This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7ccus9d8ao2TYBIJE7U4ezc4ldM.roa
File:                     7ccus9d8ao2TYBIJE7U4ezc4ldM.roa (raw, json)
Hash identifier:          xp5Zw6824KuZXiYqun6ANMBu3lMg4c+QxXyGPgHYlf8=
Subject key identifier:   ED:C7:2E:B3:D7:7C:6A:8D:93:60:12:09:13:B5:38:7B:37:38:95:D3
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       019B77C77A977AEEECAD76B70797109477AC
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7ccus9d8ao2TYBIJE7U4ezc4ldM.roa
Signing time:             Thu 01 Jan 2026 04:18:40 +0000
ROA not before:           Thu 01 Jan 2026 04:18:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     51393
IP address blocks:        195.136.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:7a:97:7a:ee:ec:ad:76:b7:07:97:10:94:77:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  1 04:18:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=edc72eb3d77c6a8d9360120913b5387b373895d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e4:cf:47:09:4b:e9:5d:2f:03:22:2b:c9:4e:
                    2f:3d:f1:41:dd:c1:4f:cd:cb:85:cd:f7:80:aa:38:
                    dc:8b:4b:f5:db:06:79:20:5f:ba:d1:42:d1:fc:8b:
                    a6:73:09:ea:93:d4:9a:94:9f:9c:7b:cf:8b:24:42:
                    48:a2:d1:43:b6:a8:4d:54:82:e3:76:5e:14:74:a0:
                    c3:28:e5:a6:8a:a8:31:a7:e6:b2:3d:f4:2f:6c:a6:
                    68:79:3b:ac:33:e6:1c:f9:84:5f:d9:34:4e:7d:11:
                    b7:76:4f:37:c9:67:86:b4:b6:1f:87:a5:ca:75:c2:
                    d9:d1:1e:ec:77:00:a1:3a:1a:22:1e:a6:5a:73:aa:
                    6b:9b:6a:1a:ba:00:83:3f:91:fc:9b:4d:a4:bb:45:
                    a7:4b:24:36:77:86:9b:e0:a9:25:5f:ab:55:06:af:
                    5a:ff:5e:1b:fd:b1:2e:52:ce:12:76:b4:8f:7a:b3:
                    90:4c:40:d0:d8:76:88:e2:89:45:3a:c0:d7:4d:8d:
                    ff:91:a0:36:6a:5b:14:25:29:d0:ea:de:77:cc:b5:
                    10:d6:59:dc:df:56:0a:4d:ae:1e:8d:60:5b:a1:9b:
                    2b:bc:5d:26:74:ae:af:31:a0:f3:91:aa:78:dc:e0:
                    fa:00:d3:0c:a6:a9:82:0d:2d:1f:58:4b:2d:c4:e3:
                    f8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C7:2E:B3:D7:7C:6A:8D:93:60:12:09:13:B5:38:7B:37:38:95:D3
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/7ccus9d8ao2TYBIJE7U4ezc4ldM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.136.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:3f:61:ed:f5:a8:b0:9d:65:39:5e:22:ba:bc:52:f7:fd:ce:
         1a:d3:28:89:6f:8e:e8:44:df:fe:a3:c1:ba:c2:9b:02:0f:53:
         70:78:14:4c:82:78:2e:17:34:75:3d:dd:c9:de:f8:7f:61:72:
         4e:d7:5a:03:a0:80:61:f8:ca:d8:b9:23:85:1b:1d:df:c6:67:
         9a:c3:1a:60:7f:f6:90:62:5b:1d:d6:d7:5d:e1:a8:a0:ec:f3:
         c9:05:04:1a:0b:f0:7b:57:8c:71:3b:64:7b:76:e0:d5:b0:93:
         cf:5f:6d:10:e6:4d:a7:5a:f9:62:86:9c:2c:20:9a:16:22:df:
         3f:f8:00:11:7a:29:03:d3:e0:b6:78:03:40:54:c4:9a:35:d8:
         da:2e:73:5e:03:7b:2f:74:c9:5d:e2:a0:4f:9e:06:a2:1c:10:
         9c:54:d5:b7:d7:26:de:81:7a:c2:63:85:13:c4:08:ab:82:22:
         16:8a:c1:92:9e:e5:98:f5:e9:ff:76:a6:af:7a:c0:1c:82:d8:
         f2:a1:ff:e5:2c:40:46:d4:e7:5d:c7:a1:48:ae:5c:c6:5e:b1:
         e9:b1:72:f5:48:5e:b0:2f:00:91:bb:e6:f6:80:92:04:20:4a:
         d5:68:5d:ec:e6:ea:ad:d6:ab:85:b4:33:4b:7d:35:25:84:4b:
         3e:8d:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:45:00 2026 by rpki-client