This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/b7voUZ91irBy-SIdwQFXM1Mmisg.roa
File:                     b7voUZ91irBy-SIdwQFXM1Mmisg.roa (raw, json)
Hash identifier:          u5pJ8/7+RE55Lx1+l+Oy8gg74nJnCPyFku6WokUubNU=
Subject key identifier:   6F:BB:E8:51:9F:75:8A:B0:72:F9:22:1D:C1:01:57:33:53:26:8A:C8
Certificate issuer:       /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial:       019B7AC8BE1332671ED6249529974DB310B8
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/b7voUZ91irBy-SIdwQFXM1Mmisg.roa
Signing time:             Thu 01 Jan 2026 18:18:54 +0000
ROA not before:           Thu 01 Jan 2026 18:18:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     47692
IP address blocks:        193.84.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7a:c8:be:13:32:67:1e:d6:24:95:29:97:4d:b3:10:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
        Validity
            Not Before: Jan  1 18:18:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6fbbe8519f758ab072f9221dc101573353268ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:2d:f2:0c:5e:7a:96:7c:a1:79:ea:37:da:
                    0b:98:bb:bc:18:bd:2c:00:29:e8:7f:33:0f:9c:40:
                    92:67:1f:c2:74:e5:a3:0b:60:c6:0d:8f:08:38:96:
                    74:96:e7:ee:39:65:06:14:28:a5:80:da:8e:77:56:
                    c4:cc:00:95:e6:79:d8:3e:81:ff:52:83:69:6f:e9:
                    c7:63:b2:28:e4:59:a4:3f:22:24:f3:a1:47:ed:a1:
                    5d:7a:09:15:17:62:34:12:f3:aa:53:be:d2:e5:13:
                    30:80:ff:fc:88:25:77:e4:cf:bc:21:d3:48:7d:02:
                    a5:a4:14:b1:65:98:f6:77:f9:67:7d:70:ea:af:8c:
                    fa:fb:d2:f8:ee:a8:42:27:5b:c8:14:7e:85:cf:88:
                    b8:45:c1:68:5f:0c:ce:53:ef:a2:56:29:db:4d:28:
                    b0:7c:38:c8:a4:73:b1:05:28:ce:28:f2:bb:2e:8d:
                    d5:13:27:c7:c2:70:09:c6:aa:4d:56:b0:5c:ae:05:
                    72:27:03:52:d9:22:89:fb:0e:70:41:32:b7:0a:7c:
                    24:d8:62:c9:72:ff:a0:bf:76:72:ae:75:d1:4f:dc:
                    86:39:ff:45:67:98:76:d9:ae:7a:83:6d:52:b7:06:
                    cb:1b:9d:dd:7b:e2:27:1f:f9:3d:14:15:a0:f0:f2:
                    5d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BB:E8:51:9F:75:8A:B0:72:F9:22:1D:C1:01:57:33:53:26:8A:C8
            X509v3 Authority Key Identifier:
                keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/b7voUZ91irBy-SIdwQFXM1Mmisg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8c:c7:5e:3c:fe:28:73:fb:6d:77:42:16:f7:59:21:71:f5:
         58:0d:2d:06:ca:84:f4:74:73:a5:b9:ef:49:23:45:b2:ad:30:
         55:f4:eb:95:66:c0:f1:47:d0:f8:de:13:b9:08:e0:d5:30:a6:
         95:5c:aa:73:1c:7c:af:be:18:c2:7d:4a:7f:63:2a:3a:46:ac:
         5e:40:11:dc:09:ba:56:f1:0f:6d:77:b1:87:81:e5:85:96:cd:
         44:1c:1c:81:c4:f1:5e:a1:e8:4b:19:31:2f:20:af:a0:1d:d1:
         a5:ca:5e:c3:b8:5e:4b:23:8f:cb:87:4a:5d:37:08:b5:d5:c0:
         95:0d:ab:6f:f2:74:a7:92:5c:43:7f:48:be:98:34:09:de:67:
         e2:1c:3d:8a:2f:24:e0:6b:7e:3b:90:14:00:6c:c3:5d:65:99:
         46:10:fb:f6:fd:aa:7c:6b:42:cc:37:71:ee:44:55:49:41:b5:
         e2:84:0b:3a:71:f2:f4:a9:c4:df:d9:c2:dc:54:4d:13:03:c1:
         96:08:5c:14:92:52:f8:5e:d6:b2:ea:73:95:ae:6a:a4:04:91:
         8c:bc:c3:5f:8b:df:22:de:e3:98:31:84:ff:13:33:79:35:da:
         37:0e:06:c9:81:ef:93:1e:bb:45:68:aa:e7:b5:3a:ff:ec:c7:
         3c:01:2d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:36:27 2026 by rpki-client