This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/t7cHmqfPrhRkkV0A84jsifhswOM.roa
File:                     t7cHmqfPrhRkkV0A84jsifhswOM.roa (raw, json)
Hash identifier:          Vqg/OtS8823soNqzOmMuoWT//Jc+2v5jegUaPIzkzRg=
Subject key identifier:   B7:B7:07:9A:A7:CF:AE:14:64:91:5D:00:F3:88:EC:89:F8:6C:C0:E3
Certificate issuer:       /CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
Certificate serial:       019B7A5B3200E0EEA368F713DA148DF5304C
Authority key identifier: 6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/t7cHmqfPrhRkkV0A84jsifhswOM.roa
Signing time:             Thu 01 Jan 2026 16:19:15 +0000
ROA not before:           Thu 01 Jan 2026 16:19:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     25151
IP address blocks:        80.85.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:5b:32:00:e0:ee:a3:68:f7:13:da:14:8d:f5:30:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3ae80cecb56f5b3003883a95e26f441d749f2e
        Validity
            Not Before: Jan  1 16:19:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=b7b7079aa7cfae1464915d00f388ec89f86cc0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1d:ea:5a:7b:d9:d7:dd:69:0c:5c:89:dc:fe:
                    6a:69:a5:8d:e6:f3:a7:af:31:7d:80:e1:95:03:06:
                    2e:8e:29:fd:23:0a:34:45:ed:5b:9b:16:ee:27:67:
                    9e:53:fb:aa:4a:54:7b:2a:7b:42:eb:5e:4e:f9:3f:
                    57:ba:3a:70:d7:63:89:45:ed:82:39:a6:9c:b2:1a:
                    59:fa:ed:37:e4:55:da:ce:5e:32:af:19:08:96:80:
                    55:0f:94:1d:9d:37:d0:e1:90:c2:fc:7d:59:11:98:
                    12:43:fd:35:dd:e7:7a:35:0b:d9:68:10:f0:4a:f9:
                    8d:e0:48:7f:4a:54:fd:ed:30:b9:31:f0:87:6f:80:
                    61:20:22:99:68:c8:d7:4e:b3:d7:1c:c0:f8:f9:d7:
                    61:32:c9:5c:0a:4f:b9:69:9f:ce:c1:8d:39:bc:fa:
                    1e:67:43:1a:d2:e8:17:7f:24:c2:90:3d:9e:cd:41:
                    3e:25:8e:3d:b7:26:7f:e4:68:14:53:5a:cf:f6:2a:
                    c4:c5:d4:c1:5c:cc:53:31:a1:ba:fd:34:f6:01:49:
                    0e:1a:7c:b2:e8:36:dc:f2:c7:72:04:8a:7a:01:e4:
                    47:be:78:ed:e7:7e:d9:95:aa:a5:dc:5d:7d:be:2f:
                    75:c7:b2:e3:8c:fc:b9:cf:34:10:28:4f:c7:dc:22:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B7:07:9A:A7:CF:AE:14:64:91:5D:00:F3:88:EC:89:F8:6C:C0:E3
            X509v3 Authority Key Identifier:
                keyid:6B:3A:E8:0C:EC:B5:6F:5B:30:03:88:3A:95:E2:6F:44:1D:74:9F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azroDOy1b1swA4g6leJvRB10ny4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/t7cHmqfPrhRkkV0A84jsifhswOM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/637377-cadc-4fd4-b66d-c9a56c5d3e91/1/azroDOy1b1swA4g6leJvRB10ny4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.85.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:74:79:ef:37:75:c5:34:8a:19:4b:0e:a4:e0:0d:8e:2a:1e:
         29:0f:cb:52:8b:15:df:0d:59:45:a9:5c:f6:c8:a3:b7:3a:7e:
         e9:de:b6:3c:da:12:a8:c7:d6:3d:79:d7:79:89:85:23:d0:3e:
         5e:b2:5c:49:b4:db:b5:da:95:22:56:55:e1:de:9f:eb:ad:90:
         a5:f2:b7:c3:82:54:28:84:18:20:8a:a4:4f:fd:1b:b2:62:74:
         88:53:89:11:52:93:bf:34:00:2a:78:82:0e:39:7c:60:c7:5e:
         1b:c3:24:d4:cf:8e:df:28:45:e9:51:40:51:d8:50:75:21:87:
         67:79:6f:79:84:ee:5b:8b:90:da:62:e2:d7:a3:7a:50:9d:a5:
         7d:c3:e6:ff:c9:96:79:32:26:99:e3:20:85:ce:05:ba:26:3e:
         6e:b8:90:3c:89:52:ff:f4:bc:ef:2d:4e:a5:b6:ab:2d:6f:b0:
         22:5e:6c:f5:59:1e:d5:62:66:17:b4:0e:fb:db:0a:ef:76:71:
         d6:74:cb:69:65:d2:f5:02:f8:43:c7:16:f9:47:88:0e:c4:8b:
         8d:9b:e1:37:56:df:c5:c9:02:98:36:42:c3:5f:0e:f3:a9:8d:
         cf:f2:c9:3c:ec:80:81:ba:ac:cb:d3:1c:3d:83:b2:2a:b4:94:
         8c:e5:e3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:31:54 2026 by rpki-client