This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/7QjRRYA7jcCFNync-7ZqAYQ9Lvk.roa
File:                     7QjRRYA7jcCFNync-7ZqAYQ9Lvk.roa (raw, json)
Hash identifier:          Ww9Vf4lv8aoiNND6Ah1rgZbAtQ03hE7wpG+7oWtfpX4=
Subject key identifier:   ED:08:D1:45:80:3B:8D:C0:85:37:29:DC:FB:B6:6A:01:84:3D:2E:F9
Certificate issuer:       /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial:       019B797E81DB3B8CF9352A4B0FCB5CC626AD
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/7QjRRYA7jcCFNync-7ZqAYQ9Lvk.roa
Signing time:             Thu 01 Jan 2026 12:18:12 +0000
ROA not before:           Thu 01 Jan 2026 12:18:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57888
IP address blocks:        5.149.64.0/20 maxlen: 20
                          5.149.78.0/23 maxlen: 23
                          5.149.80.0/21 maxlen: 21
                          5.149.80.0/22 maxlen: 22
                          5.149.84.0/22 maxlen: 22
                          5.149.92.0/22 maxlen: 22
                          82.117.232.0/21 maxlen: 21
                          85.235.84.0/22 maxlen: 22
                          178.210.184.0/21 maxlen: 21
                          194.53.156.0/22 maxlen: 22
                          194.99.16.0/22 maxlen: 22
                          217.9.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:7e:81:db:3b:8c:f9:35:2a:4b:0f:cb:5c:c6:26:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
        Validity
            Not Before: Jan  1 12:18:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ed08d145803b8dc0853729dcfbb66a01843d2ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:7f:9b:dc:5d:1c:71:64:6d:82:eb:61:66:
                    5e:8b:af:58:d2:82:b8:d3:49:a5:b5:55:d9:d3:de:
                    2a:e5:7a:60:be:97:6a:4a:73:dc:45:10:b2:77:cb:
                    ce:b3:eb:e1:81:0c:45:e9:d8:a8:2f:59:1e:0b:bc:
                    42:69:72:de:24:e2:63:bf:bf:be:e1:1a:3e:b5:b5:
                    18:e9:be:cf:2a:1b:d0:b5:91:9d:d5:54:be:db:0b:
                    e9:ad:6d:cd:4b:49:8e:ff:43:ab:fe:94:dc:da:29:
                    19:4d:52:c0:ca:86:3c:98:aa:67:83:19:40:96:77:
                    b0:e5:b6:27:e2:ee:e1:02:12:37:94:53:6a:7e:d6:
                    44:56:27:fe:6a:67:97:a3:fe:4f:89:7f:8a:a8:f2:
                    5f:24:ec:4e:3c:e3:fc:e7:5f:bc:55:31:7f:ea:0f:
                    0f:32:c7:7a:65:c7:32:3c:b7:be:59:aa:08:7f:4b:
                    ce:41:7c:99:26:ee:07:03:01:2d:ee:6f:e7:4c:d8:
                    01:fb:df:79:a8:e6:c2:ad:d9:92:76:70:e7:f2:66:
                    25:75:a5:93:25:43:58:b3:f6:f4:bd:bd:ef:37:c0:
                    61:58:e1:80:98:be:ee:5c:87:6c:09:9c:ff:2c:83:
                    11:b1:99:65:71:62:c7:6e:eb:79:f4:65:50:22:8a:
                    6b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:08:D1:45:80:3B:8D:C0:85:37:29:DC:FB:B6:6A:01:84:3D:2E:F9
            X509v3 Authority Key Identifier:
                keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/7QjRRYA7jcCFNync-7ZqAYQ9Lvk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.149.64.0-5.149.87.255
                  5.149.92.0/22
                  82.117.232.0/21
                  85.235.84.0/22
                  178.210.184.0/21
                  194.53.156.0/22
                  194.99.16.0/22
                  217.9.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:52:e6:3c:df:1a:d1:3c:b3:89:45:14:ed:aa:86:a0:5b:b0:
         a3:ec:06:81:87:51:92:90:ee:05:6a:ed:73:f9:6b:52:3a:03:
         d4:c9:f1:04:c7:98:97:1b:2e:9f:a8:e5:b0:15:0d:22:11:cd:
         69:2e:e6:a6:3e:bd:a4:b0:00:1c:18:14:2c:74:36:e5:1a:86:
         e7:de:f9:56:92:d1:11:fe:fc:3a:3e:8b:8b:26:4b:75:ca:b2:
         e1:59:0a:26:c7:cb:e5:4b:71:c4:70:a2:51:e5:75:2f:43:a3:
         77:d2:42:9c:25:65:81:9d:bc:e7:09:19:43:cb:85:21:69:f3:
         31:51:57:22:59:1d:ad:de:00:99:83:0d:d0:02:2d:01:c8:36:
         35:8a:65:73:e9:93:23:64:81:47:4b:59:a8:88:0b:09:dc:64:
         ff:fd:eb:c3:af:c0:34:70:0a:b6:f5:55:ae:e9:a7:0f:49:ef:
         9f:e6:8c:15:c3:df:a1:66:e1:d1:c4:35:04:d4:af:81:1c:d7:
         f5:53:ea:5a:58:1f:6f:64:54:28:69:3c:45:b4:91:4e:68:31:
         e2:4f:d2:4b:b1:5f:45:72:0c:87:7c:f1:aa:a1:ff:5c:5b:b8:
         21:57:ae:36:9c:a1:72:45:1d:6d:03:e2:c2:17:b9:4e:99:7d:
         63:6f:23:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:13:00 2026 by rpki-client