:bd:a3:33:39:
         ce:71:d3:d4:80:4b:ec:fa:f3:3e:4b:85:7c:72:c0:e1:0c:15:
         5a:16:e5:f9:c3:1b:12:ee:de:5d:ef:f6:1c:5c:63:d6:51:3e:
         02:c8:db:f7:b4:08:34:38:9d:15:43:7e:02:5c:c2:1f:10:2f:
         00:07:51:31:e2:d9:80:3b:42:3c:51:4b:f6:18:f6:24:a2:8a:
         d8:43:9c:89:be:a9:d0:ef:e4:26:74:dd:77:d3:f0:f6:b2:58:
         2a:b9:1f:cd:66:12:9d:50:1d:6c:24:27:a2:6c:86:97:52:36:
         e7:ac:f8:6b:90:06:4b:9a:4d:86:95:b4:16:c1:14:42:18:6b:
         33:8e:7b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:47:50 2026 by rpki-client