This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa
File:                     7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa (raw, json)
Hash identifier:          LEykf9FAgj9CLpBSSjkYwOuUKW3pC3jsUO4x78cVavQ=
Subject key identifier:   EF:14:4F:8D:64:4B:BF:E6:8E:2B:74:56:BE:A5:C6:D9:CF:30:BF:64
Certificate issuer:       /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial:       019B7EA65F58EA41763D7E1166AC00EA3C83
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa
Signing time:             Fri 02 Jan 2026 12:19:51 +0000
ROA not before:           Fri 02 Jan 2026 12:19:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     200525
IP address blocks:        193.93.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7e:a6:5f:58:ea:41:76:3d:7e:11:66:ac:00:ea:3c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
        Validity
            Not Before: Jan  2 12:19:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ef144f8d644bbfe68e2b7456bea5c6d9cf30bf64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4a:ce:3b:0c:05:0a:6b:2b:f7:36:73:2f:84:
                    fb:da:bd:bb:aa:6f:b5:c9:d4:7e:50:f4:01:7e:0e:
                    2d:28:30:99:a3:92:3a:d0:23:9c:e3:30:eb:1f:4e:
                    92:d3:e7:80:97:aa:2d:0e:fa:50:80:c5:75:c6:01:
                    fa:a2:b2:1c:82:68:26:a5:0f:e5:ef:47:d2:12:29:
                    63:48:73:a0:36:58:15:58:58:2d:ec:7c:f7:18:97:
                    6b:f7:d9:34:44:fe:b7:9f:57:c9:6d:53:4d:d1:7a:
                    c9:2c:88:91:2e:b3:0d:3f:aa:91:46:8c:5f:93:e9:
                    67:4d:63:39:fe:9b:5d:68:e5:44:64:66:ed:e9:ad:
                    b8:48:de:2f:6f:52:ff:65:ee:b4:ca:57:53:5d:22:
                    03:3a:9c:3a:1d:82:2a:83:8f:b4:5e:95:6c:41:59:
                    db:d7:85:37:5a:fc:38:1c:8c:a0:01:5c:c7:11:a2:
                    f9:a5:a3:19:65:f3:bc:7c:a9:00:68:ca:d1:7e:87:
                    b1:b6:65:e4:2f:64:e1:6b:6d:37:df:4a:e4:55:73:
                    33:2f:e5:8d:8b:68:31:85:2d:d5:96:57:9c:3c:60:
                    c6:13:95:5d:d3:a8:3a:9f:9a:02:6d:86:1e:8f:e9:
                    0c:99:1d:62:7b:ed:e3:c5:5f:7a:a0:7f:d7:3e:b9:
                    ff:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:14:4F:8D:64:4B:BF:E6:8E:2B:74:56:BE:A5:C6:D9:CF:30:BF:64
            X509v3 Authority Key Identifier:
                keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/7xRPjWRLv-aOK3RWvqXG2c8wv2Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.93.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:f9:b3:ab:cb:77:af:73:5e:b4:47:8f:73:a4:4a:61:9f:de:
         10:e6:ff:4d:f5:e1:71:dd:8c:9f:82:e9:4a:5b:fa:9e:1a:41:
         90:01:6a:d4:5a:bc:ad:fc:9c:5e:5c:5e:90:8e:51:22:19:86:
         2d:22:d5:d1:94:7c:d6:fc:42:df:22:3c:0c:75:47:14:f6:d7:
         1a:77:79:00:e0:fc:e8:ef:a8:72:76:24:da:6a:90:71:9b:6c:
         bd:ce:ea:73:1c:78:b9:02:94:f1:32:71:59:1c:e4:ef:56:1b:
         25:5c:57:d9:e3:50:19:c8:29:46:cf:09:44:68:27:14:84:23:
         1a:77:8a:ee:bb:16:ec:3b:ea:14:a2:ef:fc:12:1c:88:bb:99:
         8c:5e:ca:c3:7b:b8:53:6b:58:75:cd:bc:1e:20:87:25:4e:e0:
         b8:2e:77:34:6b:0d:5d:0d:23:ab:e9:2e:7e:fa:e5:30:0e:7c:
         c8:22:fc:11:a8:ff:c3:78:a7:94:85:b7:78:40:a6:b2:fd:0d:
         8d:48:85:ad:38:e2:28:c6:07:f3:90:00:85:6d:d6:b1:83:07:
         fd:7a:c5:79:db:f8:50:23:36:d9:dd:9e:de:65:9d:2f:73:e1:
         fd:69:a8:78:ff:6b:a1:7a:17:d3:76:36:ad:d0:9f:82:f6:bf:
         23:c0:87:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt+pl9Y6kF2PX4RZqwA6jyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2
OWYyYTAwHhcNMjYwMTAyMTIxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjE0NGY4ZDY0NGJiZmU2OGUyYjc0NTZiZWE1YzZkOWNmMzBiZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmErOOwwFCmsr9zZzL4T72r27qm+1
ydR+UPQBfg4tKDCZo5I60COc4zDrH06S0+eAl6otDvpQgMV1xgH6orIcgmgmpQ/l
70fSEiljSHOgNlgVWFgt7Hz3GJdr99k0RP63n1fJbVNN0XrJLIiRLrMNP6qRRoxf
k+lnTWM5/ptdaOVEZGbt6a24SN4vb1L/Ze60yldTXSIDOpw6HYIqg4+0XpVsQVnb
14U3Wvw4HIygAVzHEaL5paMZZfO8fKkAaMrRfoextmXkL2Tha20330rkVXMzL+WN
i2gxhS3VllecPGDGE5Vd06g6n5oCbYYej+kMmR1ie+3jxV96oH/XPrn/PwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO8UT41kS7/mjit0Vr6lxtnPML9kMB8GA1UdIwQY
MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt
NDI4NTk5ODM5MmQzLzEvN3hSUGpXUkx2LWFPSzNSV3ZxWEcyYzh3djJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz
LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwV0/MA0G
CSqGSIb3DQEBCwUAA4IBAQAJ+bOry3evc160R49zpEphn94Q5v9N9eFx3YyfgulK
W/qeGkGQAWrUWryt/JxeXF6QjlEiGYYtItXRlHzW/ELfIjwMdUcU9tcad3kA4Pzo
76hydiTaapBxm2y9zupzHHi5ApTxMnFZHOTvVhslXFfZ41AZyClGzwlEaCcUhCMa
d4ruuxbsO+oUou/8EhyIu5mMXsrDe7hTa1h1zbweIIclTuC4Lnc0aw1dDSOr6S5+
+uUwDnzIIvwRqP/DeKeUhbd4QKay/Q2NSIWtOOIoxgfzkACFbdaxgwf9esV52/hQ
IzbZ3Z7eZZ0vc+H9aah4/2uhehfTdjat0J+C9r8jwIe+
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:06:36 2026 by rpki-client