This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/iRt9261buTm7shrgFKkm6kWLTGc.roa
File:                     iRt9261buTm7shrgFKkm6kWLTGc.roa (raw, json)
Hash identifier:          uNEt4c9Cjn1NASORr/E3c5O819CRsDanUsNnI47C9JY=
Subject key identifier:   89:1B:7D:DB:AD:5B:B9:39:BB:B2:1A:E0:14:A9:26:EA:45:8B:4C:67
Certificate issuer:       /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial:       019B77C74DB957ECB542E36823EE0FB4F995
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/iRt9261buTm7shrgFKkm6kWLTGc.roa
Signing time:             Thu 01 Jan 2026 04:18:28 +0000
ROA not before:           Thu 01 Jan 2026 04:18:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199199
IP address blocks:        176.97.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:c7:4d:b9:57:ec:b5:42:e3:68:23:ee:0f:b4:f9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
        Validity
            Not Before: Jan  1 04:18:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=891b7ddbad5bb939bbb21ae014a926ea458b4c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0f:e0:b6:43:22:de:a7:ce:b2:5d:b1:1b:12:
                    8a:53:9f:91:8f:0e:fd:f3:32:19:b9:d6:4a:b9:ca:
                    59:07:3a:bd:64:91:3c:c6:78:b1:bc:9e:d6:de:07:
                    12:e1:f9:c6:92:28:39:95:09:5c:b6:d6:d6:0d:44:
                    7d:e6:aa:45:a4:e0:0c:59:d8:22:07:52:e3:ea:f3:
                    f5:62:ec:4f:7d:73:61:fd:3d:1a:7b:24:97:5e:54:
                    0f:a2:16:ef:20:f7:f8:00:b2:d1:e9:43:cc:33:1b:
                    49:92:1f:1a:3c:bc:fb:cf:7e:0d:06:2e:7f:da:f5:
                    87:d0:38:88:54:f9:f9:77:0c:54:04:38:c6:13:f8:
                    3f:98:b6:f2:a7:f5:36:05:82:1f:45:90:ed:ec:ba:
                    7d:4a:a4:e3:13:ce:fb:c6:2e:15:0d:44:8c:a2:23:
                    8d:b5:4f:2d:52:b0:00:de:9d:08:f7:51:21:f3:50:
                    4f:20:57:3e:d9:5f:1d:e4:59:0a:c7:c0:7d:de:43:
                    10:9c:1a:eb:ac:3a:f3:90:60:0c:ba:91:3c:72:4d:
                    5e:37:15:cb:be:bb:87:eb:9b:04:1d:52:28:b4:e6:
                    4f:18:11:9a:40:fb:90:52:ba:bc:ac:c2:ea:eb:91:
                    fd:bf:d9:47:23:b9:33:88:2d:94:1c:04:01:a3:7e:
                    64:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1B:7D:DB:AD:5B:B9:39:BB:B2:1A:E0:14:A9:26:EA:45:8B:4C:67
            X509v3 Authority Key Identifier:
                keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/iRt9261buTm7shrgFKkm6kWLTGc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.97.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:14:bf:8d:3e:f8:6f:e5:63:06:ed:91:1e:8d:64:81:4d:e6:
         40:fa:2c:37:67:6c:f0:13:81:2b:c1:55:a3:a8:73:58:25:f8:
         10:de:b2:3c:68:c4:30:db:40:ff:da:7a:5b:16:0a:da:db:43:
         8d:d5:ad:9f:35:19:84:22:2d:4a:e3:83:3a:aa:a9:81:ee:cc:
         4d:ac:c6:e8:9b:57:9c:4d:d6:46:bf:e9:79:5e:27:ef:c5:d3:
         3e:d2:57:c3:8f:65:cf:2f:e2:4b:81:a2:01:4b:a0:cc:33:27:
         89:7e:af:39:1a:05:0e:ca:ec:1e:4e:be:09:c6:c4:f9:d1:3d:
         ad:ee:0d:cf:bb:4f:b8:68:46:ae:9e:a0:48:be:f6:98:7f:ba:
         c5:0c:17:ac:a1:aa:46:ea:9a:40:15:91:4e:3b:b6:63:33:c8:
         24:7f:a5:91:21:3a:c5:1d:f9:59:3b:9f:18:a9:71:6d:91:c9:
         6a:1d:3d:15:93:59:e7:b2:ed:a9:7d:27:d9:09:93:6e:cf:98:
         c2:ec:d9:30:0b:16:8a:ad:3f:e1:01:2f:47:5e:61:92:aa:4d:
         0f:39:87:f6:e0:38:f4:74:39:4f:c2:69:d5:07:ef:f3:e1:19:
         00:51:15:1a:50:2c:a3:0c:75:12:79:2a:f1:e3:e3:7d:2e:90:
         09:8b:43:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:43:07 2026 by rpki-client