This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/rWvQJ8xO6-SPDys-uWKDLRUA43o.roa
File:                     rWvQJ8xO6-SPDys-uWKDLRUA43o.roa (raw, json)
Hash identifier:          zHIdrKZtf58ZqctGwQ2WHJ41AOjM3MPJlFFP2hW5ctw=
Subject key identifier:   AD:6B:D0:27:CC:4E:EB:E4:8F:0F:2B:3E:B9:62:83:2D:15:00:E3:7A
Certificate issuer:       /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
Certificate serial:       019B7C7F61525883912A246DACFF189A2767
Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/rWvQJ8xO6-SPDys-uWKDLRUA43o.roa
Signing time:             Fri 02 Jan 2026 02:18:01 +0000
ROA not before:           Fri 02 Jan 2026 02:18:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     208555
IP address blocks:        185.3.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7c:7f:61:52:58:83:91:2a:24:6d:ac:ff:18:9a:27:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3
        Validity
            Not Before: Jan  2 02:18:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=ad6bd027cc4eebe48f0f2b3eb962832d1500e37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:3c:17:8a:8e:34:90:7d:83:54:87:e1:37:
                    79:97:4d:76:8d:78:b6:d2:5e:95:4a:04:9d:97:65:
                    fe:1e:42:36:2f:34:15:07:e7:f1:47:e4:3e:37:72:
                    52:99:7b:dc:f8:77:b1:a6:60:f6:f8:e3:d7:63:0f:
                    f5:f5:53:96:52:f3:4d:94:0e:d1:ad:b6:48:45:b1:
                    99:c8:82:69:1f:34:2b:44:20:f8:bf:7e:36:5b:16:
                    c8:1f:45:a2:a1:00:fc:ce:1c:b7:47:ac:a2:7b:32:
                    d0:b7:27:21:91:1b:be:92:b8:ef:31:e4:fb:8f:3e:
                    6f:a8:66:f0:49:4f:f0:1d:ab:47:60:32:ca:21:75:
                    43:4a:ba:93:1c:de:9a:e1:c6:14:65:80:43:d4:74:
                    2c:2a:4d:73:63:ee:23:bb:8f:46:ed:4d:7f:6d:7c:
                    bd:b3:cb:bf:ba:90:59:20:76:f4:93:da:03:c9:da:
                    e9:d6:cb:f5:2b:3a:a4:08:c3:9d:28:e1:f2:0e:73:
                    b4:26:e6:23:a0:db:98:ef:6c:72:c8:c1:6b:c6:38:
                    f1:c5:e7:64:58:94:c7:3a:b5:a0:cc:00:8f:1c:55:
                    af:62:3e:1b:f1:47:5c:b9:16:97:fb:02:19:a6:67:
                    ea:30:60:04:c5:4a:f7:bd:b1:ac:a2:32:1c:82:39:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6B:D0:27:CC:4E:EB:E4:8F:0F:2B:3E:B9:62:83:2D:15:00:E3:7A
            X509v3 Authority Key Identifier:
                keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/rWvQJ8xO6-SPDys-uWKDLRUA43o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.3.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:9c:af:50:e1:12:20:93:f8:fd:4c:fb:2c:bb:eb:d7:a5:bc:
         04:9f:b9:ce:65:05:af:ba:01:d3:f7:f3:50:e4:b4:7d:46:ad:
         a0:c5:ae:7b:6b:a5:f8:b2:18:7d:49:b6:a7:3a:42:84:8b:5c:
         6b:78:02:4f:a8:ec:be:24:87:63:79:9f:02:cd:c8:f6:2e:c1:
         f8:af:03:76:91:83:06:b1:f9:f7:5f:08:3b:86:e4:c1:57:4d:
         45:b1:8e:b2:de:11:79:26:b6:29:aa:cb:df:a4:cd:a9:71:84:
         f0:e3:f6:9b:26:b3:13:11:20:55:d3:d8:d2:b9:99:8d:19:0e:
         b5:65:c0:d5:cf:59:e1:a6:7c:66:5e:68:92:aa:45:fc:87:df:
         ed:25:10:40:9b:26:d2:9c:b8:a0:e8:bf:18:96:2b:97:2e:7d:
         87:fb:0a:6d:51:50:7f:17:e6:fa:4d:41:a2:ff:12:87:47:79:
         f9:e3:00:bf:c0:e4:16:a5:bd:82:6e:4b:e0:01:20:98:04:0d:
         a2:6e:80:8c:e5:9e:2a:0e:b5:df:97:47:97:28:e5:09:5f:5b:
         a8:9b:90:0f:8d:4e:60:c4:07:82:7b:5d:e4:f1:ff:fc:4d:53:
         2f:99:5f:70:9a:0a:80:40:f7:32:73:38:30:84:30:3f:6d:0b:
         17:8f:47:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:29:22 2026 by rpki-client