This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7tIInMMQTmIFqoJtSie_a0hpY6s.roa
File:                     7tIInMMQTmIFqoJtSie_a0hpY6s.roa (raw, json)
Hash identifier:          Hpvl0hgOJB+AGKq6Cm+PSZTlvzPkNj+5v8qPWIxnE3Y=
Subject key identifier:   EE:D2:08:9C:C3:10:4E:62:05:AA:82:6D:4A:27:BF:6B:48:69:63:AB
Certificate issuer:       /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial:       019A7C51F7245AD0C8CE207EBA904F2B0652
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7tIInMMQTmIFqoJtSie_a0hpY6s.roa
Signing time:             Thu 13 Nov 2025 08:25:37 +0000
ROA not before:           Thu 13 Nov 2025 08:25:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     63023
IP address blocks:        87.229.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:7c:51:f7:24:5a:d0:c8:ce:20:7e:ba:90:4f:2b:06:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
        Validity
            Not Before: Nov 13 08:25:37 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=eed2089cc3104e6205aa826d4a27bf6b486963ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:6a:56:51:bd:60:49:64:9f:91:ec:4a:d3:
                    a9:0c:0b:90:73:45:26:47:49:2f:98:98:a5:18:17:
                    24:33:9c:da:fc:e8:da:4c:a5:22:bb:dc:ac:12:ae:
                    e1:b0:c1:6b:21:53:ad:18:ea:bd:f3:bb:55:c8:13:
                    be:36:31:19:33:db:50:b3:22:fe:52:1a:f6:00:20:
                    d6:60:fb:cc:fb:05:87:1d:16:86:08:aa:de:d1:5a:
                    a3:8c:52:c8:76:18:68:44:72:57:ae:30:1e:6b:10:
                    7e:14:30:c3:6b:70:a0:e0:16:45:6a:8f:fa:0e:7a:
                    26:c2:57:d3:7d:76:2f:23:ff:c7:e4:3d:4e:38:a4:
                    53:5c:4f:6e:2e:83:81:2c:0a:d2:76:11:c4:e2:e3:
                    8e:4e:90:df:bc:f0:5b:7b:8d:d4:9a:1f:71:43:2e:
                    5f:03:8d:f2:d3:a9:52:56:db:c6:fe:04:2e:e2:3d:
                    4a:2a:a4:4b:c9:fe:eb:7c:56:4b:45:28:84:34:c5:
                    a3:de:74:c6:21:6f:20:f1:30:90:a3:5e:f5:d8:94:
                    74:16:78:46:8f:13:cd:32:a0:a8:af:a4:64:07:81:
                    2a:3f:0e:52:5d:04:99:8e:23:3a:16:12:0f:49:c0:
                    10:a4:bf:94:68:df:1c:4f:6b:e5:fa:dd:bf:b7:ff:
                    44:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D2:08:9C:C3:10:4E:62:05:AA:82:6D:4A:27:BF:6B:48:69:63:AB
            X509v3 Authority Key Identifier:
                keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/7tIInMMQTmIFqoJtSie_a0hpY6s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.229.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:f9:45:93:95:2f:60:a1:bf:a9:82:e4:8a:c9:9e:88:a0:29:
         19:03:4b:17:9a:bf:ff:05:38:20:e2:ff:e1:25:34:81:ab:b3:
         17:81:8f:8b:fd:50:39:07:21:71:2c:6a:56:24:d8:f3:65:31:
         4c:b1:73:db:04:41:9e:7a:f8:69:b5:57:47:64:48:73:9e:ac:
         3b:94:c4:76:75:b7:27:6e:18:af:13:52:7c:1f:63:f0:9b:63:
         64:82:41:9b:96:99:f9:d4:0d:bd:ad:d6:a4:eb:f9:b8:b6:5c:
         df:08:89:ad:36:13:26:b4:61:38:d6:3f:c4:02:79:12:51:57:
         52:db:03:d0:d6:33:1b:63:2e:8e:c1:4b:54:9e:6f:92:8f:2f:
         dd:f0:8d:e4:15:c9:89:bc:a6:66:8e:9d:2a:73:dc:49:d5:28:
         e5:c8:f8:39:9c:68:16:d7:8f:db:4c:70:c6:03:67:90:5d:89:
         d1:d6:be:5f:03:f0:16:c3:55:74:3c:4b:c7:f4:da:96:ef:e0:
         c3:29:80:09:12:b3:c3:28:47:a0:d0:16:e8:52:05:82:61:f4:
         a5:06:3d:9b:27:0b:e3:43:24:73:c3:87:cb:10:3d:58:e7:3e:
         39:c3:f7:d0:65:2e:89:83:4b:25:49:8e:0b:ed:87:4d:e4:94:
         74:8a:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:36:33 2025 by rpki-client