This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/7voS5KTfzcjQzAkeR_UWZ6y4cpc.roa
File:                     7voS5KTfzcjQzAkeR_UWZ6y4cpc.roa (raw, json)
Hash identifier:          g3m4Cs0LnAb1ACKe4HSyReBYZHQrU1ca/nDV4+67Nvc=
Subject key identifier:   EE:FA:12:E4:A4:DF:CD:C8:D0:CC:09:1E:47:F5:16:67:AC:B8:72:97
Certificate issuer:       /CN=f266a0f986f21945c80d831567baf29620107adc
Certificate serial:       019B79ECD8FEB305281A6FDEA713B4D4C884
Authority key identifier: F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/7voS5KTfzcjQzAkeR_UWZ6y4cpc.roa
Signing time:             Thu 01 Jan 2026 14:18:43 +0000
ROA not before:           Thu 01 Jan 2026 14:18:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     57099
IP address blocks:        212.162.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:ec:d8:fe:b3:05:28:1a:6f:de:a7:13:b4:d4:c8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f266a0f986f21945c80d831567baf29620107adc
        Validity
            Not Before: Jan  1 14:18:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=eefa12e4a4dfcdc8d0cc091e47f51667acb87297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:ef:74:f0:3b:e7:46:cb:ba:a4:92:99:8d:
                    8a:d4:5c:a8:24:b7:bd:fc:fe:3c:8b:cf:ef:78:f3:
                    74:93:d5:9a:2a:84:d2:29:0a:26:b7:d1:61:a7:3f:
                    86:72:66:42:35:6d:e3:4e:87:e7:d2:53:1f:20:d4:
                    24:2a:97:e6:04:06:00:56:7f:2c:7c:4b:3e:1a:f0:
                    c1:de:10:78:f9:e8:18:6c:7f:ac:f6:9d:7c:d0:08:
                    91:71:c1:06:c2:1f:80:5e:3c:bf:b0:03:31:27:28:
                    0c:75:cf:ad:d4:89:e9:8b:58:ff:64:b7:f8:41:43:
                    d1:15:cf:01:d9:d2:91:01:a4:f1:6d:3e:c7:84:b3:
                    83:d6:bc:71:94:20:54:57:58:ca:06:65:ec:a2:69:
                    e0:a1:e8:ed:70:21:25:e1:08:eb:1b:5f:1d:f5:9a:
                    71:b3:e1:fd:2b:28:94:c9:45:0b:7a:e4:bf:1a:c7:
                    3e:06:06:da:14:15:5a:fa:07:e8:a7:ec:25:e2:48:
                    f8:b8:b3:15:52:92:b6:45:45:b0:49:94:04:60:d6:
                    a5:af:74:fb:6c:87:1d:ff:05:d4:a1:6a:ad:69:32:
                    72:21:00:4e:be:de:44:9d:3c:ad:40:8d:1d:e0:44:
                    f3:f1:21:a2:b2:ed:c6:04:c8:f2:3e:97:53:0f:26:
                    02:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FA:12:E4:A4:DF:CD:C8:D0:CC:09:1E:47:F5:16:67:AC:B8:72:97
            X509v3 Authority Key Identifier:
                keyid:F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/7voS5KTfzcjQzAkeR_UWZ6y4cpc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.162.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:80:df:77:34:b7:0c:f7:3d:88:64:e4:6e:c2:f6:be:3b:b3:
         13:01:70:1a:04:01:d6:8f:c3:15:2f:c0:3a:e1:85:38:b2:fc:
         2e:34:9f:77:c1:df:eb:02:e8:28:85:23:ee:12:63:ba:ac:d9:
         5f:50:28:da:01:d4:eb:76:8b:1c:04:20:46:f0:99:ca:f7:db:
         90:6f:db:2b:08:e8:37:f5:ba:70:57:a6:d9:f1:51:1c:d7:e7:
         ac:5d:89:f9:85:48:01:04:b0:4b:16:83:21:05:30:0a:e1:5c:
         09:8a:69:01:78:20:7b:ad:94:79:c0:4f:bd:f4:5a:06:b5:fd:
         35:04:03:09:11:8f:ee:8b:72:b7:b0:9c:c1:d6:91:8e:c6:1b:
         6b:2c:22:bd:39:fc:5c:36:99:9f:3c:de:c9:52:8f:33:87:30:
         8b:e7:3d:05:f8:3d:06:b2:33:b6:f2:05:51:70:8c:18:8f:1c:
         f2:8e:1c:28:2c:61:ce:d5:f8:6e:5f:bb:33:c4:fb:b8:a6:fc:
         cc:a5:0a:ef:10:39:ec:be:66:7d:cd:88:4b:3c:a8:1a:f6:b6:
         0a:89:5a:ed:a7:55:00:3d:6e:ba:66:a5:0b:01:51:c1:db:e4:
         37:e8:55:e7:7d:94:3e:e1:53:db:62:55:7f:d7:c2:2b:cf:00:
         e2:13:94:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:03:22 2026 by rpki-client