This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/frGFEFnYHlwmSdEkEqNzcEerZos.roa
File:                     frGFEFnYHlwmSdEkEqNzcEerZos.roa (raw, json)
Hash identifier:          CqpfiWHaI8Kpucdq3i4AO0nS9qt5T6lpy/A13dF/CwU=
Subject key identifier:   7E:B1:85:10:59:D8:1E:5C:26:49:D1:24:12:A3:73:70:47:AB:66:8B
Certificate issuer:       /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial:       019B7C1189621ACD82D75F9E178A687BDE8F
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/frGFEFnYHlwmSdEkEqNzcEerZos.roa
Signing time:             Fri 02 Jan 2026 00:18:02 +0000
ROA not before:           Fri 02 Jan 2026 00:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     214061
IP address blocks:        83.142.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:11:89:62:1a:cd:82:d7:5f:9e:17:8a:68:7b:de:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
        Validity
            Not Before: Jan  2 00:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=7eb1851059d81e5c2649d12412a3737047ab668b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:58:be:66:03:92:27:3f:4a:29:e9:b0:db:d5:
                    eb:27:3f:f1:01:35:25:3b:c9:c1:77:b7:02:15:10:
                    2a:b4:37:74:08:d0:b2:6a:f0:f8:82:b9:bf:f3:ff:
                    31:d7:6f:24:8a:d9:06:82:e5:e6:18:bc:30:f5:f0:
                    23:92:3b:b2:ff:06:a3:1e:bc:1a:e2:ad:4f:11:3c:
                    b6:7e:e2:db:5f:dd:be:a1:73:50:94:79:76:f7:b0:
                    91:b3:eb:c8:cf:d8:f4:12:ee:61:af:6b:a2:9b:42:
                    fa:0b:0f:d7:69:2c:03:3e:cf:1b:fb:d0:ce:b3:e1:
                    44:0f:4c:88:f7:2b:a6:a3:a1:81:13:14:ee:d7:eb:
                    dc:62:18:54:f2:90:b6:57:22:ca:19:53:62:2b:98:
                    4b:54:cd:f9:31:96:3d:ec:6d:95:d4:7b:ed:7b:4f:
                    87:69:fc:4e:01:8f:19:70:4a:42:92:5f:c2:25:78:
                    05:a7:80:be:40:4e:a4:fd:ab:1f:bd:dd:c1:56:63:
                    47:c0:52:6b:fe:72:b3:b5:ba:5e:fe:f1:ca:c9:cf:
                    91:c3:9d:06:3b:81:dd:c0:a2:62:84:21:98:58:1f:
                    bd:fb:a2:1f:db:31:9f:5d:98:fc:ff:f5:fb:99:d7:
                    ca:3a:3b:95:3b:df:75:5c:4a:c3:a5:06:fe:5f:0b:
                    83:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B1:85:10:59:D8:1E:5C:26:49:D1:24:12:A3:73:70:47:AB:66:8B
            X509v3 Authority Key Identifier:
                keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/frGFEFnYHlwmSdEkEqNzcEerZos.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.142.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:40:f4:bd:42:fb:f0:c1:e5:0b:9d:f1:59:2d:f8:e4:6c:2c:
         99:c7:a1:2e:24:ee:70:75:af:2b:90:c2:1d:57:87:c5:53:4c:
         43:c9:40:2b:26:d0:ae:56:df:f8:c8:c7:45:d2:c5:2f:38:d9:
         bd:18:87:ff:dc:00:68:fa:aa:10:b7:7f:68:29:ea:fb:fa:c2:
         eb:98:ee:ea:ec:62:f1:b2:b6:0b:08:f5:0b:a0:9e:ae:fe:aa:
         71:65:94:0b:01:80:f8:34:2c:ea:3e:74:84:b6:2d:db:52:b2:
         0e:bd:b2:51:96:4c:51:f6:3f:b1:37:da:4a:8b:31:07:7c:3c:
         1b:f2:a3:e4:83:16:bf:ca:d7:20:80:99:c0:1f:8e:af:42:d3:
         6c:dd:b5:ef:69:48:98:5f:fa:c7:e6:ac:ec:8f:b5:26:f3:48:
         62:7f:65:9b:2c:1f:06:a1:56:96:2e:f7:52:cc:17:24:b2:c6:
         ec:ee:72:12:57:74:6e:b4:88:d8:ae:4e:1b:8c:da:df:87:ff:
         09:9a:22:91:cf:64:0d:c3:ca:7c:ea:66:51:ee:35:47:9e:8a:
         3c:00:7c:44:e8:f1:85:aa:1e:13:26:ac:3d:9d:7f:58:2b:7f:
         ea:e2:ba:c9:69:6d:1e:85:f9:01:94:91:ba:28:8b:4f:4a:98:
         b4:7f:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:14:44 2026 by rpki-client